Privacy Policy

Effective date: August 14, 2026 · Operated by Shiloh Software, LLC

    Ishara is a personal wellness and fitness app. Your wellness data is used only
    to provide you with insights and track your progress. It is never sold, shared
    with advertisers, or used for any purpose other than operating the app.
  

    Not medical advice. Ishara is a general wellness and fitness
    app. It is not a medical device, it does not diagnose, treat, cure, or prevent
    any disease or condition, and nothing in the app is a substitute for
    professional medical advice, diagnosis, or treatment. Always consult a
    qualified healthcare provider about any health concern or before making
    changes to your diet, sleep, exercise, medication, or supplements. If you
    believe you are experiencing a medical emergency, call your local emergency
    number or 911.
  

1. Who We Are

Ishara ("the app", "we", "us") is a personal wellness and fitness application developed and operated by Shiloh Software, LLC. You can reach us at contact@get-ishara.app.

2. What Data We Collect

We collect only the data needed to provide the app's features:

Account information

Email address and hashed password
First name (optional)

Personal profile (optional, used to personalize insights)

Date of birth, biological sex, height, and starting body weight
Body diagram skin tone preference

Health and fitness data

Apple Health data you choose to sync: steps, heart rate, sleep, workouts, body weight, body fat percentage, and other metrics exported from the Health app on your device
Oura Ring data (if you connect your Oura account): sleep scores, readiness scores, heart rate variability, activity data, and SpO2
Body measurements you enter manually
Workout sessions you log manually in the app, including type, duration, and estimated calorie burn

Nutrition data

Food log entries you create directly in the app
Nutrition data imported from Lose It (if connected)
Custom recipes and saved foods you create
Food and nutrition-label photos you photograph or upload for AI-assisted food logging

Usage data

Last login timestamp and onboarding completion status
In-app settings and goal preferences

3. How We Use Your Data

Your data is used exclusively to:

Display your health trends, readiness scores, and daily summaries
Generate personalized AI-powered insights and correlations
Track progress toward your nutrition and fitness goals
Sync data between your devices and our servers
Send transactional emails (account verification, password reset)

We do not use your data for advertising, profiling for third parties, or any purpose not listed above.

4. AI-Generated Insights

Ishara uses the Anthropic Claude API to generate health insights from your data. When you request an AI insight, relevant portions of your health data are transmitted to Anthropic's API for processing. If you use AI photo food logging, the photo you capture or upload is also transmitted to Anthropic's API to identify the food and estimate nutrition. Anthropic retains API inputs and outputs for up to 30 days for safety and abuse monitoring purposes, after which they are automatically deleted. Anthropic does not use API data to train their models. Anthropic's privacy practices are governed by their privacy policy at anthropic.com/privacy.

5. Third-Party Integrations

Ishara integrates with the following services at your direction:

Apple HealthKit — data is read from your device's Health app only when you grant permission. We do not write data back to Apple Health.
Oura — if you connect your Oura account, we store an encrypted OAuth access token to sync your ring data on your behalf. You can disconnect at any time in Settings; that token is also revoked with Oura automatically if you delete your account.
Sign in with Apple — if you create your account with Sign in with Apple, we use it only to verify your identity at sign-in; we do not store a long-lived Apple token. If you delete your account, we ask Apple to revoke this app's sign-in connection for your Apple ID.
Lose It — if you import a Lose It export, the nutrition data in that file is stored in your Ishara account. No ongoing connection to Lose It's servers is made.
Resend — used to deliver transactional emails (account verification, password reset). Only your email address is shared with Resend for this purpose.

We do not share your data with these services beyond what is necessary to perform the integration you requested.

6. Data Storage and Security

Your data is stored in an encrypted PostgreSQL database hosted on Railway infrastructure in the United States. Sensitive fields (including OAuth tokens) are encrypted at the application layer in addition to database-level encryption. Passwords are hashed using bcrypt and are never stored in plaintext. Access between your app and our servers is encrypted via HTTPS/TLS.

The Ishara admin panel is protected by two-factor authentication. Only authorized administrators can access your account data.

7. Data Retention

We retain your data for as long as your account is active. You can delete your account at any time directly in the app — go to Settings → Delete Account (or, if you're viewing the subscription screen, the "Delete Account" option there works the same way, so deletion never requires an active subscription). Deleting your account permanently removes all associated data — including health records, nutrition logs, insights, recipes, friend connections, and profile information — from our servers. This action cannot be undone.

Deleting your account also revokes this app's Sign in with Apple connection (for accounts created that way) and your Oura connection (if connected). It does not cancel an active Apple/App Store subscription — subscriptions are managed and billed by Apple separately, and must be cancelled in your device's Settings → [Your Name] → Subscriptions, or at apps.apple.com/account/subscriptions.

If you're unable to use the in-app flow for any reason, you can also request account deletion by contacting us at contact@get-ishara.app.

8. Your Rights

You have the right to:

Access a copy of the data we hold about you
Correct inaccurate data
Delete your account and all associated data at any time, in-app, via Settings → Delete Account
Disconnect any third-party integration (Oura) at any time in Settings
Revoke Apple Health permissions at any time in your device's Settings app

To exercise the access or correction rights above, contact us at contact@get-ishara.app.

9. Children's Privacy

Ishara is not directed to individuals under 18 years of age. We do not knowingly collect personal information from anyone under 18. If you believe a minor has provided us with personal information, please contact us and we will delete it promptly.

10. Health Data (HIPAA Notice)

Ishara is a personal wellness app and is not a covered entity under HIPAA. The health data you store in Ishara is not considered protected health information under HIPAA. We recommend not using Ishara to store data you consider to be sensitive medical records.

11. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will update the effective date at the top of this page. We encourage you to review this policy periodically. Continued use of the app after changes constitutes acceptance of the updated policy.

12. Contact

If you have any questions about this Privacy Policy or how we handle your data, please contact:

Operated by: Shiloh Software, LLC
Email: contact@get-ishara.app
App: Ishara — Wellness & Fitness

This privacy policy applies to the Ishara iOS application and its associated backend services at get-ishara.app.