Attesa Privacy Policy
Last Updated: July 17, 2026
Applies to: Attesa for Android, version 1.0 and later.
The Short Version
Attesa is built to be private by architecture, not by promise.
Your health data stays in an encrypted database on your phone. There is no Attesa account and no Attesa server that stores it.
We do not collect your health data, sell it, share it, or use it for advertising.
There are no third-party trackers or analytics SDKs in the app.
Nothing leaves your device unless you choose to share a file or enable the optional encrypted backup, which even we cannot read.
You can export everything or permanently delete everything at any time with a single tap.
The full policy below explains these principles in more detail.
1. Who We Are
Attesa (“the App”) is provided by Rinadia (“we,” “us,” or “our”).
If you have any questions about this Privacy Policy, you can contact us at:
Email: Rizwan.kabir0000@live.com
2. What We Collect
Health Information You Enter
This includes information you choose to record in the app, such as:
Symptom logs
Cycle events
Menopause Rating Scale responses
Treatments
Personal notes
App settings
This information is created by you and stored locally on your device in an encrypted database.
It is never transmitted to us, and we have no ability to access it.
Attesa does not operate a server that stores your health information.
Personal Information
We do not collect:
Your name
Email address
Phone number
Contacts
Location
Advertising identifiers
Device identifiers
Attesa has no account system.
You never create an account and never sign in.
3. What We Share
Nothing.
We do not:
Sell your information
Rent your information
Share your information with third parties
Because we never receive your health data, there is nothing for us to share.
The app contains:
No advertising networks
No data brokers
No third-party analytics services
4. Information That Leaves Your Device (Only When You Choose)
Attesa is designed so that information leaves your phone only when you explicitly choose to do so.
Sharing Appointment Briefs or Exports
When you tap Share on an Appointment Brief (PDF) or export your information (CSV or PDF), Android’s Share Sheet allows you to send that file wherever you choose, including:
Email
Printing
Cloud storage
Another application
The file is generated entirely on your device.
We never receive or see it.
Any service you choose to send it to is governed by that service’s own privacy policy.
Optional Encrypted Backup
If you enable backup:
Attesa creates an end-to-end encrypted backup file.
You choose where to store it, such as your personal cloud storage.
The backup is encrypted on your device using a key derived from a recovery phrase that:
Is shown to you only once.
Is never stored by Attesa.
Is never transmitted to us.
Because we never possess your recovery phrase:
We cannot read your backup.
We cannot recover your backup if you lose the phrase.
This trade-off is intentional and provides genuine privacy.
5. Purchases
If you subscribe to Attesa Premium, purchases are processed through Google Play Billing.
Attesa uses RevenueCat solely to manage subscription status.
These services receive:
An anonymous app-generated identifier.
Your subscription entitlement status.
They do not receive:
Health information
Symptom logs
Notes
Cycle data
Personal medical records
Billing information is handled according to Google’s and RevenueCat’s own privacy policies.
6. Optional Crash Reporting
Version 1.0 includes:
No analytics SDK
No crash-reporting SDK
If a future version introduces crash reporting:
It will be completely optional.
It will be disabled by default.
It will never include your health information, symptom logs, or notes.
This Privacy Policy will be updated before that version is released.
We will never silently introduce tracking.
7. Your Controls and Rights
Export Everything
From Privacy Center, you can generate:
A complete CSV export.
A complete PDF record.
with a single tap.
Delete Everything
You can permanently erase:
Symptom logs
Cycle history
Scores
Treatments
Notes
Settings
Deletion happens immediately after confirmation.
Because Attesa stores nothing on any server, deletion is permanent and irreversible.
If you previously created an encrypted backup, you must also delete that backup yourself from wherever you stored it.
Only you control those copies.
Access, Correction and Deletion Requests
Since Attesa stores your information only on your own device:
Access
Correction
Deletion
are handled directly through the app.
We hold no copies of your data.
8. Data Retention
We retain nothing because we receive nothing.
Your information remains on your device until:
You delete it, or
You uninstall the app.
Removing the app deletes its local database from your device.
9. Children
Attesa is intended for adults.
It is not directed toward children under the age of 13 (or the minimum digital consent age applicable in Pakistan).
We do not knowingly collect children’s information.
Because Attesa sends no personal information to our servers, no such information reaches us.
10. Security
Attesa protects your information through multiple layers:
Encrypted on-device database
Optional biometric or device PIN app lock
End-to-end encrypted backups
While no security system is perfect, the strongest protection is structural:
There is no central server containing your health records that could be breached.
11. Changes to This Privacy Policy
If we change this Privacy Policy:
The Last Updated date will be revised.
Any significant changes, including optional data transmission features, will be communicated inside the app before taking effect.
12. Governing Law and Contact
This Privacy Policy is governed by the laws of Pakistan.
If you have questions, concerns, or privacy requests, please contact us at:
Email: Rizwan.kabir0000@live.com
Privacy Center Summary
Attesa keeps your health data in an encrypted database on your phone. There are no accounts, no sign-up, and no server storing your information. No ads, no trackers, and nothing is sold. Nothing leaves your device unless you choose to share a file or enable the optional encrypted backup, which is protected with a recovery phrase only you know, so even we cannot read it. You can export or permanently delete everything at any time. Your health record belongs to you.