At a glance
- Your account needs an email address. A display name and areas of focus are optional.
- Account information is used for access, your saved settings, security, and support.
- Contact R. Charan at contact@herday.life for privacy questions or requests.
This summary helps you navigate the document. Read the full text below.
Who is responsible for your information?
HerDay Life operates HerDay.life from India. In this notice, “HerDay”, “we”, and “us” mean HerDay Life. This notice describes the account release of our website and application, including registration, sign-in, profile setup, preferences, and security settings.
HerDay LifeCountry of operation: IndiaBusiness address: Sullurpeta, Andhra Pradesh, India – 524121Privacy and grievance contact: R. Charancontact@herday.lifeHerDay Life is the operator name used for this service. No company registration number or corporate form is represented by that name.
Information used by this release
| Information | Purpose and choice |
|---|---|
| Email address and authentication information | Required to create and secure your account, verify your email, and recover access. Supabase processes passwords, password hashes, verification codes, sessions, and authenticator information. Passwords and codes should never be sent to support. |
| Display name, timezone, and locale | Used to personalize your account and display time correctly. A display name is optional; the initial timezone is Asia/Kolkata and can be changed. |
| Preferences | Optional areas of focus, dashboard widgets, and private-preview choices. Selecting an area such as Cycle or Health can reveal a personal interest even though no health record is collected by that selection. |
| Age and policy confirmations | Your confirmation that you are at least 18, the versions of the Terms and Privacy Notice acknowledged, and timestamps. This release does not ask for a date of birth or an identity document. |
| Security and technical information | Account identifiers, sign-in and account-change events, timestamps, session information, and abuse-prevention signals help protect accounts and investigate failures. Infrastructure providers may process IP addresses and browser details. |
| Support messages | Your email address and the details you choose to send so that we can respond. Please send only what is necessary and avoid medical documents or other sensitive attachments. |
Health records, cycle dates, medication records, appointment details, document uploads, journal entries, and emergency records are not available for storage in this release. Demonstration cards use fictional information. Please do not put sensitive records into a profile name or support message.
Why we process information
We use account information to deliver requested account functions, save your choices, send verification and recovery emails, protect access, record policy choices, answer support requests, and comply with applicable obligations. We do not sell account information or use it for targeted advertising.
There is no AI provider integration, advertising tracker, session replay, or active product analytics service in this release. We will explain a new purpose or a material change to processing before introducing it and obtain a separate choice where required. A privacy acknowledgment does not give us blanket permission for future health or AI processing.
Registration is for people aged 18 or older. We do not offer child accounts. If you believe a child has supplied information, contact us so the report can be investigated.
Service providers and disclosures
- Supabase: authentication, PostgreSQL account storage, sessions, and related infrastructure.
- Hostinger Email: delivery of account emails through the configured SMTP mailbox, including the recipient address and the verification or recovery message.
- Cloudflare Turnstile: checks on account forms to help prevent automated abuse. Cloudflare describes signals including IP address, browser headers, and connection characteristics, and describes its own use of those signals to improve Turnstile.
See Supabase’s privacy policy, Hostinger’s privacy policy, and Cloudflare’s Turnstile privacy notice.
We may disclose information when required by a valid legal process, to investigate abuse, or to protect legal rights and account security. Any disclosure should be limited to what is necessary. Provider access and exceptional support access must be restricted to the relevant task.
Production website hosting has not yet been finalized. Its provider must be added to this notice before public launch. Resend is not the configured account-email sender for this deployment.
Storage location and international processing
HerDay is operated from India. This does not mean every provider processes every copy of information only in India. Database location, support access, email routing, and security processing depend on the configured providers and their services.
The production database region, provider arrangements, and applicable transfer requirements remain part of deployment configuration. We do not currently make an India-only storage promise.
Retention and deletion
Profile and preference records remain stored until changed or removed through an authorized operation. Consent history and account security events are retained separately. This release does not yet implement scheduled account-data expiry or an end-to-end account-deletion process.
Exact retention periods for account data, support correspondence, provider logs, and backups have not been finalized. Contact us for the current handling of your account and any deletion request. Deleting a visible profile is not the same as removing the authentication account, provider records, and backups.
You can contact us to request deletion or ask about retention. We must verify identity, assess any applicable retention requirement, explain the scope, and confirm the outcome. This notice does not promise immediate or automatic erasure from backups.
Your choices and requests
You can change your profile and preferences in Settings and view recorded policy acknowledgments in Settings → Privacy. Optional focus areas may be left unselected. Marketing and product-research participation are not required for account access and are not activated by onboarding.
For access, correction, a copy of information, account closure, withdrawal of an optional permission, or a privacy complaint, email contact@herday.life with a short description. Use your account email address where possible. We may request proportionate identity verification before disclosing or changing account information; we will not ask for a password or verification code.
Correction is available in Settings. Self-service account export, deletion, and nomination workflows are not yet available. Requests need manual assessment. If information is necessary to provide an account function, withdrawing permission for that processing may prevent us from continuing that function; unrelated optional choices should not affect access.
Available legal rights and routes of escalation depend on the law in force and its application to the processing. Nothing in this notice removes a statutory right or prevents you from approaching a competent authority.
How account information is protected
The application uses authenticated server checks, ownership-based database policies, restricted credentials, input validation, and private caching rules. Production connections must use HTTPS. Ordinary staff access does not automatically grant access to private account content.
No system can guarantee absolute security. HerDay does not claim end-to-end encryption or an independent security certification. Protect your password, keep access to your authenticator if enabled, and report suspected account misuse to the contact below.
Privacy questions and grievances
HerDay LifeCountry of operation: IndiaBusiness address: Sullurpeta, Andhra Pradesh, India – 524121Privacy and grievance contact: R. Charancontact@herday.lifeAddress your message to R. Charan and use the subject “HerDay privacy request” or “HerDay privacy complaint”. Describe the issue without sending sensitive attachments. A fixed response-time guarantee is not offered by this notice. Applicable statutory requirements continue to apply.
Changes to this notice
This notice’s effective date and version identify the text that applies. Material changes must be communicated appropriately. A new required permission must be requested separately where applicable, and versioned acknowledgment history must be preserved.