Henka

Your information. Your choices.

Privacy Policy &
Terms and Conditions

How Henka handles information, what the app provides, and the responsibilities that come with using it.

Document №1

Privacy Policy

Henka · Effective: 25 September 2026 · Version 2026-09-25-v1

This policy explains how Irina Kogai (“we”, “us” or “our”), operating Henka from the Australian Capital Territory, Australia, handles information in connection with the Henka mobile app. Our contact details are in Contact.

Journeys on your deviceDrafts, daily progress and reflections are stored locally. Device backups are separate.
AI is optionalRequesting suggestions sends selected creation information through Cloudflare to OpenAI.
Access uses online recordsTrial, purchase and AI access involve identifiers and service providers, even without an app account.

1. Information handled and why

Henka does not require an email address or a named app account for journey tracking. It uses persistent installation and purchase identifiers. These are pseudonymous identifiers: they can link records to an installation or customer and should not be treated as fully anonymous information.

Information used by the app and its services
CategoryInformation and sourceUse and destination
Journey contentInformation you enter or save: inspiration names and context, admiration text, selected qualities, practices and schedules, energy levels, completion dates, reflections, checkpoint answers, assessments, history, drafts and settings.Stored in the app’s local database to provide your journeys and progress. The app does not synchronise this database to our servers. Selected creation fields leave the device when you request AI, as described below.
AI requests and resultsYour chosen creation fields and the suggestions produced in response. The exact fields differ between quality discovery and practice generation.Cloudflare processes the request; OpenAI generates the suggestions. Results return to your device and can become part of your saved draft or journey.
Trial and AI accessA generated app user identifier, an installation credential, a trial start timestamp if a trial was started, and monthly paid AI usage counts.The credential is sent to our Cloudflare service; the access database stores its hash, the identifier and trial timestamp. Paid AI counters use the original RevenueCat customer identifier. These records authenticate requests and enforce access and allowances.
Purchases and restorationApp customer identifiers, store receipt or transaction information, product and purchase history, entitlement status, and device/app/network information used by the purchase service. Information comes from your device, the store and RevenueCat.Apple or Google processes the payment. RevenueCat validates purchases, restores access and supplies purchase reporting. Our backend checks RevenueCat when paid AI access needs verification. The app does not ask you to enter full payment card details.
Network and service informationIP addresses, request timing and routing information, request outcomes and technical request metadata generated when your device connects to a service.Service delivery, security and abuse prevention. Cloudflare uses the connecting IP address for request rate limits.
CommunicationsIf you contact us: the contact details, message, purchase reference or attachments you choose to provide.To answer the request, investigate a problem or handle a privacy or consumer complaint. Do not send payment card numbers, installation credentials or unnecessary sensitive information.

After the user explicitly connects online services through the billing notice, a configured native build can initialise RevenueCat and check access when the app opens or returns to the foreground. Before connection, the new implementation does not configure the billing SDK. This can happen before a purchase and independently of using AI. RevenueCat can derive a country from an IP address; that is different from the app requesting precise device location.

The reviewed app has no advertising feature or separate behavioural analytics SDK. RevenueCat’s purchase reporting is a form of analytics. The app does not request photos, contacts, microphone recordings, precise location or health-platform records for the features described here.

2. Optional AI processing

Manual journey creation and local daily tracking do not require an AI request, subject to your trial or purchased access. When you request AI:

  • Quality discovery sends the inspiration name, any inspiration context, admiration text and selected admiration hints, and the chosen journey duration.
  • Practice generation sends the names and descriptions of selected qualities and the chosen journey duration. The app does not transmit optional time/preferences text; such fields are rejected at its request boundary until covered by a revised disclosure.

These requests pass through our Cloudflare service to OpenAI. Our app also sends its access identifier and credential to Cloudflare to authorise AI; the backend does not forward those access credentials or the user’s connecting IP address to OpenAI in the AI request. OpenAI receives the creation text, which may itself identify you or someone else if you include identifying details.

