My Hashi Privacy Policy

Privacy Policy

My Hashi – Thyroid & Hashimoto’s Diary

Last updated: February 21, 2026


1. Introduction

Your privacy is of the utmost importance to us. This Privacy Policy explains how Patryk Szurgot iPapi (operating under the brand relicode.com), the developer of My Hashi, handles information in connection with your use of the application.

Company details:

  • Business name: Patryk Szurgot iPapi
  • Address: Władysława Jagiełły 2/7, 02-495 Warsaw, Poland
  • Tax number (NIP): PL5342359787
  • Website: relicode.com
  • email: dev@relicode.com

Please read this Privacy Policy carefully. By using My Hashi, you acknowledge that you have read and understood this policy.


2. Our Core Privacy Commitment: Offline-First, Data Stays on Your Device

My Hashi does not collect, transmit, or store any of your personal health data on external servers or the internet.

All health information you enter into the application — including thyroid test results (TSH, FT3, FT4, etc.), body weight, well-being entries, and medication/treatment records — is stored exclusively and locally on your device. This data never leaves your device through the application itself.

This means:

  • We cannot see your health data
  • We do not have access to your diary entries
  • No health data is shared with third parties by us
  • Your data is as private as your device itself

3. What Data the Application Stores Locally

The following types of data may be stored locally on your device when you use My Hashi:

  • Health test results: Laboratory values such as TSH, FT3, FT4, and other thyroid or general health markers you choose to enter
  • Body weight records: Weight measurements logged by you over time
  • Well-being entries: Subjective mood, symptom, or energy level logs
  • Treatment and medication records: Names of medications and dosages you record for personal tracking
  • App settings and preferences: Display preferences and configuration options

This data is stored within the application’s private storage on your device and is not accessible to other apps (subject to your device’s operating system permissions).


4. Data We Do Not Collect

We do not collect:

  • Your name, email address, or any account credentials (no account is required)
  • Your location data
  • Device identifiers for tracking purposes
  • Any of your health records or diary entries
  • Contacts, photos, or other device content

5. Data That May Be Collected by Third Parties

While My Hashi itself does not collect or transmit your personal data, certain third-party services involved in the distribution and operation of the application may collect limited, non-health-related data. These include:

5.1 Apple App Store (iOS)

If you download My Hashi from the Apple App Store, Apple may collect information such as your Apple ID, download history, and device information in accordance with Apple’s Privacy Policy.

5.2 Google Play Store (Android)

If you download My Hashi from the Google Play Store, Google may collect information in accordance with Google’s Privacy Policy.

5.3 Crash Reporting and Analytics (if applicable)

The application may use anonymized, aggregated crash reporting tools provided by Apple (Xcode Organizer / TestFlight) or Google (Android Vitals) to identify and fix technical errors. These tools may collect:

  • Device model and operating system version
  • App version
  • Anonymized crash logs (no health data)

These reports do not contain any personal health data and are used solely for improving application stability.


6. Data Security

Since your health data is stored locally on your device, its security depends primarily on the security measures you take to protect your device. We strongly recommend:

  • Using a strong PIN, password, or biometric lock on your device
  • Keeping your operating system and the My Hashi app up to date
  • Enabling device encryption (most modern iOS and Android devices do this by default)
  • Using device backup features (e.g., iCloud or Google Backup) to avoid data loss

Please be aware that if another person has access to your unlocked device, they may be able to view data stored in My Hashi.


7. Children’s Privacy

My Hashi is not directed at children under the age of 13. We do not knowingly collect personal data from children. If you believe a child has used this application and entered personal data, please contact us so we can help address the situation. Since all data is stored locally, deleting or uninstalling the app from the child’s device will remove all associated data.


8. Your Rights Under GDPR and Polish Law

As a resident of the European Union (or Poland specifically), you have certain rights regarding personal data. However, because My Hashi does not collect or process your personal health data on our systems, most GDPR rights (access, rectification, erasure, portability) apply only to data you control directly on your own device.

For any data incidentally associated with your use of the app (e.g., support communications or records required for legal compliance), you have the right to:

  • Access – Request information about what data we hold about you
  • Rectification – Request correction of inaccurate data
  • Erasure – Request deletion of your data (“right to be forgotten”)
  • Objection – Object to certain processing
  • Lodge a complaint – File a complaint with the Polish data protection authority: Urząd Ochrony Danych Osobowych (UODO), ul. Stawki 2, 00-193 Warsaw, uodo.gov.pl

To exercise any of these rights, please contact us using the details in Section 11.


9. Data Retention

Because we do not collect your health data, there is nothing for us to retain on our end. Data stored on your device remains there until you:

  • Manually delete entries within the app
  • Uninstall the application (which permanently deletes all local app data)
  • Perform a factory reset of your device

We are not able to recover deleted data, as it is never transmitted to us.


10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or the application’s features. When we make significant changes, we will notify you through:

  • An in-app notification or update notice
  • Updating the “Last updated” date at the top of this document

We encourage you to review this Privacy Policy periodically. Your continued use of the application after changes are posted constitutes your acceptance of the revised policy.


11. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or the handling of your data, please contact us:

Patryk Szurgot iPapi
Władysława Jagiełły 2/7
02-495 Warsaw, Poland
NIP: PL5342359787
Website: relicode.com


This Privacy Policy was last updated on February 21, 2026.