Privacy Policy

Effective: 26 July 2026 · Last updated: 26 July 2026

1. Using Haftra without an account

On first launch you can choose to continue without creating an account. In that mode your injections, weight, side effects, blood glucose readings, daily tracking and settings are stored only in your phone's own storage. That data is never transmitted to us or to any server. Deleting the app deletes it.

2. Data processed when you create an account

If you want to use the anonymous community feature, you can create an account with Apple or with an e-mail address. Even with an account, your injections, weight, blood glucose readings, daily tracking, treatment settings and photos never leave your device — they are not uploaded to any server. Only the following is processed:

These records are protected in the database by row-level security: technically, only your own session can read your own rows. No other user can query your records.

3. Apple Health

With your permission, Haftra reads only weight and blood glucose from Apple Health, so you do not have to re-enter what your smart scale or glucose app already recorded.

• Haftra never writes to Apple Health; it only reads.
• You can revoke this at any time in iOS Settings › Health › Data Access & Devices.
• Apple Health data is never used for advertising or marketing; Apple prohibits this outright.

4. Anonymous community signals

If you choose to share a side effect with the community, its name, severity and date are recorded alongside your medication. The feature is protected as follows:

• The community screen shows counts and average severity only; nobody can see individual entries.
• A side effect does not appear until at least 3 different people have reported it. A single person's report is never exposed.
• Other users cannot see your identity, your e-mail, or any of your other records.
• You can delete your own community reports from inside the app.

5. Progress photos

Progress photos are stored on your device only, with file protection enabled. Even with an account, these photos are not synced, not uploaded, and cannot be seen by us.

6. Who your data is shared with

We do not sell your data and we do not share it with anyone for marketing. We use a single service provider:

Beyond that, no analytics, advertising, crash-reporting or tracking service is used. The app's only third-party dependency is Supabase's official client library.

We may have to disclose data where legally compelled (for example a court order). If such a request arrives we will inform you, unless the law forbids it.

7. Retention and deletion

• Your tracking records live on your device, so deletion is yours too: removing the app is enough.
• With an account, Settings › Permanently delete account permanently removes your account, your e-mail, your name and every community report you shared from the database.
• This is irreversible, requires no approval from us, and takes effect immediately.
• If you leave your account in place, your records are retained until you delete them.

8. Exercising your rights

Depending on where you live, you may have rights under the GDPR and/or Turkey's Law No. 6698 (KVKK) to access, correct, delete, restrict the processing of, and port your data. For access and deletion the app itself is the fastest route: the data is already visible to you and the delete button is in Settings. For anything else, write to haftra@jarviswdesign.com.

9. Children

Haftra is intended for tracking a prescribed treatment and is not designed for users under 18. We do not knowingly collect data from anyone under 18.

10. Changes to this policy

If we update this policy we will change the date on this page, and we will notify you in the app for any significant change. You can request the previous version from the support address.

11. Contact

For anything privacy-related:

haftra@jarviswdesign.com