The app does not automatically attach daily completions, energy check-in history, private reflections, checkpoint answers or saved journey history to AI requests. If you copy any of that information into a creation field, it will be included with that field. Avoid unnecessary names, confidential information, health details or sensitive information about yourself or other people.

Our AI request code does not save prompts or results in the backend access database or deliberately log their text. It requests that OpenAI not store a retrievable response. This does not mean zero retention. OpenAI states that API data is not used for model training by default unless the API customer opts in; its default abuse-monitoring retention is up to 30 days, with longer retention possible for legal or harm-prevention reasons. See OpenAI’s API data controls. Model-dependent prompt caching may also retain encrypted application state; account settings and model behaviour must be verified. store:false is not a zero-retention approval.

You can avoid future AI submissions by using manual creation. Stopping future requests does not recall information already processed. For requests about previously submitted information, use Contact.

3. Service providers and other disclosures

The app uses Cloudflare for the AI proxy, access database and traffic protection; OpenAI for AI generation; and RevenueCat for purchase validation, customer access records and purchase reporting. Apple and Google handle their stores, store accounts and payments. Your device or backup provider may separately process device backups according to your settings.

Providers’ roles depend on the service and applicable contracts. Store account and payment processing is also governed by the relevant store’s own terms and privacy information. Provider policies do not replace our obligations for information we are responsible for handling.

Relevant information: Cloudflare privacy, OpenAI API data controls, RevenueCat privacy, Apple privacy, and Google privacy.

We may disclose information where required by applicable law or valid legal process, or where lawfully necessary to protect people, investigate abuse or establish, exercise or defend legal claims. Such disclosures must be limited to what is appropriate for the purpose. This is not permission for unrestricted sharing.

4. Processing in other countries

The providers named above operate internationally, including in the United States. Information sent to online services may be processed outside the country where you live. Local device storage does not mean that optional AI, purchase processing or device backups remain in your country.

5. Retention, backups and deletion

On your device. Saved local records remain in app storage unless changed through an available feature or the app’s local storage is removed. Trial expiry does not erase your journey information. Settings includes a separately confirmed local-journey erasure control. It preserves trial/purchase and legal/request evidence; local erasure does not restart the trial. There is no general local-journey export feature in this build. Removing local app data using your operating system’s controls can permanently remove that device’s records. Offloading or archiving an app may preserve its data.

Backups. Operating-system or third-party backups may include app data depending on your settings. Removing local data does not necessarily remove existing backups, and restoring a backup may restore app records. Manage backups with the relevant provider. Henka does not provide its own cloud backup or journey synchronisation service.

Access records. The local implementation includes bounded retention tooling; scheduled execution is disabled until operational adoption and provider verification. Resetting a monthly allowance alone does not delete historical counters. The cleanup procedure expires old counters 30 days after their UTC month ends and checks current purchase entitlement before removing due unpaid trial/unused installation records. Paid dormant bindings require review to preserve restoration. Uninstalling the app does not send a server deletion request.

Providers. OpenAI retention is described in section 2. Cloudflare infrastructure records, RevenueCat customer and purchase records, and Apple/Google records have their own applicable retention arrangements. These are not all subject to OpenAI’s 30-day default. Confirm provider retention and deletion arrangements before relying on a specific deletion date.

Requests. Email story@createdbyira.com to request access, correction or deletion of information for which we are responsible. We may need proportionate information to locate the relevant installation or transaction and verify the request. A receipt alone may not identify an unlinked trial installation. Do not send your installation credential or unrelated identity documents. We cannot remotely read or erase a local-only journey database through the current app.

Deleting service records can affect verification or restoration until access is re-established. It does not itself cancel a store transaction or remove statutory purchase rights. Any information retained despite a valid deletion request must have a lawful basis; we will explain an applicable exception and the relevant retention criteria.

