OkHera — Privacy Policy

Last Updated: September 13, 2026

1. Introduction

This Privacy Policy explains how THE FLOCO COMPANY, LLC, a Florida limited liability company ("OkHera," "we," "us," or "our"), collects, uses, shares, and protects information when you use the OkHera mobile application, OkHeraapp.com, and related services (collectively, the "Service"). It also describes your privacy rights and how to exercise them.

By using the Service, you acknowledge this Privacy Policy. If you do not agree with it, please do not use the Service. This Privacy Policy is incorporated into our Terms of Service.

2. Sensitive Health Information — Please Read

OkHera is a pregnancy-focused app. Some information you provide or that we infer — for example, the food and cosmetic products you scan or search, and the fact that you have chosen to use a pregnancy-focused app — may be considered sensitive personal information or consumer health data under laws such as the California Consumer Privacy Act (as amended by the CPRA), the Washington My Health My Data Act, the Nevada and Connecticut health-data laws, and the EU/UK General Data Protection Regulation (which treats health data as a "special category").

We treat this information with heightened care. Where required by law, we will obtain your consent before collecting or sharing your consumer health data, and you may withdraw that consent at any time. We do not sell your sensitive or health-related personal information, and we do not share it for cross-context behavioral advertising. See Sections 4, 6, and 9 for details.

3. Information We Collect

a. Information you provide to us:

  • Account information: your email address, your first name, and your password (which we store only in hashed form).

  • Consent records: when you accept our Terms of Service and this Privacy Policy, we record the timestamp(s) of your acceptance and the version of the Terms you agreed to.

  • Saved products: products you choose to bookmark. These are stored in our cloud database (hosted on Supabase), privately to your account, and each saved product record contains the product barcode, name, brand, image URL, and a cached safety verdict.

  • Submissions: "Something is off" reports, photographs of product labels you upload for OCR or review, and any feedback you send us. Feedback is submitted through a third-party form provider (Formspree).

b. Information stored only on your device (not on our servers):

  • Scan history: a history of products you have scanned, including product information and timestamps, is stored only locally on your device. It is limited to your 100 most recent scans, and it is deleted when you tap "Clear" or when you delete your account.

c. Information we collect automatically:

  • Subscription status: whether you have an active trial or paid subscription. Billing is handled entirely by the Apple App Store or Google Play; we do not receive or store your full payment-card number.

  • Device and usage data: device type, operating system, app version, language, identifiers, general usage and interaction data, and approximate (non-precise) location derived from your IP address.

  • Diagnostics: crash logs and performance data to keep the Service working.

d. Information from third parties:

  • App stores: purchase and subscription status from the Apple App Store or Google Play.

  • Product data: product and ingredient information from third-party sources such as OpenFoodFacts. This is product data, not your personal information.

e. Community product cache (anonymous product data — not personal information): When you scan a product that is not yet in our primary database, we resolve the product and store the resulting product data — the barcode, product name, and ingredients — in a shared cache that is visible to all users of the Service. This cache records the product only. It contains no personal information and no user identifiers, is not linked to you or your account, and — because it is anonymous product data rather than user data — is not deleted when you delete your account (see Sections 6 and 8).

f. Search queries (de-identified — not linked to you): When you use the in-app search to look up a product or ingredient, we log the text you enter. These search logs are stored separately from your account and are not linked to your identity, your device, or any other information that could identify you. See Section 4 for how we use this anonymized data.

4. How We Use Information

We use the information we collect to:

  • Provide, operate, and maintain the Service, including scanning, searching, and ingredient analysis;

  • Create and manage your account and provide your scan/search history and saved items;

  • Process and manage subscriptions and free trials (billing is handled by the App Stores);

  • Respond to your "Something is off" reports and feedback and provide customer support;

  • Improve, develop, and test the Service, our database, and our rating system (including using uploaded label photos to improve ingredient recognition);

  • Communicate with you about the Service, including service-related notices and, where permitted, updates;

  • Protect the security and integrity of the Service and detect, prevent, and address fraud, abuse, or technical issues;

  • Comply with legal obligations and enforce our Terms; and

  • Create aggregated or de-identified data that does not identify you, which we may use and share for any lawful purpose.

Where we process your consumer health data or other sensitive information, we limit that use to providing and improving the Service you have requested, and to other purposes only with your consent or as permitted by law.

Search queries. When you use the in-app search to look up a product or ingredient, we log the text you enter. These search logs are stored separately from your account and are not linked to your identity, your device, or any other information that could identify you. We use this anonymized data solely to understand which products and ingredients users look for, identify gaps in our ingredient database, and improve the accuracy and coverage of the app. We do not sell this data. Because these logs are de-identified, we may retain them to support ongoing product improvement. This feature is intended for product and ingredient names; please avoid entering personal or sensitive information into search fields.

5. Artificial Intelligence and Automated Processing

To read product labels and extract ingredients, the Service uses third-party artificial-intelligence and OCR providers. When you scan or photograph a label, the image and/or extracted text may be processed by these providers on our behalf under contractual confidentiality and data-protection terms. We do not use this automated processing to make legal or similarly significant decisions about you, and the ingredient analysis it produces is for general informational purposes only (see our Terms of Service).

6. How We Share Information

We do not sell your personal information, and we do not share your sensitive or health-related personal information for cross-context behavioral advertising. We share information only as follows:

  • Service providers / processors: companies that perform services for us, such as cloud hosting and database services (Supabase), transactional email delivery (Resend — used for messages such as password resets), feedback-form processing (Formspree), and artificial-intelligence/OCR processing used to read product labels. They may process your information only on our instructions and must protect it.

  • Payment and app-store processing: the Apple App Store and Google Play, which handle billing.

  • Legal and safety: when we believe disclosure is reasonably necessary to comply with law, legal process, or governmental request; to enforce our Terms; or to protect the rights, safety, or property of OkHera, our users, or the public.

  • Business transfers: in connection with a merger, acquisition, financing, reorganization, or sale of assets, subject to this Privacy Policy.

  • With your consent: for any other purpose disclosed to you, with your consent.

Anonymous product cache. As described in Section 3(e), when you scan a product that is not in our primary database, we add the resulting product data to a shared cache that all users can benefit from. This cache contains only product information (barcode, product name, and ingredients) and no personal information or user identifiers. Making product data available in this way does not identify you and is not linked to your account.

Data sharing with brand partners. OkHera's business plans may in the future include partnerships with pregnancy-related brands. We will not share information that identifies you with brand partners for their own marketing unless you give your explicit, opt-in consent, which you may withdraw at any time. Absent such consent, any brand-related insights we share will be aggregated or de-identified and will not identify you.

7. Legal Bases for Processing (EEA / UK Users)

Where the GDPR or UK GDPR applies, we process personal data on the following legal bases: performance of a contract (to provide the Service you request); consent (for sensitive/health data and certain communications, which you may withdraw at any time); legitimate interests (to operate, secure, and improve the Service, balanced against your rights); and legal obligation (to comply with law).

8. Data Retention

We retain your personal information only for as long as your account is active and as needed to provide the Service.

Immediate deletion on account closure. When you delete your account, we perform an immediate and permanent deletion of all personal and user-generated data associated with your account — including your profile information, your saved products, and your device-local scan history. There is no grace period and no soft-delete recovery window: once deleted, this data cannot be restored.

Minimal legal record (tombstone). The only exception is a minimal record that we retain indefinitely for legal, liability, and identification purposes. This record contains only: your email address, your account creation date, your account deletion date, and your consent record (the timestamps of your consent and the version of the Terms of Service you accepted). It contains no scans, saved items, profile content, or history. We keep this limited record so that we can evidence that you agreed to our Terms and consented to our data practices, establish the timeline of your account, and protect against, establish, or respond to legal claims. Where applicable law requires us to delete this record, we will do so.

Data that is not personal to you. Anonymous product data in our shared community product cache (see Sections 3(e) and 6) contains no personal information or user identifiers and is not deleted when you delete your account. We may also retain aggregated or de-identified data that does not identify you. When any other personal information is no longer needed, we delete or de-identify it.

You do not need to contact us to delete your account — you can do so yourself at any time, as described in Section 9.

