Data protection policy

Our approach

We collect only what the app needs. Each account is kept separate from every other account.

Who can see your data

Inside the app, only you can see your data. The people who run the service can reach the database to keep it working and to give support. Locked notes are scrambled with your lock password, so they cannot read them.

How it is protected

Connections are encrypted. The database lets each account read and change only its own rows. The app never holds an administrator key. Photos are kept in private storage.

Passwords are stored in a scrambled form by our sign-in provider, and must have at least 8 characters with a letter, a number and a symbol.

Sensitive information

Cycle and health information is stored only after you agree. Intimate details inside the cycle tracker are off until you turn them on. We never ask for full card or bank account numbers.

Your rights

You can see and change your details in My Profile, download a copy of everything from Settings, switch the cycle tracker off, stop it and delete what you entered there, and delete your account.

How long we keep data

We keep your data while your account exists. Deleted notes stay in Recently Deleted for 30 days. When you delete your account, your data is removed (see the Account deletion policy).

Who helps us run the app

Supabase provides the database and sign-in, and Render hosts the website. If email or phone verification is on, an email or text-message provider sends your links and codes. Google Fonts supplies the typefaces.

If something goes wrong

If we learn that your data was exposed, we will tell you what happened and what to do.

Last updated

11 November 2026