Privacy Policy

1. Introduction

Welcome to Period Tracker (“we,” “our,” or “us”). We are committed to protecting your privacy and ensuring you have a positive experience on our app and website. This Privacy Policy explains our practices regarding the collection, use, and disclosure of your information.

2. Data We Collect

Our core philosophy is “Privacy First”. We collect only the data necessary to provide you with the best tracking experience.

• Health Data (stored locally on your device): Cycle dates, period logs, symptoms, moods, basal body temperature, sexual activity, contraception, medication, cervical observations, weight, and notes you explicitly log.
• Account Data (only if you opt into cloud backup): Email address used to create your account.
• Subscription Data: If you purchase a Premium subscription, your purchase is processed by Google Play Billing and managed through RevenueCat. We receive an anonymous subscriber identifier and entitlement status — we do not receive or store your payment details, credit card number, or billing address.
• Advertising Data: If you use the free tier, the app displays ads served by Google AdMob. AdMob may collect your Advertising ID and use cookies or similar technologies to serve relevant ads. You can reset or opt out of personalized ads through your Android device settings (Settings → Google → Ads).

3. Local Storage & Encryption

By default, all your personal health data is stored locally on your device in an encrypted database (SQLCipher with AES-256 encryption). We do not have access to your health data unless you explicitly opt in to cloud backup.

If you opt into cloud backup, your data is encrypted end-to-end on your device using AES-256-GCM with a key that only you hold before it is transmitted to our cloud storage provider (Supabase). We cannot read, decrypt, or access your backed-up health data.

4. How We Use Your Data

We use the information we collect to:

• Provide and maintain the app’s core tracking functionality.
• Calculate cycle, ovulation, and fertility predictions based on the data you enter.
• Provide customer support when requested.
• Process and manage your Premium subscription (via Google Play Billing and RevenueCat).
• Serve advertisements on the free tier (via Google AdMob).

5. Data Retention

Local health data: Your health data is stored on your device for as long as you keep the app installed. You can delete all your data at any time from Settings → “Delete app data.” Uninstalling the app removes all locally stored data permanently.

Cloud backup data: If you opt into cloud backup, your encrypted backup files are retained on our servers until you explicitly delete them or request account deletion. Once you request deletion, your backup data and account are permanently removed within 30 days.

Account data: If you create an account for cloud backup, your email address is retained until you request account deletion. You can request account deletion at periodetracker.pages.dev/account-deletion or by contacting us at the email address below.

Subscription data: Your anonymous subscription status is managed by RevenueCat and Google Play. We do not independently retain subscription records beyond what these services provide.

Advertising data: Advertising data collected by Google AdMob is subject to Google’s Privacy Policy. We do not independently store advertising data.

6. Third-Party Services

We NEVER sell your health data. We do not share your health data with advertisers, data brokers, or any third parties. The following third-party services are used by the app:

• Supabase — Cloud backup storage and authentication (only if you opt in). Your health data is encrypted before transmission; Supabase stores only encrypted blobs it cannot decrypt.
• Google AdMob — Serves ads on the free tier. May collect your Advertising ID for ad personalization. No health data is shared with AdMob.
• RevenueCat — Manages Premium subscription entitlements. Receives only an anonymous app user ID and subscription status. No health data is shared with RevenueCat.
• Google Play Billing — Processes subscription payments. We do not receive or store your payment details.

7. Law Enforcement Requests

By default, your health data is stored locally on your device and is never transmitted to us — we have no health data to hand over even if requested, because we never had it in the first place. If you opt into cloud backup, your data is end-to-end encrypted before it leaves your device using a key we do not have access to, so we cannot decrypt or read it even in response to a legal request. We will not proactively share, or voluntarily disclose, your health data to law enforcement or government agencies. If we receive a legally valid request (such as a court order or warrant) for account information we do hold (e.g., your email address), we will scrutinize it, disclose the minimum information legally required, and notify you unless we are legally prohibited from doing so.

8. Children’s Privacy

Period Tracker is not directed at children under 13. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided us with personal information, please contact us and we will promptly delete such information.

9. Your Rights

You have the right to access, update, or delete your information at any time directly through the app settings. Since most data is stored locally, deleting the app removes your data unless you have opted into cloud backup. You may also request account and backup deletion at periodetracker.pages.dev/account-deletion.

10. Changes to This Policy

We may update this Privacy Policy from time to time. When we make changes, we will update the “Last Updated” date at the top of this page. We encourage you to review this policy periodically. Your continued use of the app after any changes constitutes your acceptance of the updated policy.

11. Contact Us

If you have any questions about this Privacy Policy, please contact us at dendysuryanad@gmail.com.