This policy explains what Rheenu collects, why, and the control you have over it. We ask for as little as possible, and your health-related inputs are never sold or used for advertising.
Account details: your name, email address and password (stored hashed by Firebase Authentication — we never see it). If you sign in with Google, we receive your name, email and profile photo.
Wellness inputs you choose to give us: your goal, quiz answers, weekly habit check-ins and notification preferences. These are self-reported wellness inputs, not clinical records, but we treat them as sensitive.
Community activity: questions and answers you post, votes and reports. Posts are public to other signed-in members under the name on your account.
Technical data: basic log and device information needed to keep the service secure and working.
To run the service: create your account, build your plan, show your check-ins, and let you take part in the community and live sessions.
To communicate: reset emails, replies to your questions, session reminders and the weekly digest. You control the optional ones in Settings, and every email has an unsubscribe link.
To keep people safe: moderating posts, reviewing reports, and preventing abuse or spam.
We do not sell your personal information, and we do not use your health-related inputs for advertising.
Rheenu runs on Google Firebase (Authentication, Firestore, Hosting). Google processes and stores this data on our behalf as our infrastructure provider.
If we add an email provider or error-monitoring service, they will process only what is needed for that purpose, under contract.
Data may be stored on servers outside your country. Where required, transfers rely on appropriate safeguards such as standard contractual clauses.
We keep your account data while your account is open. If you delete your account, we remove your profile and wellness inputs within 30 days, except where we must keep something to meet a legal obligation.
Community posts may remain visible after account deletion, shown as from a removed member, so discussions other people rely on stay coherent. Tell us if you want your posts removed too.
You can access, correct, export or delete your personal data. Much of it you can change directly in Settings; for anything else, email us and we will respond within 30 days.
Depending on where you live, you may also have the right to object to or restrict certain processing, and to complain to your local data protection authority.
Rheenu is not intended for children under 16, and we do not knowingly collect their data.
Access is protected by authentication and server-side security rules, so members can only read and write what they are entitled to. Traffic is encrypted in transit.
No system is perfectly secure. If a breach ever affects your personal data, we will notify you and the relevant authority as required by law.