Your data. Your control.

Who we are

Asante (“we”, “us”, “our”) is operated by Philippe Kam, sole entrepreneur (micro-entrepreneur, France). We are the data controller for any personal data collected through asante.health and the Asante mobile application.

Contact: [email protected]

What we collect

Waitlist (current stage)

When you join our waitlist we collect only your email address. We do not collect your name, location, IP address, or any health data at this stage.

When the app launches

Asante will collect the following categories of personal data that you voluntarily provide:

• Account data — email address, timezone, onboarding preferences (menstrual status, HRT status, primary goal, appointment date)
• Health data (special category data) — daily symptom logs including hot flash timestamps, night sweats, mood, sleep quality, brain fog, joint pain, vaginal dryness, energy level, HRT adherence, and free-text notes
• Device health data — if you grant permission, we sync sleep analysis, resting heart rate, and heart rate variability (HRV) from Apple HealthKit (iOS) or Health Connect (Android). Each data type requires your separate, explicit permission. We never read data types you have not authorised.
• Generated reports — structured PDF summaries produced from your logged data, stored as immutable snapshots

Health data and special category data

Symptom logs, device health data, and generated reports constitute special category data (health data) under Article 9 of the UK GDPR. Processing this data requires both a lawful basis under Article 6 and a separate condition under Article 9.

Our lawful bases are:

• Article 6(1)(a) — Consent: you choose to create an account and enter your symptom data.
• Article 9(2)(a) — Explicit consent: before any health data is collected, the app presents a clear, specific consent screen explaining what data will be processed and why. You must affirmatively opt in. This consent is granular, freely given, and can be withdrawn at any time from your account settings.

Withdrawing consent does not affect the lawfulness of processing carried out before withdrawal.

How we use your data

• Waitlist emails: solely to notify you when Asante launches and to send occasional product updates. We will never sell, rent, or share your email with third parties for marketing.
• Health data: to display your symptom logs, calendar, insights, and to generate your appointment summary PDF. Your health data is never used for advertising, marketing, or profiling.
• Device health data: used only to enrich your symptom reports with sleep and heart rate data. We comply with Apple's HealthKit and Google's Health Connect guidelines — health data is never used for advertising or disclosed to third parties without your consent.

Data storage and security

All data is stored in Supabase (PostgreSQL) with EU data residency. Row-level security (RLS) is enabled on every table — your data is accessible only to your authenticated account. All connections use TLS encryption. Data is encrypted at rest.

Generated PDF reports are stored in a private Supabase Storage bucket, accessible only via time-limited signed URLs tied to your authenticated session.

Offline data (logged while your device has no connectivity) is stored locally on your device using WatermelonDB and synced to the server when connectivity returns.

Third-party processors

We share personal data only with the following processors:

• Supabase (EU region) — database hosting, authentication, file storage
• Resend — transactional email delivery (waitlist notifications, account emails)
• Trigger.dev — background job processing for PDF generation
• Browserless (self-hosted) — PDF rendering
• Polar.sh — subscription payment processing (web)
• Apple — in-app purchase processing (iOS)
• Google — in-app purchase processing (Android)

We do not use tracking pixels, advertising networks, or analytics tools that profile individual users. We do not sell personal data to any third party.

Data retention

Waitlist emails are retained until you unsubscribe or the waitlist is closed, whichever comes first.

Account and health data are retained for as long as your account is active. If you delete your account, all personal data — including symptom logs, device health records, generated reports, and PDF files — is permanently deleted within 30 days via cascading deletion on your user ID.

Your rights

Under UK GDPR

You have the right to:

• Access — request a copy of all personal data we hold about you
• Rectification — correct inaccurate personal data
• Erasure — request deletion of your personal data (available in-app via account settings, or by email)
• Data portability — receive your data in a structured, machine-readable format
• Withdraw consent — at any time, without affecting the lawfulness of prior processing
• Lodge a complaint — with the ICO at ico.org.uk

Under the Australian Privacy Act

If you are located in Australia, the Australian Privacy Principles (APPs) also apply to your personal data. Under the APPs you have the right to:

• Access your personal information (APP 12)
• Request correction of inaccurate information (APP 13)
• Know how your information is collected, held, used, and disclosed (APP 1 and APP 5)
• Complain to the Office of the Australian Information Commissioner (OAIC) if you believe your privacy has been breached

Health information is classified as “sensitive information” under the Privacy Act 1988 and is collected only with your explicit consent.

International data transfers

Our primary database is hosted in the EU (Supabase EU region). If data is processed by a sub-processor outside the EU/UK, we ensure appropriate safeguards are in place (such as standard contractual clauses) in compliance with UK GDPR Chapter V.

Children

Asante is designed for adults experiencing perimenopause. We do not knowingly collect personal data from anyone under the age of 18. If we become aware that we have collected data from a minor, we will delete it promptly.

Changes to this policy

We may update this privacy policy from time to time. Significant changes will be communicated via email to waitlist members and in-app for active users. The “last updated” date at the top of this page will always reflect the most recent revision.

Contact

For privacy-related questions, data access requests, or to exercise any of your rights, email [email protected]. We will respond within 30 days.