Privacy Policy

1. Introduction

Tahana — a product of HeroLabs, a trade name of 17981341 Canada Inc. ("we", "us", "our") — is committed to protecting your privacy and the privacy of your household. This Privacy Policy explains how we collect, use, disclose, and safeguard information when you use our service at tahana.app ("the Service").

By using the Service, you agree to the collection and use of information described in this policy. If you do not agree, please do not use the Service.

2. Information We Collect

2.1 Information You Provide Directly

• Account information: Name, email address, and password when you create an account.
• Financial data: Transaction names, amounts, dates, categories, account balances, payment methods, and notes you enter in the Budget Calendar.
• Calendar events: Event names, dates, times, locations, notes, and attendees you add to the Family Calendar.
• Meal and shopping data: Recipes, meal plans, ingredients, and shopping lists.
• Health data: Medications, dosages, cycle data, symptoms, weight, sleep logs, exercise logs, water intake, and health journal entries. This data is treated with heightened sensitivity.
• Documents and files: Files, images, and documents you upload to the Service.
• Notes and journal entries: Sticky notes, personal journal content, and other personal writing.
• Gift registry and valuables: Wishlists, gift descriptions, and valuable items you log.
• Contacts: Names, phone numbers, emails, and other contact details you store.
• Communications: Messages you send through household messaging, and emails you send to our support team.
• Household members: Email addresses of people you invite to your household.

2.2 Information We Collect Automatically

• Log data: IP address, browser type, operating system, pages visited, timestamps, and referring URLs.
• Device information: Device type, screen size, and browser version.
• Usage data: Features used, frequency of use, and session duration — used to improve the Service.
• Cookies and local storage: Session tokens and preferences stored in your browser. See Section 9 for cookie details.

2.3 Payment Information

We do not collect or store your credit card details. Payment processing is handled by Stripe, Inc. We receive only confirmation of payment, the last 4 digits of your card, and your billing country — never your full card number, CVV, or bank account details.

3. How We Use Your Information

We use the information we collect to:

• Provide, operate, and maintain the Service;
• Authenticate your identity and keep your account secure;
• Process subscription payments and send billing receipts;
• Send transactional emails (invitations, password resets, reminders);
• Respond to support requests and communications;
• Improve and develop new features based on aggregate, anonymized usage patterns;
• Detect and prevent fraud, abuse, or security incidents;
• Comply with legal obligations.

We do not sell, rent, share, or monetize your personal information or User Content. We do not use your personal data for advertising purposes.

4. Household Sharing

Tahana is designed for household use. When you invite household members, certain data is shared between household accounts by design:

• Shared: Family Calendar, Shopping Lists, Meal Plans, Household Messaging, Event details, Household Contacts, Gift Registry (shared wishlists).
• Private (member-only): Health tracking (all sub-modules), Personal Journal, individual Documents, personal sticky notes.

Household members can see the name and email of other members in the household. Each member is responsible for the content they share within the household.

The household account owner (subscriber) can remove members from the household at any time. Removed members lose access to all shared household data.

5. Disclosure of Your Information

We do not sell, trade, or transfer your personal information to third parties except in the following limited circumstances:

5.1 Service Providers

We share limited data with trusted service providers who help us operate the Service. All service providers are bound by confidentiality agreements and may only use data to perform services on our behalf:

• Supabase (database hosting and authentication) — stores your encrypted data on PostgreSQL.
• Vercel (application hosting) — serves the app and provides anonymized, aggregate analytics.
• Stripe (payment processing) — handles subscription billing.
• Resend (transactional email) — sends invitation, notification, and support emails.
• Anthropic (AI assistant, receipt scanning, and food-photo logging) — processes the messages and images you choose to send to these features. Anthropic does not use API data to train its models. See Section 5.2 for details.
• OpenAI (voice playback) — converts AI assistant replies to audio only when you tap the voice/read-aloud feature. Only the reply text is sent.
• Mapbox (mapping) — used for location features; only query data is sent, not stored user locations.

5.2 AI Features (Optional)

Tahana includes optional AI features: the household assistant, receipt scanning, and food-photo logging. These only process data when you actively use them:

• Messages you type to the AI assistant, and the household data needed to answer them (e.g. your shopping list when you ask about groceries), are sent to Anthropic for processing.
• Receipt images you scan are sent to Anthropic to extract the transaction details, then discarded from the AI provider after processing.
• Food photos you choose to log in the Health module are sent to Anthropic to identify the items and estimate their nutritional values, then discarded from the AI provider after processing. Because this relates to your health, it is processed only on your explicit choice to use the feature — see Section 6 (Health Data).
• If you use voice playback, the assistant's reply text is sent to OpenAI to generate audio.

Our AI providers are contractually prohibited from using your data to train their models. AI conversations are not used for advertising or profiling. If you never use the AI features, none of your data is sent to AI providers.

5.3 Legal Requirements

We may disclose your information if required by law, regulation, legal process, or governmental request, or to protect the rights, property, or safety of Tahana, our users, or the public.

5.4 Business Transfers

In the event of a merger, acquisition, or sale of all or a portion of our assets, your information may be transferred as part of that transaction. We will notify you by email and post a notice on the Service before your information becomes subject to a different privacy policy.

6. Health Data

Health data you enter (medications, cycle information, symptoms, sleep, weight, food and water logs, health journal) is treated with heightened sensitivity. This data is:

• Private by default — not visible to other household members;
• Encrypted at rest in our database;
• Never used for advertising, research, or any purpose other than displaying it back to you;
• Never sold, and never shared with healthcare providers, insurers, employers, or data brokers.

The one exception is a feature you have to actively choose: if you log a meal by photo, that photo is sent to our AI provider to identify the items and estimate their nutritional values, then discarded after processing (Section 5.2). It is not used to train their models. If you enter meals manually instead, no health data leaves our systems.

