Effective May 11, 2026

Privacy Policy

How Katika Care collects, uses, and protects the information you share.

Katika Care ("Katika," "we," "us," or "our") provides a mobile app that helps you and your household track personal health information. We take the privacy of that information seriously. This policy explains what we collect, why we collect it, how we use it, and the choices you have.

1. Information we collect

Information you give us directly

Account details: first name, last name, email address, password, optional profile photo, date of birth, biological sex, height.
Household + family member profiles: names, ages, relationships, photos, emoji avatars, and per-member privacy settings.
Health readings: vital sign measurements you log or sync from connected devices — blood pressure, heart rate, weight, temperature, blood oxygen, blood glucose, ECG, heart rate variability, sleep, and similar.
Wellness check-ins: subjective ratings for sleep, stress, energy, mood, plus optional free-text notes.
Medications: names, dosages, schedules, prescriber names, notes, and adherence (whether you marked a dose as taken).
Eye prescriptions: sphere, cylinder, axis, add, pupillary distance, prescriber, and optional photos of paper prescriptions.
Alerts + rules: thresholds you configure for vitals and the resulting alerts.

Information we collect automatically

Device + diagnostic data: device model, operating system version, Katika app version, crash logs, and basic usage counters used to keep the app stable.
Paired peripherals: when you pair a Bluetooth health device, we store its identifier so the app can reconnect automatically.
Push notification token: a per-install identifier issued by Apple or Google that lets us deliver health alerts and household-activity notifications.

Information from third parties

If you sign in with Google or Apple, we receive your basic profile (name, email) so we can create your Katika account. We do not access any other data from those accounts.
If you sync from Apple Health, Google Health Connect, Withings, or Oura, we receive only the data types you explicitly authorize.

2. How we use information

To provide the core features of the app — recording, displaying, and analyzing your health data.
To send health alerts you configure (e.g. high blood pressure warnings) and household-activity notifications you opt into.
To process subscriptions through Apple, Google, or Stripe.
To diagnose crashes and improve stability.
To comply with legal obligations.

We do not sell your data. We do not share your data with advertisers. We do not use your health data to train any AI model.

3. AI assistant

Some Katika builds include an in-app AI assistant. When that feature is enabled, your questions and the relevant subset of your logged data are sent to a third-party model provider (Anthropic) to generate a response. The provider does not retain or train on your data. Builds released to consumers under HIPAA-eligible jurisdictions do not enable the AI assistant unless a Business Associate Agreement is in place.

4. How we share information

We share data only with the following categories of recipients:

Hosting + infrastructure providers who store data on our behalf (Supabase, Google Cloud, Apple). All are bound by confidentiality and security obligations.
Payment processors (Apple, Google, Stripe, RevenueCat) when you subscribe.
Crash + diagnostic providers (Sentry). Stack traces are scrubbed of personally-identifying values before transmission.
Push delivery (Apple Push Notification service and Google Firebase Cloud Messaging) when you have notifications enabled.
People you choose — when you generate a share link or invite a household member, recipients you select can see what you shared.
Legal obligations — when required by law, subpoena, or to protect against serious threats to safety.

5. Your choices

Access + edit: every record you create is visible and editable within the app.
Export: tap any measurement → Export, or use Settings → Data & sync → Export readings to download a CSV.
Delete: Settings → Privacy → Delete account permanently removes your household data within 30 days.
Notifications: Settings → Notifications, or the system Settings on your device.
Camera, photos, Bluetooth, location: each is requested only when you use a feature that needs it; you can revoke any of them in your device settings.

6. Children

Katika is intended for users 13 and older. Parents and guardians may create profiles for younger family members as part of their household and are responsible for managing those children's data.

7. Security

All Katika traffic uses TLS 1.2 or higher. Data at rest in our databases is encrypted. Row-level security policies prevent users from accessing households other than their own. Biometric (Face ID, Touch ID, fingerprint) or PIN locks are available in Settings → Privacy.

8. Where data is stored

We host data with providers in the United States. By using Katika you consent to that storage. If you reside in a region with cross-border data transfer rules, your continued use of the app constitutes acknowledgement of this transfer.

9. Retention

We keep your data for as long as you have an account. When you delete your account, we delete or anonymize personal data within 30 days, except where retention is legally required (e.g. payment records).

10. Health disclaimer

Katika is not a medical device, does not provide medical advice, and cannot diagnose or treat any condition. Always consult a licensed healthcare provider for medical decisions. If you are experiencing a medical emergency, call 911 or your local emergency number.

11. Changes

We may update this policy. Material changes will be announced in the app at least 14 days before they take effect. Continued use of Katika after the effective date constitutes acceptance.

12. Contact

Questions, requests, or concerns? Email privacy@katika.app.