Last updated: 19 July 2026

Data controller: PMDDly · Data protection contact: [email protected]

Your health data is deeply personal. This policy explains exactly what we collect, where it goes, and what we never do with it.

What stays on your device

All of the following is stored only on your phone and never sent to any third party: Cycle dates and period logs · Daily mood and symptom entries · Future Self messages and journal entries · Crisis plan and emergency contacts · Comfort toolkit and reasons to stay · Reality checks and PMDD reflections · Nutrition diary and meal plans · Community preferences, blocked users, and muted users

Your account backup (Supabase)

To create an account we collect your email address. It is used only to sign you in, sync your data across devices, and send account emails such as password resets — never for marketing or advertising.

When you create an account, your cycle data is backed up to a secure cloud database so you can restore it if you change phones. This database belongs to you — we cannot access your health data, and it is never shared with or sold to anyone.

Your login session is stored in encrypted secure storage on your device.

Partner feature

If you choose to connect a partner, they always see your current cycle phase and period dates. Sharing your day-by-day mood and symptom log with them is off by default — it only happens if you turn it on yourself, and you can turn it back off at any time from Settings → Privacy & Security. Disconnecting the link stops all sharing immediately.

Push notifications sent to your partner contain no health details — only a generic message saying you reached out. All health information is shared directly through your secure Supabase account, not through notification servers.

How long we keep your data

We keep your data for as long as your account is active. There is currently no automatic deletion after a period of inactivity. You can export or permanently delete your data at any time — see "Your rights" below.

Where your data is processed

Your account and cycle data are hosted with Supabase in the EU. Subscription status is managed by RevenueCat, and reminder notifications are delivered through Expo's push service — both receive only the minimum information needed to do their job.

Purchases

If you subscribe to Plus, your payment is processed securely by Apple — we never see or store your card details. We use RevenueCat to manage your subscription and confirm your Plus status; Apple and RevenueCat receive only the purchase information needed to provide it.

What we never do