Privacy and security

Built for data you would not post.

Heart rate, sleep and blood results are sensitive. These are the specific things Erkan does to keep them yours.

Who can see your data

Row-level security everywhere

Every table has a policy that returns only your own rows. We tested a second account against each pattern: it cannot read, change, move or delete yours.

Signed out sees nothing real

Without an account you see clearly labelled demo data, generated on our side. Nobody browsing sees anybody's health data.

Premium decided on the server

Locked data is never sent to a free account and hidden with styling. It is simply not sent.

How data moves

Tokens stay on the server

Google and device tokens are stored server-side and never reach your browser. On iPhone they live in the Keychain, on that device only.

Read-only health access

Erkan reads from Apple Health and Google Health. It does not write back to them.

No identity to AI

Intelligence receives numbers and dates. Your name, email and notes are never included.

Guard rails

Rate limits

Sign-in links, Intelligence, billing, writes and syncs are all limited per account or per anonymised address.

Strict input checks

Every write is validated, down to rejecting dates that do not exist on a calendar.

Hardened headers

HTTPS only, no framing, no content sniffing, a strict referrer policy, and a content security policy in report-only mode while it is tuned.

Your controls

Export everything

Download every row Erkan holds about you as JSON from Settings.

Delete everything

Deleting your account revokes Google access, cancels billing and removes every row linked to you.

Sign out means gone

Signing out on iPhone clears local data, keys and the watch.

This page describes how Erkan is built. The legal terms are in the privacy policy and terms. Found a security issue? Write to vikram@seigotic.com.

See your own normal.

Open the web app to explore every screen on clearly labelled demo data. Sign in with Google to log meals, habits and labs; your own scores arrive when device sync opens.

The iPhone and Apple Watch apps are in testing and not yet on the App Store.