Privacy Policy

Taharah
Last updated: 8 August 2026

Taharah holds some of the most personal information a person has: her cycle, her symptoms, her journal, and her prayers. This policy says plainly what we collect, why, and what we never do with it.

We do not sell your data. We do not share it with advertisers. We do not use it to build a profile of you.

Who we are

GenesisFlō is the data controller for Taharah. Contact: tech@genesisflo.com.

What we collect

Account information. Your email address, and a password we never see (it is handled by Google Firebase Authentication). Optionally a display name, which is used only inside your own journal and is never shown to anyone else.

Health information you enter. Period start dates, cycle and period lengths, daily logs of flow, symptoms, and mood. This is sensitive health data and we treat it that way.

Journal entries. Whatever you write. Private to your account.

Preferences. Your Scripture translation, appearance setting, relationship status, and notification choices.

Prayer requests. If you submit one, we store the text, the category, and — separately from the visible request — the account that submitted it. That link is used only for moderation and blocking. It is never readable by other users, and the security rules that enforce this are tested.

Blocked people. A list of opaque references for accounts you have blocked. It contains no names or identifiers you could resolve to a person.

We do not collect your location, your contacts, your photos, advertising identifiers, or analytics on how you move through the app.

Why we hold it

| What | Why | Basis | |---|---|---| | Account details | To sign you in and keep your data yours | Contract | | Cycle and symptom logs | To calculate predictions and phase-matched content | Your explicit consent | | Journal entries | To store what you wrote so you can read it back | Contract | | Prayer requests | To show them on the wall after moderation | Your explicit consent | | Submitter link, reports, blocks | To moderate the wall, act on reports, and enforce blocks | Legitimate interest in a safe community; legal obligation | | Email address | Password resets and essential service notices | Contract |

You can withdraw consent by deleting the relevant data or your whole account.

Where it lives

On your device, and in Google Firebase (Cloud Firestore, Firebase Authentication, Cloud Functions), which stores data on Google Cloud infrastructure in the United States. Data is encrypted in transit and at rest.

Firebase is our only third-party processor. We have no advertising SDKs, no analytics SDKs, and no trackers.

Scripture, articles, nutrition guidance, and legal documents are bundled inside the app, so reading them sends nothing anywhere.

Who can see what

• Your cycle logs and journal: only you. Security rules scope every read and write to your own account.
• Your prayer requests, once approved: their text is visible to signed-in members. Your identity is not attached to them anywhere a device can read.
• Moderators: can see submitted prayer requests, reports, and — only when acting on abuse — the account behind a request.
• Nobody else.

How long we keep it

Until you delete it. Deleting your account removes your profile, cycle logs, and journal entries.

Prayer requests you have already posted, and moderation records (reports, decisions, blocks), are kept after account deletion where we need them to keep the wall safe and to show we acted on reports. These records do not contain your journal or health data.

Your rights

You can, at any time, from Settings → Data & Privacy:

• Export everything we hold about you as a JSON file;
• Delete your account and your data permanently.

Depending on where you live you may also have the right to correct your data, restrict or object to processing, and complain to your data protection authority. Email tech@genesisflo.com and we will respond within 30 days.

Children

Taharah is not intended for children under 13, and we do not knowingly collect their data. If you believe a child has created an account, email us and we will delete it.

Health data and Apple's rules

We confirm, as Apple requires: we do not use health data for advertising or marketing, we do not share or sell it to third parties including data brokers or information resellers, and we do not disclose it to anyone without your explicit permission.

Not a medical service

Taharah is an educational and spiritual tool, not a medical device and not a healthcare provider. We are not a covered entity under HIPAA. Predictions are estimates and must not be relied on as contraception.

Changes

If we change this policy materially, we will ask you to accept the new version in the app before you continue.

Contact

tech@genesisflo.com