AHARA Sleep App Privacy Policy

Last updated: October 26, 2026

This Privacy Policy explains how AHARA LLC ("AHARA", "we", "us") handles information in the AHARA Sleep mobile app (the "app") on iOS and Android. It is separate from the privacy policy for our online store at aharamushrooms.com.

Information we access and collect

Health and fitness data (sleep and heart rate)

With your permission, the app reads your health data from Apple Health (on iOS) or Health Connect (on Android) on your device. This includes your sleep sessions, sleep stages (deep, REM, and light sleep), sleep duration and efficiency, heart rate, resting heart rate, heart-rate variability, respiratory rate, and step count. If you log a night by hand, the app can also write that sleep session back to Apple Health, so your own records stay complete. It writes nothing else. We use this data only to show you your own sleep inside the app: your nightly score, your sleep stages, your heart-rate trends, and your patterns over time. Granting health-data access is optional and the app works without it.

In line with Apple's requirements for Apple Health data: we use it only to provide health and fitness features inside the app, we never use it for advertising or marketing, we never use it for data mining unrelated to your health and fitness, we never sell it, and we delete it when you delete your account or disconnect the source.

Connected wearable accounts (Oura, WHOOP, Google Health)

Separately from the health data on your device, you can choose to connect a wearable account so the app can import the sleep it has already recorded. We support Oura, WHOOP, and Google Health, which is the source for Fitbit and Pixel sleep data. Connecting is optional, the app works without it, and you choose each service individually.

When you connect one of these, you are sent to that company's own sign-in page and you grant access there. We never see or store your password for those services. We receive an access token, which we store securely, and we use it to read only the sleep and related measurements listed below:

Google Health (Fitbit and Pixel): your sleep sessions and sleep stages, and your heart-rate and heart-rate-variability measurements. We request two read-only scopes and no others: googlehealth.sleep.readonly and googlehealth.health_metrics_and_measurements.readonly. We request no write access and no other Google Health data.
Oura: your sleep, daily summaries, and heart-rate data.
WHOOP: your sleep, recovery, cycle, workout, and basic profile data.

This import happens on our backend rather than on your device, so that your history stays in sync across your devices. We use it only to show you your own sleep and recovery inside the app.

You can disconnect any service at any time in the app: open Devices, find the service, and tap Disconnect. Disconnecting stops any further import. You can also revoke our access from the provider's own account settings, and for Google at https://myaccount.google.com/permissions. To remove the data that was already imported, delete your account as described under "How to delete your data".

Account information

When you create an account, we collect your email address and, optionally, a display name that you choose. We also assign your account a user identifier. We use this to create and secure your account, sign you in, and sync your data across your devices.

Sleep questionnaires you answer

The app asks short sleep questions, including a nightly check-in and the Insomnia Severity Index. We store your answers and the resulting score so the app can show you your own trend over time.

Rewards and referrals

If you take part in rewards or referrals, we store your points, your redemptions, and the discount codes issued to you.

How data leaves your device

Health data that is read on your device is transmitted to our secure backend so that it can be stored to your own account and shown back to you across your devices. All data is encrypted in transit.

How we use your data

To provide the app's core features: showing you your sleep score, sleep stages, trends, and heart-rate patterns.
To create, secure, and manage your account.

We do not use your data for advertising. We do not sell your data. We do not share your health data with third parties for advertising or for their own purposes.

Data sharing

We do not sell your data and we do not share it for advertising. We share it only as follows:

Service providers that run the app for us, under contract and only to operate it. These are Supabase (database and sign-in) and, for account features on the web, Google Firebase (sign-in).
The wearable services you connect, in order to retrieve the data you asked us to sync.
Shopify, when you redeem a reward, so that a discount code can be applied to your order. This uses your email address to match your account.
Legal and safety, where required by law or to protect rights and safety.
Business transfers, as part of a merger, acquisition, or sale of assets, subject to this policy.

Limited Use of Google user data

AHARA Sleep's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

In plain terms, for the Google Health data described above:

We use it only to provide and improve the sleep features you can see in the app.
We do not sell it, and we do not transfer it to others except as needed to provide those features, to comply with the law, or as part of a merger or acquisition with your consent where required.
We do not use it for advertising of any kind, and we do not use it to build advertising profiles.
We do not allow humans to read it, except with your explicit permission for a support request you raise, where it is necessary for security or to comply with the law, or where the data has been aggregated and made anonymous.

Data retention

We retain your account information and your sleep and heart-rate data for as long as your account remains active, so that your history and trends stay available to you. When you delete your account (see below), we permanently delete your account and all of its associated sleep and heart-rate data from our systems. We do not retain your health data after your account is deleted, except where a limited retention period is required by law.

How to delete your data

You can permanently delete your account and all associated data at any time from inside the app: open Settings and tap Delete account & data. This removes your profile, your sleep and heart-rate records, your app settings, and your rewards balance from our systems. Full step-by-step instructions are available at https://aharamushrooms.com/pages/sleep-app-account-deletion. If you cannot open the app, email ajay@aharamushrooms.com from the email address on your account and we will delete your account and data for you.

Security

We protect your data with encryption in transit and with access controls on our backend.

Your choices and rights

Depending on where you live, you may have the right to access, correct, delete, or export your information, and to opt out of certain processing. You can export your data and delete your account from inside the app, or write to us at ajay@aharamushrooms.com. We will not treat you differently for exercising these rights.

Sleep and related measurements are consumer health data under some United States state laws. We collect and process this data only with your consent and only to provide the features you ask for.

Children

The app is intended for adults and is not directed to children under 16. We do not knowingly collect information from children under 16. If you believe a child has given us their information, email ajay@aharamushrooms.com and we will delete it.

Changes to this policy

We may update this policy from time to time. Material changes will be reflected here with a new "last updated" date.

Contact

AHARA LLC, Rockville, MD, USA. Email: ajay@aharamushrooms.com.