Consumer Health Data Privacy Policy

• Basal body temperature readings and the dates they were taken.
• Menstruation (period/bleeding) days.
• Cervical-fluid observations.
• Sexual activity marks.
• Ovulation marks (estimated or confirmed by you).
• Emergency-contraception (Plan B) marks.
• Free-text daily notes, which may contain health information you choose to write.
• Cycle preferences (typical cycle length and luteal-phase length).

We collect no other health data. We do not collect location data, do not use advertising or analytics trackers, and do not infer health conditions from your data — the app shows you your own patterns.

Every item above comes from you, directly: entries you type into the web or iOS app, readings sent by the optional iPhone Shortcut tied to your account, and files you explicitly import. We do not obtain your health data from any other source.

Solely to provide the journal you asked for: storing and displaying your entries, drawing your charts, and calculating cycle-day, phase, ovulation, and fertile-window estimates on your own data. We do not use your health data for advertising, marketing, profiling, research, or model training, and we do not sell it.

We do not sell or share your consumer health data. The only category of third party that processes it is our hosting infrastructure provider (Cloudflare), which stores and processes data on our behalf to run the service. No affiliates, advertisers, data brokers, analytics providers, or other third parties receive your health data.

In the iOS app's on-device mode, your health data is not collected by us at all: it stays in a local database on your phone, leaving only through device backups you control and files you explicitly export.

• Access — view all of your data in the app at any time, or export it as a CSV from Settings.
• Withdraw consent — stop syncing at any time: delete your web data from Settings, or (on iOS) switch to on-device mode and choose to delete the web copy.
• Delete — erase all of your journal data, or your entire account, yourself from Settings. Deletion is immediate and permanent in the live database.
• Ask questions or appeal — contact us. If we decline a request, you may reply to appeal and we will explain the outcome.

We respond to health-data rights requests within 45 days.

Your journal is kept for as long as your account exists, so your history is there when you return. When you delete entries, your data, or your account, the rows are removed from the live database immediately. Residual copies in our infrastructure provider's automatic backups age out within 30 days.

Data in the iOS app's on-device mode is beyond our reach: we hold no copy, cannot access it, and could not produce it to anyone. For account data we do hold, we require valid legal process before disclosing anything, we will notify you of a request for your data unless we are legally prohibited from doing so, and we keep only the data listed above — there is nothing else to produce.

Questions about your health data or this policy? Reach us through the contact page.