Privacy Policy

1. Who we are

This policy explains how Katheris (“we”) processes personal data when you use our app in Telegram, on iPhone, on Android and on the web, and when you visit katherisapp.com. We are the controller of this data. Contact: support@katherisapp.com.

2. Data we collect

Account data: first and last name, Telegram user ID and photo, email address if you add one, and your interface language.

Health data you enter: symptoms and their intensity, GAD-7 and PHQ-9 answers and scores, CBT diary entries, voice notes you record, daily routine notes, results of practices, and any diagnosis, prescriptions or therapy details you choose to add.

Usage data: which features you use and when, collected through product analytics, plus technical data such as device type, app version and error logs.

Website data: when you visit katherisapp.com, Google Tag Manager and Google Analytics may set cookies and collect information about your visit and the store buttons you click.

Purchase data: if you buy Pro, we receive the subscription status, product and renewal dates from the App Store or Google Play. We never see your card details.

3. Why we use it and on what basis

To provide the Service, sync your data between devices and show your charts and reports (performance of our contract with you).

To process health data, which is a special category of personal data. We do this only with your explicit consent, which you give by entering such data. You can withdraw consent at any time by deleting the entries or your account.

To send reminders and sign-in codes you asked for (contract), and to improve the app and fix errors (our legitimate interest). Website analytics is based on your consent where the law requires it.

4. Voice notes and AI

When you send a voice note, the audio is sent to Groq for speech-to-text, and the resulting text is sent to OpenAI to organise it into a CBT diary entry. We do not keep the audio file after transcription. In Telegram the text entry is saved only after you review it; in the app it is saved right away, and you can delete it.

5. Who receives your data

We use service providers that process data on our behalf and only for our instructions: cloud hosting for our servers and database; Groq (speech recognition); OpenAI (structuring diary entries); Mixpanel (product analytics); Resend (sign-in and notification emails); Telegram (bot and sign-in); Google (website analytics and tag management); Apple and Google (app distribution and purchases).

If you create a share link, the report is visible to anyone you give the link to. We do not sell personal data and do not share health data with advertisers.

If you publish a comment on a symptom, its text and date are visible to all Katheris users together with a short anonymous user ID. Your name, email and Telegram details are never shown. You can delete your comments at any time.

6. International transfers

Some providers are located outside the European Economic Area, including in the United States. Where this happens, we rely on safeguards recognised by law, such as the European Commission’s Standard Contractual Clauses or adequacy decisions.

7. How long we keep data

We keep your account and records while your account exists. You can delete your account at any time in the app under Profile → Delete account; this deletes your data straight away. You can also ask us by email, and then we delete it within 30 days, except where we must keep something by law. Analytics data is kept in pseudonymised form for a limited period, and your analytics profile is deleted together with the account. See Delete your account for details.

8. Security

Data is transmitted over encrypted connections and access to it is restricted. Share links contain a long random key, show no name and give no access to your account. No system is perfectly secure, so please also protect access to your Telegram account and email.

9. Your rights

Depending on where you live, you can ask to access, correct, delete or export your data, restrict or object to processing, and withdraw consent at any time. Write to support@katherisapp.com. You can also complain to your local data protection authority.

10. Children

Katheris is not intended for anyone under 16. If you believe a child has given us personal data, contact us and we will delete it.

11. Changes to this policy

We may update this policy. Significant changes will be announced in the app or on this page. The date at the top shows the latest version.