Tahana is not a medical device and is not intended to provide medical advice. Do not use Tahana as a substitute for professional medical care.

7. Data Security

We protect your data with the following measures:

• All data is transmitted over HTTPS/TLS encryption;
• Data is encrypted at rest in our PostgreSQL database;
• Row-level security (RLS) ensures users can only access their own data at the database level;
• Access to production systems is limited to authorized personnel only;
• Authentication uses industry-standard hashing (bcrypt/argon2) for passwords.

No method of transmission or storage is 100% secure. While we use commercially reasonable security measures, we cannot guarantee absolute security. Please use a strong, unique password and enable two-factor authentication when available.

8. Developer and Admin Access

We believe transparency about internal access is just as important as protecting against external threats.

Tahana has no admin panel, dashboard, or internal tool that allows anyone on our team to browse, search, or view your transactions, health data, meal plans, documents, or any other personal information.

Row Level Security (RLS) is enforced at the database level. This means that even our own application code can only access your data in the context of your authenticated session. There is no "view all users" capability built into the product.

The only server-side processes that access user data are fully automated, with no human in the loop:

• Bill reminder emails (only if you enable reminders in Settings);
• Stripe subscription management (billing status only, not your personal data);
• Account provisioning when you first sign up (seeding your default categories).

We do not read, analyze, review, or monitor individual users' personal data for any reason — including debugging, analytics, or curiosity. If we ever need to investigate a technical issue involving your account, we will contact you first and request your explicit permission.

This is a deliberate architectural decision, not a policy promise. We built Tahana so that viewing your data would require bypassing the security controls we put in place — not just clicking a button.

9. Cookies and Tracking

Tahana uses the following types of cookies and browser storage:

• Session cookies: Required to keep you logged in. These expire when you close your browser or after a set period of inactivity.
• Preference storage: Local browser storage for UI preferences such as theme and sidebar state.
• Analytics: We may use anonymized, aggregate analytics (e.g., Vercel Analytics) to understand overall usage patterns. No personal identifiers are collected for analytics.

We do not use advertising cookies, tracking pixels, or cross-site tracking of any kind. You can clear cookies and site data in your browser settings at any time; doing so will log you out of Tahana.

10. Data Retention

• Active accounts: Data is retained for as long as your subscription is active.
• After cancellation: Account data is retained for 30 days after subscription ends, during which you may export your data. After 30 days, all data is permanently deleted.
• Deletion requests: If you request account deletion, all personal data will be permanently deleted within 30 days of the request. Certain information may be retained in anonymized, aggregated form or where required by law.
• Backup systems: Deleted data may persist in encrypted backups for up to 90 days before being overwritten.

11. Your Rights

Depending on your location, you may have the following rights regarding your personal information:

• Access: Request a copy of the personal information we hold about you.
• Correction: Request correction of inaccurate or incomplete information.
• Deletion: Request deletion of your personal information.
• Portability: Export your data in a machine-readable format from within the app.
• Objection / Restriction: Object to or request restriction of certain processing activities.
• Withdrawal of consent: Where we rely on consent, you may withdraw it at any time.

To exercise any of these rights, email us at hello@tahana.app. We will respond within 30 days.

11.1 Legal Bases (EEA / UK)

Where the GDPR or UK GDPR applies, we process your personal data on these legal bases: performance of a contract (providing the Service you signed up for), consent (health data you choose to enter, and optional features like AI and reminders — you may withdraw consent at any time), legitimate interests (securing the Service and preventing fraud), and legal obligation (tax and accounting records). Health and cycle data is a special category of data under GDPR Article 9 — we process it only because you explicitly choose to enter it, and only to display it back to you, except where you choose to use food-photo logging, which sends the photo to Anthropic to identify the items (Section 5.2).

11.2 Region-Specific Rights

• EEA / UK: You have all the rights listed above under the GDPR / UK GDPR, and you may lodge a complaint with your local data protection authority.
• Canada: We comply with PIPEDA and, for Quebec residents, Law 25. You may contact the Office of the Privacy Commissioner of Canada or the Commission d'accès à l'information du Québec.
• California (US): Under the CCPA/CPRA you have rights of access, deletion, correction, and portability. We do not sell or share personal information as defined by the CCPA, so there is nothing to opt out of.
• Australia: We handle personal information consistent with the Australian Privacy Principles. You may complain to the Office of the Australian Information Commissioner.

Wherever you live, we extend the same core rights — access, correction, deletion, portability, and objection — to all users.

12. Children's Privacy

Tahana is not directed at children under 13. We do not knowingly collect personal information from children under 13. If we become aware that we have collected personal information from a child under 13 without parental consent, we will delete it promptly.

If you believe we have inadvertently collected information from a child under 13, please contact us at hello@tahana.app.

13. International Data Transfers

Your information is stored and processed in Canada and the United States by our service providers (primarily Supabase on AWS). If you are accessing the Service from outside North America, your information will be transferred to and processed in these jurisdictions, which may have different data protection laws than your country.

Where required (for example, for transfers from the EEA, UK, or Switzerland), these transfers are protected by appropriate safeguards such as the European Commission's Standard Contractual Clauses, the UK Addendum, and/or certification under the EU–US Data Privacy Framework by our providers. You may request more detail about these safeguards at hello@tahana.app.

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. When we make material changes, we will notify you by email and by posting a notice in the Service at least fourteen (14) days before the changes take effect. The date at the top of this page indicates when the policy was last revised.

Your continued use of the Service after changes take effect constitutes your acceptance of the revised Privacy Policy.

15. Contact Us

For questions, requests, or concerns about this Privacy Policy, contact us: