Privacy Policy

1. Introduction

One Bright Studio ("we," "our," or "us") operates the Natural Healing mobile application (the "App"). We respect your privacy and are committed to protecting your personal data. This privacy policy explains how we collect, use, and safeguard your information when you use our App.

2. Information We Collect

This website uses analytics only if you agree to it. Nothing is collected until you accept the banner shown on your first visit, and you can change your mind at any time using the "Cookies and analytics" link in the footer. We do not use advertising or cross-site tracking anywhere. Except where this section says otherwise, everything below applies to the iOS app.

Natural Healing works fully without an account, and by default your data stays on your device. Signing in is optional, and it is what turns on cloud sync and community reviews. What we collect depends on which of those you use.

Stored on your device (no account needed):

• Your favourite herbs and remedies
• Your wellness journal entries — mood rating, symptoms, and notes
• Your onboarding answers — wellness interests, experience level, and how you like to use herbal remedies
• Your daily streak, reminders, and app settings
• Search history (stored locally, never transmitted)

Account information (only if you sign in):

• Your name and email address, as provided by Sign in with Apple or Google Sign-In. If you use Apple's "Hide My Email", we only ever receive the relay address.
• An account identifier, which is how your synced data, your reviews, and your subscription entitlement are linked to you

Synced to your account (only if you sign in):

• Your favourite herbs and remedies
• Your wellness journal entries, including the mood rating, symptoms, and free-text notes you write
• Your wellness profile from onboarding

Your journal and wellness profile describe how you feel and what you are treating. We treat this as health data and it receives the additional protections described in sections 10 and 15.

Community ratings and reviews (only if you submit one): see section 5.

The Herbalist: see section 6.

Usage analytics:

• Which screens and features are used, and which remedies and categories are viewed
• App performance and stability information
• Device type, operating system version, and a device identifier assigned by Apple to this app on this device

Analytics is used to understand how the app is used in aggregate. It is not used for advertising, and we do not share it with advertising networks or data brokers.

Subscription information:

• Apple processes all subscription payments through the App Store
• We receive only your subscription status, which we store against your account identifier so that premium features work across your devices
• We never receive or store your payment card or billing details

Website analytics (only if you accept):

• Which pages you view on this website, the page title, and the address of the page that referred you
• Campaign parameters in the link you arrived through, when present
• How far you scroll on remedy, herb, and category pages
• When you tap an App Store link, or open or submit the Android notification form
• Basic technical information the analytics tool adds automatically: your browser and its version, your operating system, your device type, and your screen size
• A random identifier stored in your browser so repeat visits can be recognised as the same browser

This is processed by Mixpanel on our behalf, on servers in the European Union. We have turned off session recording and automatic event capture, and we have disabled IP-based location lookup, so we do not know where you are. We never send your email address or any other personal detail to Mixpanel. The identifier is tied to a browser, not to you: it cannot tell us who you are, and we make no attempt to link it to a person.

What we store in your browser:

• nh_consent — remembers whether you accepted or declined analytics. Kept until you clear your browser storage.
• A Mixpanel identifier — recognises repeat visits from the same browser. Kept until you decline or clear your browser storage.

The consent record is stored whether you accept or decline, because it is the only way to honour your choice. Nothing else is stored unless you accept.

Android launch notifications (only if you ask for them):

• The email address you submit on our website, so that we can tell you when the Android app is released
• The date and time you submitted it, your browser's user agent string, and a hashed version of your IP address, which we keep for abuse prevention

This list exists for that single announcement. It is not a newsletter, it is never used for marketing, and it is never shared or sold. This list is separate from the website analytics described above. To be removed at any time, email support@naturalhealingapp.com.

3. How We Use Your Information

We use the information we collect to:

• Provide and maintain the app's functionality
• Keep your favourites and journal available across your devices when you are signed in
• Suggest remedies that match the symptoms or goals you describe
• Publish and moderate community ratings and reviews
• Confirm your premium entitlement and apply fair-use limits
• Improve app performance and understand which content is most valuable
• Detect and prevent abuse, spam, and security incidents
• Fix bugs and technical issues
• Comply with legal obligations

4. Using Natural Healing Without an Account

You can browse every unlocked remedy, keep favourites, write journal entries, build streaks, and use reminders without ever signing in. In that case your favourites, journal, and wellness profile never leave your device, and we hold no name or email address for you.

Signing in is required only for cloud sync, community ratings and reviews, and the cloud-assisted Herbalist. You can skip it during onboarding and turn it on later, or never.

Regardless of whether you sign in, Natural Healing does not collect:

• Your location
• Your contacts, photos, calendar, or microphone
• Data from Apple Health or any other health app
• Your payment card or billing details
• Any data used to track you across other companies' apps and websites

5. Community Ratings and Reviews

You can rate herbs and remedies and write a short review. Submitting a rating or review requires a signed-in account.

Reviews are public. Your star rating, your review text, and the display name shown on your review are visible to everyone using the app. Please do not include anything in a review that you would not want published, and do not include personal medical details you want kept private.

To keep reviews usable we:

• Screen submitted review text automatically before it is published
• Let anyone report a review, and automatically hide reviews that attract several reports
• Let you block another contributor so you no longer see their reviews
• Remove content and restrict accounts that break our Terms of Service

Reports and blocks are stored against your account so that we can act on them and so that blocks persist across your devices.

6. The Herbalist

The Herbalist has three parts — Symptom Advisor, Ask the Herbalist, and Remedy Plan. All of them work from text you type, such as a description of your symptoms or your health goals. That text is health data.

On supported devices, the Herbalist runs entirely on your iPhone. Nothing you type is transmitted to us or to anyone else.

On devices that cannot run it locally, we offer a cloud-assisted version. This requires a signed-in account and your explicit consent, which we ask for in the app before anything is sent. If you consent:

• Your question, plus a shortlist of candidate remedies from our own catalogue, is sent to our server and forwarded to a third-party language-model provider that generates the answer
• Requests are identified by your account identifier, which we use to confirm your premium entitlement and apply fair-use limits
• We require our provider to process your question solely to generate that response, under API terms that do not permit training on submitted content
• We do not use your questions to build a profile of you, and we do not combine them with your journal

We may change language-model provider over time; any provider we use is held to the same requirement. To find out who currently processes these requests, email support@naturalhealingapp.com.

If you decline consent, the cloud-assisted Herbalist is simply unavailable and the rest of the app works as normal.

The Herbalist provides educational information only. It is not a medical professional and does not give medical advice.

7. Data Sharing and Third Parties

We do not sell your data, and we do not share it for advertising.

We use the following service providers, who process data on our behalf:

• Apple: App Store distribution, Sign in with Apple, subscription processing and status
• Google (Firebase, Google Cloud): authentication, cloud database for synced favourites and journal entries, community reviews, server functions, analytics, and remote configuration. Google acts as our data processor.
• Google Sign-In: if you choose to sign in with Google
• Mixpanel: processes website analytics as described in section 2, only if you have accepted analytics, on servers in the European Union. Mixpanel acts as our data processor.
• Our language-model provider: processes cloud-assisted Herbalist questions, as described in section 6
• Legal authorities: where required by law, or to protect our rights and the safety of our users

Your public reviews are, by their nature, shared with other users of the app.

8. In-App Purchases and Subscriptions

Natural Healing offers an optional subscription:

• All payments are processed by Apple through the App Store
• Subscriptions auto-renew unless canceled in your App Store settings
• Manage or cancel your subscription anytime in Settings → Apple ID → Subscriptions
• We receive your subscription status from Apple, never your payment details
• Refund requests must be made through the Apple App Store

9. Data Security

Data on your device is stored using iOS encrypted storage. Data synced to your account is transmitted over encrypted connections and stored in Google Cloud infrastructure, protected by access rules that limit each account to its own records. Community reviews cannot be edited directly by app clients; all writes pass through our server so they can be screened and rate-limited. No method of transmission or storage is completely secure, but we take these measures seriously.

