Privacy policy
This policy explains what Sahara Health collects, why, and what your rights are. The short version: the website collects your email address and, with your consent, your answers to a health questionnaire, so that we can build and deliver your plan; the app keeps your training data on your phone and, once you have a plan, also keeps a copy of your sessions and daily ratings next to your plan so they follow you to a new phone.
Who we are
The data controller is the operator of Sahara Health, a business registered in Poland under tax number NIP 6762560321 ("we"). Contact us through the form at usesahara.com/contact.
The app
The Sahara app stores your sessions, your daily ratings, your goals and your settings on your device. We do not run user accounts or passwords. Once a plan is activated with an access code, the app also sends your session log and your daily 1 to 10 ratings to our server, where they are kept next to your plan so that they can be restored on a new phone and so that we can tell whether the program works. Deleting the app removes the copy on the phone; the server copy is deleted with your plan (see usesahara.com/delete-data). Before a plan is activated nothing leaves the phone. Reminders are local notifications generated on your phone; their wording never describes any condition. The app sends anonymous usage events (for example "session completed", and your before and after rating at the end of the first fourteen days) to our analytics provider, PostHog, to understand which parts of the program work. These events carry a random identifier, not your name or email.
The website and the assessment
When you take the assessment on usesahara.com we ask for your consent before processing your answers, because they describe your health. Depending on the goals you pick, that includes your sexual health (for example erections, when you finish and how satisfied you are) and your urinary health (for example drops after urinating or bladder control). Under the GDPR this is "special category" data and we process it only on the basis of your explicit consent (Article 9(2)(a)). We use the answers to build and personalise your plan. We never sell your answers, never use them to target advertising, and never send them to Meta or any other advertising service. Under US state consumer health data laws (for example Washington's My Health My Data Act), these answers are consumer health data, and you have the rights set out in "Your rights" below. You can withdraw consent at any time through the contact form, and we will delete the answers.
Analytics and advertising measurement
The website sends usage events (which step of the assessment you reached, whether a plan was chosen) to PostHog and to Google Analytics under a random identifier, and your assessment answers to PostHog only, under that same random identifier and never with your name or email, and loads the Meta pixel. The same funnel steps (page view, assessment started, email entered, checkout started, trial started, purchase) also go to Meta through its Conversions API, so we can tell whether our advertising works. Meta receives your email address only in hashed form, together with the identifiers its own cookies set in your browser. Your answers never go to Meta or to any other advertising service.
We collect your email address to send your plan, your access code and, if you buy a plan, receipts and reminders about renewals. Marketing emails include an unsubscribe link. The legal basis is the performance of our contract with you and, for marketing, your consent.
Payments
Payments are processed by Stripe. We never see or store your full card details. Stripe processes your payment data under its own privacy policy. We keep records of purchases, refunds and invoices as required by tax law.
Service providers
We use Stripe (payments), Resend (email delivery), Cloudflare (domain and email routing), Vercel (hosting), Neon (database), PostHog and Google Analytics (analytics) and Meta (advertising measurement). Each processes data only on our instructions, except Meta, which also uses the events under its own terms as a joint controller for advertising measurement.
Research and published statistics
We may combine assessment answers and app ratings across many users to produce statistics, for example how common each problem is by age or how ratings change over twelve weeks, and publish them in articles or research write-ups. Published figures are aggregates only; no individual answer, rating or free-text entry is published, and nothing that could identify you. This is part of what your consent to the assessment covers. If you withdraw consent, your answers are deleted and drop out of any future analysis; figures already published cannot be recalculated.
Retention
Assessment answers: until you withdraw consent or 24 months after your last activity. Email and purchase records: for the life of your plan and as long as tax law requires afterwards. App data: on your device, under your control; the server copy of sessions and ratings, for the life of your plan and 24 months after the last activity.
Your rights
You can ask for a copy of your data, ask us to correct or delete it, object to processing, or take it elsewhere. Use the contact form. The steps for full deletion, and what tax law makes us keep, are at usesahara.com/delete-data.
Children
Sahara is for adults. We do not knowingly collect data from anyone under 18.