Privacy policy

Last updated: June 4, 2026

1. Who We Are

Gatachi is operated by Gatachi Technologies LLC-FZ, based in Dubai, United Arab Emirates. We provide personalized fertility planning and preservation information through our website and fertility assessment tools at gatachi.com.

We are committed to protecting your privacy and handling your personal and health data with the highest level of care and confidentiality.

For all privacy enquiries contact us at: info@gatachi.com

2. Who This Policy Applies To

This policy applies to anyone who visits gatachi.com or uses our fertility assessment tools, including users based in the UAE and internationally.

You must be at least 18 years of age to use our services. By submitting our fertility assessment, you confirm that you are 18 or older.

3. What Personal Data We Collect

When you complete our fertility assessment, we collect:

  • Your first name and email address
  • Health-related information including age, menstrual cycle details, AMH test results, medical diagnoses, height and weight
  • Your fertility goals and family planning preferences

When you purchase products or services through gatachi.com, we may additionally collect:

  • Billing name and address
  • Payment information (processed securely by third party payment providers — we do not store card details directly). We only collect data that is necessary to deliver our services to you.

4. How We Use Your Data

We use your data solely to:

  • Generate your personalized fertility assessment report (including snapshot and comprehensive reports)
  • Send your report to your provided email address
  • Process purchases and deliver products or services you have requested
  • Improve our assessment tools and service quality using strictly anonymised, de-identified data only
  • Communicate with you about your report or our services where you have consented

We do not sell, rent, or share your personal data with any third party for marketing or commercial purposes.

5. Anonymization and Service Improvement

We may use strictly anonymized data to improve our fertility assessment tools and report accuracy. Before any assessment data is used for service improvement purposes, it undergoes irreversible removal of all direct and indirect personal identifiers, including name, email address, and any combination of data points that could be used to re-identify an individual.

We do not use identifiable or pseudonymised health data for internal model refinement. Anonymized data is processed only in aggregate and cannot, to the best of our technical ability, be linked back to any individual user.

Given the specificity of fertility health data — including age, menstrual cycle details, AMH results, medical diagnoses, height and weight — we apply conservative anonymization standards that account for potential re-identification risks from combinations of data points.

6. AI-Powered Processing

Gatachi uses AI-powered tools and third party automation services to generate your personalized fertility reports. These tools process your data solely to produce your personalized output and are strictly prohibited from retaining your health data or using it to train machine learning models.

AI-powered report generation is performed by a provider operating under a 30-day data retention policy, after which all inputs and outputs are permanently deleted. The provider is prohibited from using your data to train machine learning models.

As our technology evolves, we will update this policy to reflect any changes to the AI tools we use.

7. Subprocessors and Third-Party Integrations

To deliver our assessment and reporting services, your data is processed by third-party subprocessors across the following functional categories. Each is contractually bound to process your data only as directed by us and is prohibited from retaining or using your health data for any other purpose:

  • Form collection and assessment ingestion — to receive and securely capture your assessment responses
  • Automation and secure data routing — to process and route your data between services
  • AI-powered report generation — configured with zero data retention, meaning your data is processed ephemerally and not logged or stored beyond the duration of the request
  • Email delivery — to send your personalised report to your provided email address
  • PDF generation and temporary hosting — to create a downloadable version of your report, subject to automatic deletion after 30 days
  • Payment processing — to securely process purchases where applicable, subject to PCI-DSS compliance standards
  • Partner fertility clinics — only with your explicit prior written consent, solely for consultation or care referral purposes you have requested

A full registry of named subprocessors including their geographic processing locations is available on request by contacting info@gatachi.com.

8. Clinic and Third Party Data Sharing

We may in future offer you the option to share your fertility report with partner fertility clinics or healthcare providers for the purpose of facilitating a consultation. We will only ever share your report or health data with a clinic or third party with your explicit prior written consent. You may withdraw this consent at any time by contacting us at info@gatachi.com.

9. Cross-Border Data Transfers

As a platform utilising globally integrated cloud services, your data may be processed by server infrastructure located outside the United Arab Emirates. Gatachi manages such transfers in compliance with UAE Federal Decree-Law No. 45 of 2021 on Personal Data Protection (PDPL), specifically Article 26 governing cross-border data transfers.

Where personal or sensitive health data is transferred outside the UAE, such transfers are conducted only where one of the following conditions is satisfied:

  • The recipient country has been determined to provide an adequate level of data protection equivalent to UAE PDPL standards; or
  • Legally binding contractual safeguards are in place with the recipient, obligating them to maintain data protection standards consistent with the UAE PDPL; or
  • The transfer is necessary to deliver the specific service you have requested and you have been informed of the transfer

All international processing environments used by our subprocessors are subject to the encryption and zero-retention standards described in Sections 6 and 13 of this policy.

10. Health Data and Your Consent

Your fertility assessment includes sensitive health information. Under UAE Federal Decree-Law No. 45 of 2021 on Personal Data Protection (PDPL), health data is classified as sensitive data requiring your explicit consent before processing.

By submitting our fertility assessment, you explicitly consent to Gatachi Technologies LLC-FZ processing your health data for the sole purpose of generating your personalised fertility report and delivering related services you have requested.