10. Data Retention

• On-device data is kept until you delete it in the app or delete the app itself.
• Synced account data (favourites, journal entries, wellness profile) is kept while your account exists, and is deleted when you delete your account.
• Community reviews are kept while published. They are deleted when you delete your account.
• Cloud-assisted Herbalist questions are processed to produce your answer and are not retained as part of a profile. Short-lived operational logs used for abuse prevention and fair-use limits are retained for up to 30 days.
• Analytics data is retained for up to 24 months.
• Website analytics collected via Mixpanel is retained under Mixpanel's project-level retention setting. We have not configured that setting to a specific period, so it is not currently deleted on a fixed schedule; withdrawing consent stops any further collection immediately.
• Android launch notification emails are deleted once the launch announcement has been sent, or sooner if you ask us to remove you. The hashed IP counters used to rate-limit that form are kept separately for abuse prevention and are not currently deleted on a schedule.

11. Your Rights, and How to Delete Your Account

You can delete your account at any time from the You tab in the app: open your profile and choose Delete Account. This deletes your synced favourites, journal entries, and wellness profile, deletes your community reviews, revokes the sign-in token, and removes your account entirely.

Please note: deleting your account removes your data from our servers, but the copy stored on your device is deliberately left in place so that you do not lose your own journal. To remove that too, delete the app.

You also have the right to:

• Ask what personal data we hold about you, and receive a copy of it
• Have inaccurate data corrected
• Have your data deleted
• Withdraw consent for the cloud-assisted Herbalist, in the app, at any time
• Object to or ask us to restrict a particular use of your data
• Complain to your local data protection authority

To exercise any of these, email support@naturalhealingapp.com. We respond within 30 days.

Website analytics: you can withdraw consent at any time using the "Cookies and analytics" link in the footer of any page. Declining stops collection immediately and clears the identifier from your browser.

12. Children's Privacy

Natural Healing is rated 12+ due to medical information content, and it is not directed at children. Creating an account and submitting reviews are intended for users aged 13 and over. We do not knowingly collect personal information from children under 13. If you believe a child has created an account or submitted a review, contact us and we will remove it.

13. International Users

Natural Healing is available worldwide. Our service providers operate in the United States and other countries, so if you sign in, your account data may be transferred to and processed outside your own country. Where required, these transfers rely on the European Commission's Standard Contractual Clauses or an equivalent safeguard.

14. California Privacy Rights (CCPA)

California residents have additional rights under the California Consumer Privacy Act:

• Right to know what personal information is collected
• Right to delete personal information
• Right to correct inaccurate personal information
• Right to opt out of the sale or sharing of personal information — we do neither
• Right to limit use of sensitive personal information — your journal and symptom descriptions are used only to run the features you asked for
• Right to non-discrimination for exercising privacy rights

15. European Union and UK Users (GDPR)

If you are in the European Union or the United Kingdom, you have the rights listed in section 11. Our legal bases for processing are:

• Performance of a contract: operating your account, syncing your data, publishing your reviews, and confirming your subscription
• Explicit consent (Article 9): your wellness journal, wellness profile, and the symptoms you describe to the Herbalist are health data, which is a special category of personal data. We process it only on the basis of your explicit consent, which you give by choosing to sign in and sync, or by consenting to the cloud-assisted Herbalist. You can withdraw it by turning the feature off or deleting your account.
• Legitimate interests: keeping the service secure, preventing abuse and spam, moderating reviews, and understanding aggregate usage
• Legal obligation: where the law requires us to retain or disclose information

One Bright Studio is the data controller for this processing. Contact us at support@naturalhealingapp.com.

16. Changes to This Policy

We may update this privacy policy from time to time. We will notify you of significant changes by posting the updated policy in the app, updating the "Last updated" date, and sending an in-app notification for material changes. Your continued use of the app after changes constitutes acceptance.

17. Medical Disclaimer (Reiterated)

This app is for educational purposes ONLY. The information in Natural Healing should not be used to diagnose or treat any health condition. Herbal remedies can interact with medications and may not be suitable for everyone. Always consult with a qualified healthcare professional before starting any new herbal remedy.

18. Contact Us

If you have questions about this privacy policy or our data practices, please contact us:

Email: support@naturalhealingapp.com
Subject: Natural Healing – Privacy Inquiry