Privacy Policy

1. Information We Collect

We collect only the information necessary to provide you with accurate fertility awareness insights. The categories of data we handle include:

Account Information

• Email address (used for account creation and login)
• Display name (optional)
• Authentication tokens generated during sign-in

Health and Cycle Data

• Basal body temperature (BBT) readings
• Menstrual cycle dates and flow descriptions
• Cervical mucus observations
• Cervical position observations
• Ovulation test results
• Fertility window calculations and predictions
• Personal notes related to your cycle

Technical and Usage Data

• Device type, operating system version, and app version
• Anonymous usage analytics (e.g., which features are accessed)
• Crash reports and performance logs

AI Educator Data

• The questions you type to the in-app AI fertility-awareness educator, and the educational answers it generates, are stored so we can operate the feature, enforce fair-use limits, and improve the quality and safety of its responses. These records are retained for a limited period and then automatically deleted (see Data Retention). If you delete your account, these questions and answers may be kept with the link to your account removed, solely for safety and quality review, and any message flagged by our safety filters has its original text redacted — see Data Deletion and Data Retention.

Support Messages

• When you contact us through the in-app support tools ("Report a problem" or "Ask a human educator"), we store your messages and our replies so we can help you and improve the app and our service. A bug report may also attach basic diagnostics (app version, platform, language, and your device's browser identifier) — never your cycle or health data. If you delete your account, your support conversations may be retained indefinitely, with the link to your account removed, for internal support and service analysis, and the diagnostic context (including any device identifier) is deleted — see Data Deletion and Data Retention.

2. How We Use Your Information

Your information is used exclusively for the following purposes:

• Providing the Service: Calculating and displaying your fertility window, cycle predictions, and sympto-thermal analysis based on the data you enter.
• Account Management: Authenticating your identity, syncing your data across devices (if you opt in to cloud sync), and managing your subscription.
• Improving the App: Analyzing aggregated, anonymized usage patterns to fix bugs and improve features. Individual health records are never used for this purpose.
• Communication: Sending essential account-related emails such as password resets or critical service updates. We do not send marketing emails unless you explicitly opt in.

Your Privacy Choices in the App

Within the App (Settings > Privacy), you can turn specific optional data uses — product analytics, marketing communications, and research participation — on or off at any time. Your choices are recorded and take effect going forward; turning an option off does not affect any processing that already took place while it was enabled.

3. Data Storage and Security

Your data security is a priority. Here is how we handle storage:

• Local-First Storage: By default, your health and cycle data is stored locally on your device. It does not leave your device unless you choose to enable cloud sync.
• Optional Cloud Sync: Cloud sync is off by default. If you are signed in and turn it on, your data is stored in our cloud database powered by Supabase, hosted on infrastructure that uses encryption at rest (AES-256) and encryption in transit (TLS 1.2+). Cloud sync is available to any signed-in account and is not limited to paid plans. If you later sign in on another device, data you previously synced may be downloaded to that device.
• Row-Level Security: Cloud-stored data is protected by row-level security policies, meaning only your authenticated account can access your records.
• No Plain-Text Sensitive Storage: Authentication credentials are managed through secure token-based flows and are never stored in plain text.

While we implement industry-standard safeguards, no method of electronic storage is completely secure. We encourage you to keep your device secured with a passcode or biometric lock.

4. Third-Party Sharing

The only third-party services that process limited data in the course of operating the App are:

• Supabase (database and authentication provider) — processes your account credentials and, if cloud sync is enabled, your encrypted health data.
• Apple App Store (In-App Purchase) — processes subscription payments on iPhone/iPad. Apple handles all payment details; we receive only your subscription status.
• Google Play — processes subscription payments on Android; we receive only your subscription status.
• PayPal and, where available, Stripe — process subscription payments made on our website; they handle payment details directly and we never store your card information.
• Adapty — a subscription-management service that relays your purchase/subscription status from the app stores to our servers so we can activate paid features. It does not receive your card details.
• Web push notifications (optional) — if you enable reminders in a web browser, notifications are delivered through your browser or operating-system vendor's standard push service (for example Google, Mozilla, or Apple, depending on your browser). On the iPhone/iPad or Android app, reminders are scheduled and shown on your device as local notifications and are not sent through a third-party server. In every case, only the reminder text is included — never your health, cycle, or personal data.
• Vercel (hosting) — serves our web-based content. Vercel may collect standard server access logs (IP address, request timestamps), subject to their own privacy policy.
• Anthropic (AI educator) — when you ask the in-app AI fertility-awareness educator a question, the text of that question is sent to Anthropic's Claude model to generate an educational answer. Only the educational text you type is sent — we do not send your health records, cycle data, temperatures, or identity. Anthropic processes the request to return the answer and, under its commercial API terms, does not use it to train its models.
• Voyage AI (AI educator) — the text of your typed coach question is also sent to Voyage AI to convert it into a numerical representation ("embedding") so the educator can find the most relevant passages in our curated knowledge base. The same limit applies: only the typed question is sent, never your health or cycle data.
• Cloudflare Turnstile — protects our website's "Ask our educator" chat from spam and automated abuse. As part of this check, your IP address is processed and retained only as a one-way hashed value; your raw IP address from the chat is never stored.

We require all service providers — including the AI providers named above (Anthropic and Voyage AI) — to protect your data under safeguards at least equal to those described in this Privacy Policy, and to use it only to provide their service to us. We do not permit any third-party provider to use your data for their own independent purposes.

Legal Disclosure

We may disclose your information if required to do so by law, regulation, or valid legal process (such as a court order or subpoena), or to protect the rights, safety, or property of our users or the public.

