LeWahla: Privacy Policy

Last updated: September 18, 2026

LeWahla was previously published as Sanadi. The app and its operator are unchanged; only the name is new.

LeWahla is a mental-wellness app that lets you write private journals, record moods and feelings, track habits, talk with an AI companion, and read wellness content. This policy explains what information the app collects, why, how long it is kept, and the choices and rights you have.

The data controller is LeWahla LLC (“we”, “us”), reachable at support@lewahla.com. Because this is a mental-wellness app, some of what you record (moods, symptoms, journal entries) is health information, which data-protection law treats as a special category needing your explicit consent. We say so rather than leaving it implied.

Information we collect

• Account information: the name and email address you provide when you create an account, and a profile photo if you add one.
• Content you create: your journal entries, selected moods and emotions, habit and track records and the notes attached to them, daily affirmations, skill practice, and your saved affirmations and chapters.
• Health information: the tracks you keep may include mood, anxiety, depression, alcohol, drug use and self-harm, together with anything you write in a journal entry. This is the most sensitive information in the app and is treated as a special category.
• Subscription status: whether your account has LeWahla Plus, which plan, and when it renews. Never your card details, which only Apple sees.
• Notification settings: your reminder preferences and, if you allow notifications, a device token used to deliver them.
• Advertising information: described in “Advertising” below. It is the only category shared with a third party for its own purposes.

What we do not collect: LeWahla contains no analytics or crash-reporting service. We do not collect your location, your contacts, or your browsing history, and we do not build a profile of you.

Why we are allowed to use it

• Your explicit consent, for health information. Moods, symptoms and journal entries are a special category of personal data. We rely on your explicit consent to process them, and you may withdraw it at any time by deleting your account. Withdrawing does not affect anything done before you withdrew.
• Performance of our agreement with you, for the account itself: signing you in, syncing your own content to your devices, and unlocking a subscription you bought.
• Your consent, for advertising and notifications. Ads that use your advertising identifier run only if you allow tracking when asked; notifications only if you permit them. Both can be turned off later in your device settings.
• Our legitimate interest in keeping the service working and secure: for example, limiting how many AI-companion messages a single account can send in a day.

How your information is stored and used

Your account and content are stored in Google Firebase: Firebase Authentication for sign-in, Cloud Firestore for your content, and Firebase Cloud Messaging for reminders, all operated by Google as our processor. A profile photo, if you add one, is stored by Vercel rather than Google, at a private address that is not listed or searchable. Both are hosted in the United States.

We use this information only to provide the app's features to you: to show your own journals, moods and progress, and to keep them consistent across your devices. Database security rules restrict access so that a signed-in account can read and write only its own data; that restriction is enforced by the database itself, not by the app alone. We do not sell your personal information, and we never use your content for advertising.

The AI companion

When you use “Talk it out”, the messages in that conversation are forwarded through our server to Groq, Inc., which runs the AI model that writes the reply.

• Only the messages in that conversation are sent: not your journals, moods, tracks, saved items, name or email. The request identifies your account to our own server, so that it can count your messages for the day; that identifier is not passed on, so what reaches the model is not linked to you.
• We do not store the conversation. Nothing of it is written to your account; we keep only a count of how many messages you have sent today, so the service cannot be overused. The count resets each day and is removed with your account.
• Groq does not retain it either. We have enabled Zero Data Retention on our account, so your messages are not kept after the reply is produced, and they are contractually prohibited from being used to train any model.

The companion is a supportive tool, not a therapist, counsellor or medical service. If you are in danger or in crisis, contact your local emergency number.

Progress summaries you share

The one-page progress summary is generated on your device and is not uploaded to us. Journal and thought-record text is never included unless you explicitly turn it on each time you create a summary. Once you share the file, with a therapist or anyone else, where it goes and who can read it is outside our control.

Advertising

LeWahla is free to use, and the free plan shows a small number of ads. Ads are supplied by Google AdMob and appear throughout the app, except on the Home screen. They are labelled “Sponsored” wherever they appear.
• What the ad provider receives: an advertising identifier for your device, along with coarse technical and location information that Google uses to select and measure ads. On iOS this only includes the tracking identifier if you allow it when asked; declining means you see less relevant ads, not more of them.
• What it never receives: your journal entries, your moods and feelings, your habit records, your conversations with the AI companion, your progress summaries, your name, or your email address. None of your content is used to target ads, and we do not sell your personal information. Ads are never placed inside a progress summary you share.
• Ad content is restricted to Google's most conservative content rating, and categories we consider inappropriate alongside mental-health content are blocked.
• Subscribing to LeWahla Plus removes ads, and the ad provider is no longer contacted.

