Export and the secure share.

Choosing what leaves#

Share my data lives in Profile. You pick a scope (overall, or one topic: the cycle and medications only ever by explicit choice), a detail level, a time range and an identity: initials and age by default, full name only if you opt in. You preview exactly what will be shared before anything moves.

Three ways out, all prepared on your device#

• CSV: readable files per domain, zipped when there are several.
• PDF: an on-brand report rendered on your device, with the real weight trend drawn as a line and plain-language readings.
• Secure share: a sealed summary for one person you name, such as a doctor or a coach, sent from your own device.

How the secure share protects you#

• The summary is encrypted on your device with AES-256-GCM before it leaves.
• Your device puts the link together, key included, and you send it yourself: through the share sheet, in your mail app with the link already filled in, or by copying the link. Kata's server never sees the key and sends no invite.
• The key travels only inside the link fragment, which browsers never send to servers. Kata's server stores only the sealed copy it cannot read, the recipient's email address as a salted hash, and the expiry.
• The share expires on its own, and you can revoke it at any time: the link stops working and the sealed copy is deleted.