Privacy Policy

The short version

Your health answers, your log (with its photos and notes) and your progress stay on your phone.
Only a few things reach us: your email if you add it, the programs you ask us to tell you about, which first-question screen you reached (a number, never your answers), your purchases and your chats with us.
On the website, we collect your email if you join Class Notes or sign in to the Q&A, and the questions you send Dr. Dana.
We sell no data, show no ads and run no tracking across apps or websites.
In the app, Settings, then Delete my data, erases everything on your phone and asks our server to erase the rest. You can also email hello@healthclass.app.

Who we are

Pelvic Health Class: for Women (“the app”) and the website www.healthclass.app (“the website”) are published by [Legal entity name], [Postal address] (“we”), with Dr. Dana Kivlin, a urologist. We are the controller of the data described here. Contact: hello@healthclass.app.

Data that stays on your phone

Your answers to the first questions (your need, your life stage, your symptoms, the safety check), your check-ins, your log (its photos and notes), your progress, your routine and your reminder time. The app stores them on your phone only. Your phone’s own backup (iCloud or Google) may keep a copy, under the settings of your Apple or Google account. We cannot read this data.

Data the app sends us

Your email, if you add it, for Class Notes, our weekly letter, and to sign in to the members’ Q&A. Each letter has a one-click unsubscribe link.
“Notify me” requests: the program you ask about (for example Prolapse), a random app ID created on your phone, your email if you add it, and your phone’s platform and app version. We use them to count the demand for each program and to tell you the day it opens.
The first-question screens you reach: a screen number (1 to 12), the random app ID, and your phone’s platform and app version. Never your answers. We use them to make the first questions shorter.

The app stores these with our database provider, Supabase ([Supabase hosting region]).

Purchases

Apple (App Store) or Google (Google Play) process your payment. We never see your card. Superwall, our subscription provider, shows the plan screen and tests versions of it. It receives an anonymous app user ID, your device type, language and app version, the plan screens you see and your purchases. It never receives your answers, your program or your log.

When you buy, renew, cancel or end a plan, Superwall tells our website server (hosted by Convex) the event, the product, the end date, the anonymous app user ID and, if you added it in the app, your email. We use this only to let paid members into the monthly live Q&A.

Support chat (iPhone)

On iPhone, Today and Settings open a chat with our team, run by Reception. When the app opens, Reception receives your phone’s details: app version, phone model, iOS version, language, region, time zone and whether notifications are on. When you chat, Reception receives what you write and the photos you send. From your first chat, it also receives your email if you added it, your plan, the day you joined, your week and day, your reminder time and your break dates. Never your answers to the first questions or your log. If you mention your health in the chat, we use it only to answer you.

The website

Reading: the website sets no advertising or analytics cookies. Our host, Vercel, processes the technical data every website receives (IP address, browser, the page requested) to deliver pages and protect them from abuse, and keeps its server logs for a short period.
Forms: when you send a form, we receive what you type in it and your IP address, which we use only to block abuse (at most a few tries per network every few minutes).
Cookies: only one, after you sign in to the Q&A: hc_qa, a random sign-in key, kept 30 days or until you sign out. It is needed for the members’ page to work.

If you join Class Notes on the website or in the app, we store your email, the page you joined from, the date and whether you are subscribed, in our database at Convex. We send the letters through MailCheap, which receives your email, the source “website” and your IP address (to block fake signups). We use your email to send the letter, once a week, and nothing else. Every letter has a one-click unsubscribe link. Unsubscribing stops the letters at once.

The live Q&A with Dr. Dana

To sign in, you type the email you added in the app. Our server checks it against our list of paid members and, if it matches, emails you a one-time link through Resend. The answer on the page is the same for every email, so the page never shows whether someone has a plan. We store a scrambled form (a hash) of each link and sign-in key, never the key itself.

When you send a question, we store it with your email, the date and, only if you choose, your first name. Dr. Dana reads the questions without email addresses. The session is hosted on [video platform, e.g. Zoom] under its own policy; joining is optional and your camera can stay off.

Who processes data for us

Provider	What for	Data
Apple, Google	App stores, payments, phone backups	Purchases, under their own policies
Superwall	Plan screens, subscription events	Anonymous app user ID, device details, purchases, email if added
Supabase	App database	Email, Notify me requests, screen numbers
Convex	Website database	Newsletter emails, paid members, Q&A questions, sign-in hashes
Vercel	Website hosting	Technical request data
MailCheap	Sending Class Notes	Email, signup source, IP address
Resend	Sending Q&A sign-in links	Email
Reception	Support chat on iPhone	See Support chat above

Each provider processes the data only on our instructions. Some of them store data in the United States. Where the law requires it, we rely on the European Commission’s standard contractual clauses for transfers. Links to Instagram open the Instagram app or website, under Instagram’s own policy.

How long we keep data

Your email for Class Notes: until you unsubscribe or delete your data.
A “Notify me” request: until 90 days after the program opens, or until you delete your data.
Paid member records: while your plan is active, then 12 months, or until you delete your data.
Q&A questions: 12 months after the session, or until you delete your data. Sign-in links: 24 hours. Sign-in keys: 30 days.
Your chat: until you delete your data or ask us to delete it.

Your rights and how to delete your data

You can ask to see, correct, export or delete the data we hold about you, and object to its use. In the app, Settings, then Delete my data, erases your data on the phone, deletes your chat and its photos, and asks our server to delete the email and requests linked to your app ID. To delete website data (Class Notes, the Q&A), or for anything else, email hello@healthclass.app from the address concerned. We answer within 30 days. You can also complain to your data protection authority. California residents: we do not sell or share personal information as the CCPA defines those terms.

Health information

Pelvic Health Class: for Women is education from a urologist, not medical advice. Your health answers stay on your phone and never reach us. A question you send for the Q&A may mention your health: we use it only to prepare the session.

Children

The app and the website are for adults, 18 and over.

Changes

We post any change on this page and in the app, with a new date at the top. For an important change, we also tell Class Notes subscribers by email.