Subscriptions and payment

LeWahla Plus is an auto-renewing subscription sold through the Apple App Store. Payment is handled by Apple, and we never see or store your card details. We record only whether your account has an active subscription, which plan it is, and when it renews, so the app knows what to unlock. You can view or cancel the subscription at any time in your device's Settings, under your name → Subscriptions.

Sharing

We do not sell your personal information. We share it only with the providers that make the app work, each bound to use it solely on our instructions:
• Google (Firebase): accounts, content storage and reminders.
• Groq, Inc.: the AI companion's replies, with no retention and no account identifier.
• Google (AdMob): advertising, as described above. This is the only provider that uses anything for its own purposes.
• Vercel: hosts the server that passes messages to the AI provider, and stores your profile photo if you add one.
• Apple: subscription purchases and renewals.

We may also disclose information where the law requires it. Your journal entries, moods and conversations are never shared for advertising, and never sold.

Where your information goes

Our providers are based in the United States, so your information is transferred outside the United Kingdom and the European Economic Area. This includes your health information: your moods, the levels you record, your journal entries and your notes are stored in the United States, not in Europe. When you agree to our storing health information at sign-up, you are agreeing to that.

Two protections cover these transfers, and they are independent of each other. Our providers have entered into the European Commission's Standard Contractual Clauses with us. Google and Vercel are also certified under the EU-US Data Privacy Framework, which the European Commission has recognised as providing an adequate level of protection. On top of both sit the technical protections described in this policy, in particular that the AI provider retains nothing at all and is never told whose message it is answering.

You may ask us for details of these safeguards using the contact address below.

Your choices and rights

• Delete your account and data: permanently, at any time, from Settings → Delete Account. This removes your profile, journals, moods, tracks and saved items, and cannot be undone. It is also how you withdraw your consent to us processing health information.
• Access a copy of your data: at any time, from Settings → Download my data. It gathers everything stored under your account into a single machine-readable file, built on your device and not uploaded to us, which you can save or send wherever you like. You can also write to us and we will provide it.
• Correct it: edit your profile in the app, or ask us to correct anything you cannot reach yourself.
• Object, or ask us to restrict use: tell us and we will stop, unless the law requires us to continue.
• Turn off advertising tracking: in your device settings at any time; or subscribe to LeWahla Plus, which removes ads and stops the ad provider being contacted at all.
• Turn off notifications: in your device settings, or in the app's reminder settings.
• Complain to a regulator: if you are in the UK or the EEA and think we have handled your information wrongly, you may lodge a complaint with your national data-protection authority. We would rather you told us first, at support@lewahla.com, so we can put it right.

Data retention

• Your account and everything in it: kept while your account exists. Deleting your account removes your profile, journals, moods and notes, habit and track history, saved items, reminders, skill progress, and your profile photo.
• Inactive accounts: if you do not sign in for 24 months, we delete your account and everything in it. We email you first, at least 30 days before, so you can sign in to keep it or export your data.
• AI-companion conversations: not retained at all, by us or by the AI provider. The daily message count resets and is removed with your account.
• Notifications: deleting your account unsubscribes the device and cancels every reminder already scheduled on it.
• Backups: residual copies in routine backups are removed in the ordinary course of backup rotation, within 30 days of deletion.
• Advertising information: held by the ad provider under its own policy, not ours; resetting or withdrawing your advertising identifier in your device settings is what controls it.
• Subscription records: Apple keeps purchase records under its own policy; we keep only the current status, removed with your account.

Security

We use commercially reasonable measures, including authenticated access and per-user database security rules, to protect your information. However, no method of transmission or electronic storage is 100% secure, and we cannot guarantee absolute security.

Children's privacy

LeWahla is for adults. You must be at least 18 to create an account, and we do not knowingly collect personal information from anyone under 18. If you believe someone under 18 has given us personal information, contact us and we will delete it.

We set the age at 18 because using LeWahla means agreeing to our storing health information, and 18 is the age of majority in Saudi Arabia, our main market, where a younger person would need a guardian's consent. We ask for your date of birth at sign-up for this reason alone: it is checked on your device and is not stored. What we keep is only the fact that the check was made and the age it applied.

Changes to this policy

We may update this Privacy Policy from time to time. Changes are posted in the app and on our website with an updated date above.

Contact us

If you have any questions about this Privacy Policy or your data, contact LeWahla LLC at support@lewahla.com.