Attesa Privacy Policy

Last Updated: July 17, 2026
Applies to: Attesa for Android, version 1.0 and later.


The Short Version

Attesa is built to be private by architecture, not by promise.

The full policy below explains these principles in more detail.


1. Who We Are

Attesa (“the App”) is provided by Rinadia (“we,” “us,” or “our”).

If you have any questions about this Privacy Policy, you can contact us at:

Email: Rizwan.kabir0000@live.com


2. What We Collect

Health Information You Enter

This includes information you choose to record in the app, such as:

This information is created by you and stored locally on your device in an encrypted database.

It is never transmitted to us, and we have no ability to access it.

Attesa does not operate a server that stores your health information.

Personal Information

We do not collect:

Attesa has no account system.

You never create an account and never sign in.


3. What We Share

Nothing.

We do not:

Because we never receive your health data, there is nothing for us to share.

The app contains:


4. Information That Leaves Your Device (Only When You Choose)

Attesa is designed so that information leaves your phone only when you explicitly choose to do so.

Sharing Appointment Briefs or Exports

When you tap Share on an Appointment Brief (PDF) or export your information (CSV or PDF), Android’s Share Sheet allows you to send that file wherever you choose, including:

The file is generated entirely on your device.

We never receive or see it.

Any service you choose to send it to is governed by that service’s own privacy policy.

Optional Encrypted Backup

If you enable backup:

The backup is encrypted on your device using a key derived from a recovery phrase that:

Because we never possess your recovery phrase:

This trade-off is intentional and provides genuine privacy.


5. Purchases

If you subscribe to Attesa Premium, purchases are processed through Google Play Billing.

Attesa uses RevenueCat solely to manage subscription status.

These services receive:

They do not receive:

Billing information is handled according to Google’s and RevenueCat’s own privacy policies.


6. Optional Crash Reporting

Version 1.0 includes:

If a future version introduces crash reporting:

We will never silently introduce tracking.


7. Your Controls and Rights

Export Everything

From Privacy Center, you can generate:

with a single tap.

Delete Everything

You can permanently erase:

Deletion happens immediately after confirmation.

Because Attesa stores nothing on any server, deletion is permanent and irreversible.

If you previously created an encrypted backup, you must also delete that backup yourself from wherever you stored it.

Only you control those copies.

Access, Correction and Deletion Requests

Since Attesa stores your information only on your own device:

are handled directly through the app.

We hold no copies of your data.


8. Data Retention

We retain nothing because we receive nothing.

Your information remains on your device until:

Removing the app deletes its local database from your device.


9. Children

Attesa is intended for adults.

It is not directed toward children under the age of 13 (or the minimum digital consent age applicable in Pakistan).

We do not knowingly collect children’s information.

Because Attesa sends no personal information to our servers, no such information reaches us.


10. Security

Attesa protects your information through multiple layers:

While no security system is perfect, the strongest protection is structural:

There is no central server containing your health records that could be breached.


11. Changes to This Privacy Policy

If we change this Privacy Policy:


12. Governing Law and Contact

This Privacy Policy is governed by the laws of Pakistan.

If you have questions, concerns, or privacy requests, please contact us at:

Email: Rizwan.kabir0000@live.com


Privacy Center Summary

Attesa keeps your health data in an encrypted database on your phone. There are no accounts, no sign-up, and no server storing your information. No ads, no trackers, and nothing is sold. Nothing leaves your device unless you choose to share a file or enable the optional encrypted backup, which is protected with a recovery phrase only you know, so even we cannot read it. You can export or permanently delete everything at any time. Your health record belongs to you.