ThatgirlHQ
Inside the appAbout usBlogCommunity Founders
Get the app

Privacy Policy

1. Who We Are

That Girl HQ is a health, habits and productivity app operated by Soft HQ Ltd. If you have any questions about this Privacy Policy, you can contact us at hello@thatgirlhq.com.

2. What Data We Collect

Account data

When you create an account, we collect your email address and the display name you provide during onboarding. If you sign in with Apple or Google, we receive a unique identifier and, where permitted, your name and email from those providers.

Health and wellness data

You can voluntarily log the following personal health data within the app:

  • Food intake and nutrition
  • Workouts and exercise
  • Sleep duration and quality
  • Menstrual cycle tracking
  • Water intake
  • Mood and energy levels
  • Weight and body measurements
  • Daily habits and goals
  • Journal entries

All health data is entered by you and stored securely in your private account. We do not use your health data for advertising or sell it to any third party.

Apple Health / Google Health Connect

With your explicit permission, the app can read activity and workout data from Apple Health (iOS) or Google Health Connect (Android). This data is only used to display insights within the app and is never shared with third parties.

Community content

Posts, comments, and reactions you make in Circles are visible to other members of that Circle. Your display name and profile picture are associated with this content.

Push notification tokens

If you grant permission for push notifications, we store a device token to deliver relevant in-app notifications. You can withdraw this permission at any time in your device settings.

Device and usage data

We collect basic technical data (device type, OS version, app version, crash reports) to operate and improve the app. This data is not linked to your identity and is not sold.

3. How We Use Your Data

  • Providing, personalising, and syncing your app experience across devices
  • Calculating wellness insights and progress summaries
  • Sending push notifications you have opted into
  • Processing subscription payments via the App Store or Google Play
  • Responding to support requests
  • Detecting and preventing fraud or abuse

We do not use your health data for advertising. We do not sell your data to anyone, ever.

4. Legal Basis for Processing (GDPR)

If you are located in the European Economic Area (EEA) or UK, we process your data on the following legal bases:

  • Contract: to provide you with the app and subscription services you have signed up for.
  • Consent: for health data, push notifications, and Apple Health / Google Health Connect access. You may withdraw consent at any time.
  • Legitimate interests: for fraud prevention, security, and improving app performance, provided these do not override your rights.

5. How We Store Your Data

Your data is stored locally on your device and synced to our secure cloud database provided by Supabase, hosted on AWS infrastructure in the EU and US. Data in transit is encrypted using TLS. Data at rest is encrypted by Supabase's infrastructure.

Data retention

We retain your data for as long as your account is active. If you delete your account, your data is permanently deleted from our systems within 30 days, except where we are required by law to retain certain records.

6. Subscriptions and Payments

Subscription billing is handled entirely by Apple (App Store) or Google (Google Play) and by RevenueCat, our subscription management provider. We do not receive or store your payment card details. Refund requests must be directed to the relevant app store.

7. Third-Party Services

We use the following trusted third-party services to operate the app:

  • Supabase for database and authentication (EU/US cloud hosting)
  • RevenueCat for subscription and entitlement management
  • Apple (APNs) and Google (Firebase FCM) for push notification delivery
  • Open Library (Internet Archive) for book search and metadata, where no personal data is sent

Each service provider is bound by data processing agreements and may only use your data to provide services to us.

8. International Data Transfers

Your data may be transferred to and processed in countries outside your own, including the United States. Where required, we rely on Standard Contractual Clauses (SCCs) approved by the European Commission to ensure adequate protection of your data.

9. Your Rights

Depending on where you live, you may have the following rights regarding your personal data:

  • Access: request a copy of the personal data we hold about you.
  • Correction: ask us to correct inaccurate or incomplete data.
  • Deletion: request that we delete your account and all associated data.
  • Portability: request your data in a portable format.
  • Restriction or objection: ask us to restrict or stop processing your data in certain circumstances.
  • Withdraw consent: where processing is based on consent, you may withdraw it at any time without affecting prior processing.

To exercise any of these rights, contact us at hello@thatgirlhq.com.

10. How to Delete Your Account

You can permanently delete your That Girl HQ account and all associated data directly within the app:

  1. Open the app and go to Profile (bottom navigation)
  2. Tap Settings
  3. Scroll to the bottom and tap Delete Account
  4. Confirm the deletion when prompted

Deleting your account will permanently erase all your data including health logs, habits, journal entries, goals, community posts, and subscription history. This action cannot be undone.

Your data will be removed from our active systems immediately and fully purged within 30 days. If you are unable to access the app, you can also request deletion by emailing hello@thatgirlhq.com.

11. Children's Privacy

That Girl HQ is intended for users aged 13 and over. We do not knowingly collect personal data from children under 13. If you believe a child under 13 has provided us with personal information, please contact us immediately at hello@thatgirlhq.com and we will delete it promptly.

12. Security

We take the security of your data seriously. We use industry-standard measures including TLS encryption in transit, encrypted databases, Row Level Security (RLS) enforced at the database level, and access controls to protect your personal information. However, no system is completely secure and we cannot guarantee absolute security.

13. Changes to This Policy

We may update this Privacy Policy from time to time. When we make significant changes, we will notify you within the app. The date at the bottom of this page reflects when the policy was last updated. Continued use of the app after changes constitutes your acceptance of the updated policy.

14. Contact Us

This policy sits alongside our Terms of Use and Community Guidelines.

Soft HQ Ltd
Email: hello@thatgirlhq.com

Last updated: 23 July 2026

Back to That Girl HQ

ThatgirlHQ

Women do better when they have each other.

ExploreInside the appAbout usBlogCommunity Founders
Say hiInstagramhello@thatgirlhq.com
LegalPrivacy PolicyTerms of UseCommunity Guidelines
© 2026 That Girl HQ
PrivacyTermsCommunity Guidelines