Privacy Policy
This is a draft. It has not had legal review yet and will change before Hecate launches. Highlighted text still needs filling in.
Hecate is a movement and strength companion for the menopause transition. It runs on what you tell it, so this page sets out exactly what that is, why it's needed, and how to remove it.
The short version: we collect only what Hecate needs to put together your practice. We don't sell your information, we don't show ads, and we don't share your information with anyone for advertising. There are no third-party analytics or tracking tools in the app.
Who we are
Hecate is made by [LEGAL NAME OF OWNER OR COMPANY], [MAILING ADDRESS] ("Hecate", "we", "us"). For anything about your privacy, email hello@tryhecate.com.
What we collect
Your account
You sign in with Apple or Google. We receive the email address that service gives us (with Apple this may be a private relay address) and, if you share it, your name. We never see or store a password.
What you tell Hecate about yourself
- Where you are in the transition (for example, perimenopause or post-menopause), if you choose to set it.
- What you'd like from your practice, chosen when you first open the app.
Your check-ins
When you check in, you tell Hecate how today feels, for example achy, foggy, running hot, or feeling strong. Some of these describe how your body or mood is doing, so we treat them as health information. They are used only to shape the cards you're offered that day and in the days after.
Your practice
- Which cards were offered to you, which you opened, finished, left early, or saved.
- How long you spent with a card.
- Your progress through the galaxy: which areas are lit, which you've aimed at.
- When you used Hecate, and your time zone, so a new day starts at your midnight.
Kept only on your phone
Some things never leave your device: your sound setting, and the time you agreed to the medical disclaimer.
Subscriptions
Payments are handled entirely by Apple or Google. We never receive your card or bank details. We receive whether your subscription is active and when it renews or ends, through our subscription provider, RevenueCat. [Confirm once subscriptions are live.]
What we don't collect
Hecate doesn't access your location, contacts, photos, microphone, or Apple Health or Google Fit data. It doesn't track you across other apps or websites.
How we use it
- To choose the cards in your daily practice and remember your progress.
- To keep your account working and keep it secure.
- To find and fix problems.
- To understand, in aggregate, how Hecate is used so we can improve it. This is internal only. It is never shown back to you as tracking, and never compared with other people.
- To reply when you contact us.
Hecate does not send push notifications. If you sign up for our newsletter, that is separate, opt-in, and you can unsubscribe at any time.
Who processes it for us
We use a small number of service providers to run Hecate. They process information only on our instructions:
- Supabase: our database and sign-in service. Your account and practice data are stored on their servers in the United States.
- Cloudflare: delivers the app's audio and images, and hosts this website.
- Apple and Google: sign-in, app delivery, and payments, under their own privacy policies.
- Expo: delivers app updates to your phone.
- RevenueCat: keeps track of your subscription status.
We may disclose information if the law requires it, or to a buyer if Hecate is ever sold, in which case this policy would continue to apply to your information.
How long we keep it
We keep your information while you have an account. When you delete your account, it is closed straight away and permanently erased after 30 days. If you sign back in during those 30 days, your account is restored as it was. After that, it can't be recovered.
Deleting your account
In the app, open Settings, then Account, then Delete account. If you no longer have the app, see how to delete your account without it.
Deleting your account doesn't cancel a subscription. Cancel that in your App Store or Google Play settings.
Your choices and rights
You can ask us for a copy of your information, ask us to correct it, or ask us to delete it. Email hello@tryhecate.com from the address on your account and we'll reply within 30 days. We won't treat you differently for asking.
[LEGAL REVIEW: state consumer health data laws (Washington My Health My Data Act, Nevada, Connecticut), California (CCPA/CPRA, CMIA), and GDPR/UK GDPR if offered outside the US. These may require a separate consumer health data notice and specific consent wording.]
Security
Your information is encrypted in transit, and each account can only read its own data. No system is perfectly secure, but we take reasonable steps to protect what you share with us, and we'll tell you if a breach affects you.
Age
Hecate is for adults. It is not meant for anyone under 18, and we don't knowingly collect information from children.
Changes to this policy
If we change this policy, we'll update the date at the top. If a change affects how your information is used, we'll tell you in the app before it takes effect.
Contact
Email hello@tryhecate.com or write to [MAILING ADDRESS].