You may withdraw your consent at any time by contacting info@gatachi.com. Withdrawing consent will not affect the lawfulness of any processing already carried out prior to withdrawal.

11. No Sale of Personal Data

We will never sell, rent or trade your personal data to any third party for any purpose whatsoever. Your data is used solely to deliver the services you have explicitly requested from us.

12. Data Retention and Minimization

We retain personal and sensitive health data only for the minimum duration required to deliver our services, in accordance with the principle of data minimization under the UAE PDPL:

  • Assessment responses (raw data): deleted within 7 days of your personalized fertility report being successfully generated and delivered
  • Generated PDF reports: stored temporarily on encrypted servers and automatically deleted 30 days after generation
  • Report delivery emails: emails containing your personalized report are retained in our systems for up to 30 days, after which report content is deleted. Basic delivery records (confirming that a report was sent) may be retained for up to 12 months solely for operational troubleshooting and deliverability auditing
  • Transaction records: retained for up to 7 years exclusively to fulfill statutory accounting and tax compliance obligations under UAE law

You may request early deletion of your data at any time by contacting info@gatachi.com. We will action all verified deletion requests within 30 days.

13. Data Security and Encryption

We take technical and organizational measures to protect your sensitive health data against unauthorized access, loss or misuse. As our services are delivered through reputable third-party subprocessors, your data benefits from the enterprise-grade security standards maintained by those providers, which include:

  • Data in transit: all communications between your device and our subprocessors are encrypted using TLS 1.2 or higher as standard across our provider stack
  • Data at rest: personal and health data held by our subprocessors is encrypted at rest in accordance with each provider's own security standards
  • Access control: we restrict internal access to user data on a strict need-to-know basis
  • Subprocessor vetting: we engage only with reputable providers who maintain independently verified security and compliance standards

As Gatachi develops its own infrastructure, we will implement and disclose our own direct encryption standards in future updates to this policy.

No data transmission over the internet can be guaranteed to be 100% secure. If you believe your data has been compromised, contact us immediately at info@gatachi.com.

14. Your Rights

Depending on your location, you have the following rights regarding your personal data:

  • The right to access the personal data we hold about you
  • The right to request correction of inaccurate data
  • The right to request deletion of your data
  • The right to withdraw consent at any time
  • The right to restrict or object to processing
  • The right to data portability
  • The right to lodge a complaint with a relevant supervisory authority

To exercise any of these rights, contact us at info@gatachi.com. We will respond within 30 days.

15. UAE Compliance and Regulatory Framework

Gatachi operates under and complies with UAE Federal Decree-Law No. 45 of 2021 on Personal Data Protection (PDPL). Our services are currently designed and operated primarily for users based in the United Arab Emirates.

Health and medical data is classified as sensitive personal data under the PDPL and requires your explicit consent prior to any processing. We obtain this consent at the point of submitting our fertility assessment.

We are committed to complying with applicable guidance issued by the UAE Department of Health, the UAE Data Office, and any other relevant UAE regulatory authority as our services develop.

If you believe your data privacy rights have been violated, you have the right to lodge a complaint with the UAE Data Office or the UAE Department of Health. You may also contact us directly at info@gatachi.com and we will work to resolve your concern promptly.

16. Cookies

Essential cookies: Our website uses essential cookies necessary for basic functionality, including session management and security. These are required for the site to operate and cannot be disabled.

Analytics and advertising cookies: We do not place non essential analytics, tracking, or advertising cookies on your device without your explicit prior consent. If you choose to consent, these cookies may be used to measure the effectiveness of our marketing campaigns and improve our services. You may withdraw your consent at any time by updating your cookie preferences through the banner on our website or by contacting us at info@gatachi.com.

Third-party pixels: Where you have consented to advertising cookies, our website may use tracking technologies provided by third-party advertising platforms solely to measure campaign performance. These technologies are governed by the respective privacy policies of those platforms. We do not use these technologies to process or share your health data.

You can manage or withdraw your cookie preferences at any time through your browser settings or our on-site cookie preference centre.

17. Children and Minors

Our services are not directed at anyone under the age of 18. We do not knowingly collect personal data from anyone under 18. If you believe a minor has submitted data through our platform, contact us at info@gatachi.com and we will delete it promptly.

18. Changes to This Policy

We may update this policy from time to time. We will notify you of material changes by updating the date at the top of this page. Your continued use of our services after changes have been made constitutes your acceptance of the updated policy.

19. Governing Law and Dispute Resolution

This policy shall be governed by and construed in accordance with the federal laws of the United Arab Emirates and the laws of the Emirate of Dubai, as applicable to Gatachi Technologies LLC-FZ, a company registered in the Meydan Free Zone, Dubai.

Any dispute arising out of or in connection with this policy, including any question relating to its existence, validity, or termination, shall first be subject to good-faith negotiation between the parties. If not resolved within 30 days, the dispute shall be referred to and finally resolved by arbitration under the rules of the Dubai International Arbitration Centre (DIAC) in Dubai, conducted in English under applicable DIAC rules with one arbitrator.

Nothing in this clause prevents either party from seeking urgent injunctive or interim relief from a competent Dubai court.

20. Contact Us

For all privacy-related questions, requests or complaints:

Gatachi Technologies LLC-FZ Dubai, United Arab Emirates Email: info@gatachi.com Website: gatachi.com