6. Security

The app requires HTTPS for production AI and access requests, and the access database stores a hash of the installation credential rather than the credential itself. The local database is held within app storage. The reviewed configuration does not enable separate application-level database encryption.

Local storage is not the same as end-to-end encrypted cloud storage. Keep your device, backups and store account secure. No transmission or storage system is guaranteed to prevent every loss or unauthorised access; this does not reduce any security or notification duty imposed on us by law.

7. Choices, rights and complaints

You may use manual creation instead of AI and manage device backup settings independently. Online purchase and AI features need the information necessary to provide those features. The app can retain local progress after the trial ends even when editing and new tracking are locked.

Depending on applicable law, you may have rights to access, correct, erase or obtain a portable copy of personal information, restrict processing, withdraw consent, complain to a regulator, or appeal a request decision. The scope of each right and any lawful exceptions depend on your location and the processing involved.

Right to object: where applicable law gives you a right to object to processing based on legitimate interests, you may exercise it through Contact. Where processing relies on consent, you may withdraw it without affecting the lawfulness of earlier processing.

Contact us with your request or complaint. We will review it, seek only reasonably necessary clarification or verification, and respond within the applicable legal deadline. If we cannot fulfil a request, we will explain the reason and any available review or complaint route. You do not need to waive a legal right to make a request.

Where the relevant law applies, you may complain to the Office of the Australian Information Commissioner, the UK Information Commissioner’s Office, your competent EEA data protection authority, or another local privacy regulator. This does not require first giving up any right to complain directly.

8. Regional legal grounds and automated processing

AI generates optional suggestions from the creation information you submit. You choose which suggestions to use. Separately, automated access checks use trial dates, purchase entitlement and usage counts to allow or deny features or AI requests. If access appears incorrect, contact us for review. This policy does not describe AI suggestions as a professional assessment of you.

9. Age eligibility

Henka is intended for adults aged 18 or older. People under 18 are not eligible to use the service. If you believe a person under 18 has submitted personal information to our online services, contact story@createdbyira.com so we can investigate and take appropriate action.

10. Changes to this policy

We will update the policy when our information practices change and show the effective date. Material changes will be brought to users’ attention through an appropriate notice. If a new use requires consent or another legal step, we will take that step before beginning it. A policy update does not by itself give us permission to use previously collected information for an incompatible purpose.

Document №2

Terms and Conditions

Henka · Effective: 25 September 2026 · 2026-09-25-v1

These Terms govern use of Henka between you and Irina Kogai. “Henka” means the app and the online services we provide for it. Our details appear in Contact. The Privacy Policy explains information handling; agreement to these Terms is not a substitute for any separate privacy consent required by law.

1. Agreement and eligibility

You must be at least 18 years old, have legal capacity to enter into these Terms and be permitted by applicable law to use Henka where you are located. Read these Terms before accepting them. If you do not agree, do not accept or begin using the service under these Terms.

2. What Henka provides

Henka is a personal development and habit-tracking tool. It helps you choose qualities, create practices, record progress and reflect on your experience. AI can optionally suggest qualities and practices. Progress figures describe recorded app activity; they are not clinical measurements or proof of a personal outcome.

Henka is not a medical, mental-health, therapeutic, legal, financial or other professional advice service. It does not diagnose or treat a condition, assess fitness for an activity, supervise your actions, or provide emergency monitoring. Seek an appropriately qualified professional when a decision requires professional advice. For an immediate emergency, contact local emergency services.

3. AI suggestions and your decisions

AI outputs are generated automatically and may be inaccurate, incomplete, biased, unsuitable or unsafe. They may sound confident despite being wrong. They are not individually reviewed or approved by a qualified professional before being displayed. Safety instructions and automated checks cannot guarantee a safe or correct result.

You decide what information to submit and whether, when and how to act. Review suggestions before adopting them; edit, reject or ignore any suggestion that does not suit your circumstances. Check factual claims independently when they matter. Do not use Henka as the sole basis for a medical, safety-critical or other high-stakes decision.