5. Subscriptions and Billing

Wise Woman offers free and paid (Pro) tiers. How your subscription is processed depends on where you buy it:

• iPhone/iPad — via Apple In-App Purchase; manage/cancel in Settings > [your name] > Subscriptions.
• Android — via Google Play; manage/cancel in Google Play Store > Subscriptions.
• Web — via PayPal (and, where available, Stripe).

In every case we do not store your card numbers, billing addresses, or financial details — the store/processor gives us only your subscription status (relayed by Adapty for app-store purchases) to activate paid features.

6. Data Deletion and Account Removal

You have full control over your data at all times:

• Delete Individual Records: You can delete any individual cycle entry, temperature reading, or note directly within the App at any time.
• Delete All Local Data: Clearing the App's storage or uninstalling the App removes all locally stored health data from your device.
• Delete Your Account and Cloud Data: You can request complete account deletion through the App's settings screen (Account > Delete My Account). This permanently removes your account credentials and your associated cloud-stored data — including your cycle and health data — from our servers within 30 days. Two limited exceptions (both keep no link to your account): (a) the questions you asked the AI educator and the answers it gave may be retained for the safety- and quality-review purpose described in Data Retention below (and are still deleted automatically after approximately 90 days) — and for any message flagged by our safety filters, the original text you sent is redacted, keeping only the non-identifying reason it was flagged; (b) your support conversations may be retained indefinitely for internal support and service analysis, with the diagnostic context (including any device identifier) deleted. Neither retains an identifier linking the records back to your account.
• Email Request: You may also request account and data deletion by emailing us at privacy@fertilityawareness.app. We will process your request within 30 days and confirm deletion by email.

7. Data Retention

We retain your data only for as long as necessary to provide the service:

• Active Accounts: Your data is retained for as long as your account remains active.
• After Account Deletion: Your personal and health data — your account, cycle entries, temperatures, notes, and settings — is permanently deleted from our servers within 30 days of an account deletion request. Three categories are handled differently: (1) the AI educator questions you asked and the answers you received may be retained with the link to your account removed, so we can review and improve the educator's safety and quality — these are still deleted automatically after approximately 90 days (see AI Educator Logs below). Because a question's text may itself contain details you typed, we do not treat these retained questions as fully anonymous; they are stored without your account identifier and used only for safety and quality review. (2) Your support conversations (your messages to us and our replies) may be retained indefinitely, with the link to your account removed, for internal support and service analysis; the attached diagnostic context, including any device identifier, is deleted. Unlike the AI educator questions above, these have no fixed deletion date. As with retained questions, the message text may contain details you typed, so we store it without your account identifier rather than treating it as fully anonymous. (3) Anonymized, aggregated analytics data (which cannot identify you) may be retained indefinitely for service improvement.
• Inactive Accounts: If your account is inactive for more than 24 months, we may send a reminder email. If no action is taken, the account and associated data may be deleted after an additional 30-day notice period.
• AI Educator Logs: Questions you ask the AI educator, the answers it returns, and any messages flagged by our safety filters are retained for approximately 90 days and then automatically deleted. If you delete your account before then, the link to your account is removed from these records, and the original text of any safety-flagged message is redacted (only the non-identifying reason it was flagged is kept); the questions and answers are still deleted automatically within approximately 90 days.

8. Your Rights Under GDPR and Applicable Law

If you are located in the European Economic Area (EEA), the United Kingdom, or any jurisdiction with similar data protection laws, you have the following rights regarding your personal data:

• Right of Access: You may request a copy of the personal data we hold about you.
• Right to Rectification: You may request that we correct any inaccurate or incomplete data.
• Right to Erasure: You may request that we delete your personal data (see Section 6 above).
• Right to Restrict Processing: You may request that we limit how we use your data under certain circumstances.
• Right to Data Portability: You may request a machine-readable export of your personal data.
• Right to Object: You may object to certain types of data processing, including processing based on legitimate interests.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of prior processing.

Legal Basis for Processing

We process your data on the following legal bases:

• Consent: You provide explicit consent when you create an account and enter health data into the App.
• Contract: Processing is necessary to deliver the fertility tracking service you have requested.
• Legitimate Interest: We process limited technical data to maintain App security and performance.

To exercise any of these rights, please contact us at privacy@fertilityawareness.app. We will respond to your request within 30 days. If you are unsatisfied with our response, you have the right to lodge a complaint with your local data protection authority.

9. California Privacy Rights

If you are a California resident, you may have additional rights under the California Consumer Privacy Act (CCPA):

• The right to know what personal information we collect and how it is used.
• The right to request deletion of your personal information.
• The right to opt out of the sale of personal information — we do not sell personal information.
• The right to non-discrimination for exercising your privacy rights.

To submit a request, email privacy@fertilityawareness.app.

10. Children's Privacy

Wise Woman is not intended for use by individuals under the age of 16. We do not knowingly collect personal information from anyone under 16. If we become aware that someone under 16 has provided us with personal data, we will take prompt steps to delete that information from our servers.

If you are a parent or guardian and believe a minor under 16 in your care has provided personal information to us, please contact us immediately at privacy@fertilityawareness.app so we can take appropriate action.

For users between the ages of 16 and 18, we recommend parental or guardian involvement and supervision when using the App.

11. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. When we make material changes:

• We will update the "Last Updated" date at the top of this page.
• For significant changes, we will notify you through the App or by email.
• Continued use of the App after changes take effect constitutes your acceptance of the updated policy.

We encourage you to review this page periodically.

12. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or your personal data, please reach out to us:

We aim to respond to all privacy-related inquiries within 30 days.