9. Your Privacy Rights and Choices

Depending on where you live, you may have some or all of the following rights regarding your personal information:

  • Access / know what personal information we hold about you;

  • Correct inaccurate personal information;

  • Delete your personal information;

  • Portability — receive a copy in a usable format;

  • Opt out of any "sale" or "sharing" of personal information and of targeted advertising (note: we do not sell personal information or share sensitive health data for cross-context behavioral advertising);

  • Limit the use of sensitive personal information;

  • Withdraw consent to processing of your consumer health data at any time; and

  • Non-discrimination — we will not discriminate against you for exercising these rights.

Deleting your account (self-service). You can delete your account and exercise your right to erasure at any time, directly in the app, from Profile → Settings. Because deletion is permanent, the app protects you with a confirmation dialog that explains the consequences and requires you to re-enter your password. Deletion takes effect immediately and permanently, as described in Section 8. You do not need to contact us to delete your account.

Deleting your account does not cancel your subscription. Your subscription is billed and managed by the Apple App Store or Google Play, not by OkHera. Deleting your OkHera account will not cancel your subscription, stop future charges, or provide a refund. To stop billing, you must separately cancel your subscription in your App Store or Google Play account settings.

To exercise any of your other rights, email us at okhera.app@gmail.com. We will verify your request as required by law and respond within the timeframe the law allows. You may use an authorized agent where permitted. You can also manage some choices directly in the app (for example, editing your profile) and through your device settings.

10. State-Specific Disclosures (United States)

California (CCPA/CPRA). California residents have the rights described in Section 9, including the right to know, delete, and correct personal information, to opt out of sale/sharing, to limit the use of sensitive personal information, and to non-discrimination. We do not sell personal information. In the preceding 12 months, we may have collected the categories of information described in Section 3 for the purposes described in Section 4.

Washington My Health My Data Act (and similar Nevada and Connecticut laws). If you are a Washington resident (or covered by similar laws), you have specific rights regarding your consumer health data, including the right to access, withdraw consent, and request deletion of your consumer health data, and the right to a list of third parties with whom we have shared it. We obtain your consent before collecting consumer health data beyond what is necessary to provide the Service you request, and we obtain separate consent before any sharing of consumer health data. We do not sell consumer health data without a valid written authorization. To exercise these rights, email okhera.app@gmail.com.

11. Children's Privacy

The Service is intended only for users 18 years of age and older. We do not knowingly collect personal information from anyone under 18 (and, in any event, not from children under 13 in the United States or under the applicable age in other jurisdictions). If we learn that we have collected personal information from a child, we will delete it. If you believe a child has provided us information, contact okhera.app@gmail.com.

12. Security

We use reasonable administrative, technical, and organizational measures designed to protect personal information, including encryption of credentials and access controls. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security. You are responsible for keeping your login credentials confidential. If we become aware of a security incident affecting your information, we will notify you and authorities as required by applicable law.

13. International Data Transfers

We are based in the United States, and the information we collect is processed and stored in the United States and other countries where we or our service providers operate. These countries may have different data-protection laws than your own. Where required (for example, for transfers from the EEA or UK), we use appropriate safeguards such as Standard Contractual Clauses. By using the Service, you understand that your information may be transferred to and processed in the United States.

14. Cookies and Analytics

The Service and our website may use cookies, software development kits (SDKs), and similar technologies for analytics, functionality, and performance. You can control cookies through your browser settings and limit certain mobile analytics through your device settings (for example, by resetting or limiting your advertising identifier). We do not use these technologies to sell your information or to share sensitive health data for cross-context behavioral advertising.

15. Third-Party Links and Services

The Service may link to or include third-party websites, products, or services. This Privacy Policy does not apply to those third parties, and we are not responsible for their privacy practices. Please review their privacy policies.

16. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. When we do, we will revise the "Last Updated" date above and, for material changes, provide reasonable notice (for example, through the Service or by email). Where required by law, we will obtain your consent to material changes. Your continued use of the Service after the changes take effect constitutes your acknowledgment of the updated Privacy Policy.

17. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or your personal information, contact us at:

THE FLOCO COMPANY, LLC Email: okhera.app@gmail.com Website: OkHeraapp.com