Consider your physical condition, circumstances and other people’s rights before attempting a practice. Do not follow a suggestion that encourages illegal conduct, harm, dangerous exercise, extreme dietary restriction, manipulation, substance misuse or changes to medication. Stop an activity that causes harm or significant distress and seek appropriate help.

We do not promise that using Henka or following a suggestion will produce a particular habit, health benefit, performance improvement or personal transformation. Subject to section 8, you remain responsible for your voluntary actions and for complying with the law. This does not make you responsible for our breach of a legal duty.

4. Permitted use

You may use Henka for lawful personal purposes within your access entitlement. Do not use it to facilitate harm, harassment, exploitation, infringement of another person’s privacy or intellectual property, or other unlawful conduct. Do not interfere with the service, distribute malware, misuse access credentials, impersonate another user or bypass purchase verification, security controls or AI usage limits.

Only submit information you have a lawful basis and any necessary permission to provide. Avoid confidential or sensitive information that is unnecessary for a request, especially information about other people. These obligations do not transfer our own legal responsibilities to you.

5. Trial, one-time purchase and AI allowance

Trial

The trial lasts 14 days from when you explicitly start it. Starting the trial does not purchase lifetime access and does not trigger an automatic payment when it ends. Journey durations of 30 days, three months or six months are separate from the trial period.

After trial expiry without a purchase, the app preserves local records and provides read-only progress/history access. Tracking, editing, assessments, new journeys and AI require full access. A stored record is still subject to your device storage and backup settings.

Purchase and restoration

The intended offer is a one-time, non-consumable purchase with no recurring subscription charge and no preset expiry of purchased journey access. It includes up to 30 individual AI attempts per UTC calendar month for as long as Henka is operated, preserving existing purchase commitments. The store presents the applicable product and local price before you confirm payment.

This service-duration statement does not give us a right to close the service arbitrarily, remove mandatory consumer remedies or retrospectively reduce an earlier purchase promise. Material changes or closure are subject to section 9 and applicable law. The purchase does not guarantee compatibility with every future device or operating-system version.

Use the same store account and the app’s restore-purchase option to seek restoration of an eligible purchase. Restoration depends on the relevant store record and verification. An Apple purchase does not automatically confer ownership through Google Play, or vice versa. Restoring a purchase restores access, not a lost local journey database.

AI allowance

Paid access includes 30 individual AI attempts per UTC calendar month, shared between quality discovery and practice generation. The allowance resets at 00:00 UTC on the first day of each month; unused attempts do not roll over. A single journey may use more than one attempt.

An attempt counts when the server reserves allowance for an authorised AI request. Provider failures, clarification responses and cancellation after reservation can count. Requests rejected before reservation do not consume the monthly allowance. Manual edits do not use AI allowance. During the trial, there is no fixed AI action allowance; rate limits and service availability still apply.

Refunds and statutory remedies

Store procedures may be used to request a refund, and you may also contact us about a purchase problem or legal remedy. Applicable consumer rights take priority over a “no refund” statement or a store’s discretionary refund policy. Refunds, reversals or corrected store entitlement records can affect paid access, subject to your legal rights.

6. Content and intellectual property

You retain any rights you hold in the material you provide. You give us only the permission needed to process content that you choose to send, and to use our service providers to fulfil that request, as explained in the Privacy Policy. This is not permission to publish your private reflections or use them in advertising.

AI output may not be unique and may not qualify for exclusive intellectual property protection. We do not promise ownership, exclusivity or clearance of third-party rights in generated output. You may use suggestions in your own journey; check relevant rights before reproducing them elsewhere.

Our app materials and software remain subject to their applicable ownership and licences. Your access permits personal use of Henka; it does not transfer ownership of the app, artwork, branding or software. Open-source components retain the rights granted by their own licences, available through the app’s licence notices. References to an inspiration, person or character do not establish affiliation, endorsement or impersonation.

