Cookie Policy
Body OS uses a few cookies to keep you signed in, and a little browser storage to remember your settings. There are no advertising, analytics or tracking cookies.
Last updated: October 4, 2026
Cookies we set
These are essential: the app can’t sign you in or show your day without them. They are sent only to Body OS, over secure connections. The sign-in cookies can’t be read by scripts in the page; the time zone cookie is set by the page itself.
| Name | What it does | How long it lasts |
|---|---|---|
| maha_at | Proves you are signed in on each request. | Until your sign-in expires (short) |
| maha_rt | Keeps you signed in without asking for your password again. | Until you sign out or it expires |
| maha_ob | Remembers whether you finished setup, so the right page opens. It holds no health data. | Same as your sign-in |
| maha_tz_offset | Your time zone offset, so “today” on your Overview matches your clock. It holds no health data. | 1 year |
Browser storage
These stay in your browser and are never sent to us.
| Name | Type | What it does |
|---|---|---|
| maha-theme | Local storage | Your light or dark theme choice. |
| maha_assistant_draft | Session storage | A question you started typing for Ask, so it isn’t lost. It is cleared when you close the tab. |
What we don’t use
No advertising cookies, no analytics or tracking cookies, and no social media pixels. That is why there is no cookie banner: there is nothing optional to agree to.
Links to other sites
Links to USDA, CMS or a care provider’s website take you to their site, which has its own cookies and policies.
Your choices
You can clear cookies and storage in your browser settings at any time. Clearing them signs you out and resets your theme. Questions? See our Privacy Policy or email contact@mahaos.org.