Privacy policy: Cycle Tracker (working name)

Status: this app is in development and has not been released yet. This policy describes what the app is designed to do, as written in its specification; it will be reviewed again before release.

In short

The app is a period and cycle tracker whose journal never leaves your phone. It has no account, no advertising, no analytics and no tracking, and it contains no network code. We receive nothing. The app is not a medical device and does not diagnose, treat, cure or prevent any condition; its predictions are estimates, not for contraception or for planning a pregnancy.

What is stored on your phone

In a local database inside the app that is encrypted on the phone:

• Days you log: flow, whether a day is marked as not a period, temperature, notes, and tags you choose, for example symptoms, mood, discharge, and, if you switch these categories on, sex and contraception (hidden by default). You can add your own tags.
• Pauses you mark (for example pregnancy or postpartum), notes on cycles, and a record of file imports.
• Your settings, such as lock options, discreet icon, usual cycle length, reminders, language and theme.
• The database key, a hash of your PIN and the password for automatic backup are kept in the phone's secure storage (Keychain on iPhone, Keystore on Android), not in the database.
• The database is excluded from the operating system's own backups, so it is not copied to iCloud or Google backup by them.

Permissions

Permissions are requested only at first use, and there is no sign-in and no first-launch dialog.

• Notifications: when you turn a reminder on. Notifications are neutral in wording.
• Face ID or fingerprint: when you turn on the app lock. You can use the device passcode, biometrics or an app PIN.
• A folder you pick: when you turn on automatic backup. The file picker is used when you import.
• Screen capture is blocked while the app is locked, and the app switcher view is blurred.
• Android release builds have no internet permission.

Backup and export

Backups are always encrypted with your password and go only where you put them: a file you share, or a folder you choose for automatic backup. You can import your history from other cycle apps (drip, Clue, Flo) from files you provide. You can export CSV (also in the format of the open-source drip app) and a PDF report for a doctor, and you choose where these go.

What the app does not do

No advertising, no analytics, no accounts, no cloud, no network use. Health platform sync is not part of the first version.

Contact

Questions about privacy: plainapps@tuta.com.