7. Availability, local records and third parties

AI, purchase verification and restoration depend on network access and third-party services. Interruptions, maintenance, rate limits and store outages can affect those features. We do not promise uninterrupted operation or that every generated result is accurate. This does not exclude any legal requirement to supply a service with appropriate care and skill.

Henka’s journey records are held locally. Device loss, deletion of app storage or backup problems can result in data loss. Use suitable device security and backup options if you wish to preserve records. Henka has no cloud journey restoration service. Your backup choices do not excuse us from any legal responsibility for a failure for which we are liable.

The relevant app-store terms also apply to your relationship with the store. For an Apple distribution where no custom EULA has been adopted, Apple’s standard application licence applies to the app licence. These service Terms do not purport to replace it. Mandatory law and applicable store requirements prevail over an inconsistent provision.

8. Responsibility and limits of liability

The legal-rights notice at the beginning of these Terms takes priority. Describing AI as fallible does not remove our duties concerning the app, its representations, security or the services we supply.

To the extent permitted by applicable law, we are not responsible for loss caused solely by your independent unlawful conduct, your deliberate misuse contrary to these Terms, or an event for which we have no legal responsibility. The fact that you used Henka or received an AI suggestion does not, by itself, make us responsible for every subsequent choice or outcome.

To the extent permitted by applicable law, we exclude liability for loss that was not reasonably foreseeable as a result of our breach when the contract was made, and business losses arising from use of this personal-use app. This exclusion does not apply where the law requires compensation for that loss or where the exclusion would be unfair or unenforceable.

We do not exclude or limit liability for fraud, fraudulent misrepresentation, deliberate misconduct, gross negligence, death or personal injury caused by our negligence, or any other liability that cannot lawfully be excluded or limited. Nothing requires you to indemnify us for our own conduct or waive statutory privacy or consumer remedies. Where both parties contribute to a loss, responsibility is determined by applicable law.

9. Changes, suspension and ending use

You may stop using Henka at any time. Removing the app does not itself request deletion of online records; see the Privacy Policy. Purchase and statutory rights are not cancelled merely because you stop using the app.

We may make proportionate service changes or restrict affected online access where reasonably necessary to address a material breach, security threat, fraud or legal requirement. Where practicable, we will explain the reason, provide reasonable notice and an opportunity to correct a remediable breach, and offer review through our contact channel. Urgent protective action may occur first. These powers do not permit arbitrary cancellation of a valid paid entitlement.

We will provide clear notice of material changes to these Terms before they take effect and seek agreement where required. Changes do not retrospectively remove accrued rights. A material reduction in purchased features or a proposed service closure must be handled consistently with our purchase promises and applicable remedies, including any required notice, refund or compensation. Continued use alone will not substitute for consent where affirmative agreement is legally required.

10. Questions, disputes and applicable law

Please contact us about service or purchase problems so we can investigate. This does not prevent you from seeking a statutory remedy, contacting a regulator or bringing a claim in a competent court.

Subject to mandatory applicable law, these Terms are governed by the laws of the Australian Capital Territory, Australia. This choice does not deprive you of mandatory protections that apply where you ordinarily live or of your right to bring proceedings in a court available to you under applicable law.

These Terms do not impose mandatory arbitration, a class-action waiver, a shortened statutory claim period or exclusive foreign court proceedings. If a provision is invalid, the remaining provisions continue only to the extent lawful; severability does not validate an unfair provision.

For either document

Contact

Use these details for privacy requests, complaints, purchase issues and questions about the Terms.

Legal operator / privacy controller where applicable
Irina Kogai
Business and postal contact address
Suite 25
11, Manuka Terrace
18 Flinders Way
Manuka ACT 2603
Australia
Privacy and support email
story@createdbyira.com
Privacy contact
Irina Kogai, through the email or postal address above.