Period Tracker Privacy Policy
Privacy Policy
How this app handles your information — including your health data.
In short: your cycle and symptom entries are stored on your own device. If you sign in with Google, they are also saved to your private account area in our cloud database so you can restore them. We do not sell your data, and we never share your health information with advertisers. You can delete your account and its data from inside the app at any time.
Contents
- Who this policy covers
- Information we collect
- Your health data
- How we use your information
- Where your data is stored
- Who we share information with
- Advertising
- Subscriptions and purchases
- Device permissions
- Security
- How long we keep data
- Your rights and choices
- Children
- International transfers
- Changes to this policy
- Contact us
1. Who this policy covers
This policy describes how Kelly Apps (“we”, “us”) handles personal information in the Period & Ovulation Tracker mobile application (the “App”). It applies to the App only, not to any website or service that the App links to.
The App is a self-tracking tool. It is not a medical device and does not provide medical advice. Predictions of periods, fertile windows and ovulation are estimates calculated from the dates you enter. They must not be relied on as contraception, as a means of achieving pregnancy, or as a substitute for professional medical care.
2. Information we collect
2.1 Information you give us
| Category | What it includes | When |
|---|---|---|
| Cycle & health entries | Period start and end dates, cycle length, period duration, flow intensity, symptoms, moods, medicines taken, weight, body temperature and free-text notes | When you log them |
| Onboarding answers | Age, name, height, weight, average cycle length, typical period length, cycle regularity, date of last period, discomfort level and sleep habits | During setup (you may skip) |
| Account details | Email address, display name and profile photo received from Google Sign-In, plus a unique account identifier | Only if you sign in |
| Profile details | Phone number, date of birth, gender and a profile picture you choose from your device | Only if you enter them |
| App lock credentials | A PIN and the answers to your security questions | Only if you enable the app lock |
You can use the core tracking features without creating an account. In that case your entries stay on your device under a locally generated anonymous identifier and are not uploaded.
2.2 Information collected automatically
- Crash and stability data — when the App crashes, Firebase Crashlytics records the error, a stack trace, device model, operating-system version and App version so we can fix the fault.
- Device and app information — device model, operating-system version, language, time zone and App version, used to display content correctly and to apply the right settings.
- Push notification token — an identifier issued by Firebase Cloud Messaging so we can deliver notifications to your device.
- Advertising identifier — see section 7.
2.3 Information we do not collect
- We do not collect your precise or approximate location. The App requests no location permission.
- We do not access your contacts, call logs, SMS messages or microphone.
- We do not read your photo library. If you set a profile picture, the system picker returns only the single image you select.
- We never receive your payment card details — see section 8.
- We do not receive your fingerprint or face data — see section 9.
3. Your health data
Menstrual, fertility and symptom information is sensitive personal data (“special category data” under the UK and EU GDPR). We treat it accordingly.
- Your health entries are written to a private database on your device.
- If you sign in, they are additionally synchronised to a private area of our cloud database that only your account can read or write, so you can recover them on a new device.
- Your health data is never shared with advertising networks and is never used to target advertising.
- We do not sell your health data, and we do not share it with data brokers, insurers or employers.
- Where we rely on consent to process this data, you may withdraw it at any time by deleting your account (section 12).
4. How we use your information
| Purpose | Data used | Legal basis (UK/EU GDPR) |
|---|---|---|
| Calculate and display your cycle, fertile window and ovulation estimates | Cycle entries, onboarding answers | Consent |
| Save your entries and restore them across devices | Cycle entries, account identifier | Contract / consent |
| Create and secure your account | Account details | Contract |
| Send reminders and notifications you have enabled | Notification token, reminder settings | Consent |
| Diagnose crashes and improve reliability | Crash and device data | Legitimate interests |
| Display advertising and control which ad slots appear | Advertising identifier, device data | Consent (where required) |
| Provide and restore subscriptions | Purchase status from Google Play | Contract |
| Protect against fraud, abuse and security incidents | Account and device data | Legitimate interests |
We do not use your information for automated decision-making that produces legal or similarly significant effects.
5. Where your data is stored
On your device. Your cycle history, symptoms, questionnaire answers, reminders and app-lock settings are held in a private database inside the App's own storage area, which other apps cannot read.
In the cloud. If you sign in, your profile, cycle data, symptom logs, questionnaire answers and subscription status are stored using Google Firebase (Firebase Authentication and Cloud Firestore) under your account identifier. Access rules restrict each record to the account that owns it.
If you never sign in, nothing in the tracking database leaves your device except crash reports and advertising requests described elsewhere in this policy.
6. Who we share information with
We do not sell your personal information. We share it only with the service providers below, and only to the extent each needs it:
| Provider | Service | Information |
|---|---|---|
| Google Firebase | Sign-in, cloud database, push notifications, remote settings | Account details, cycle and symptom data, notification token |
| Google Firebase Crashlytics | Crash reporting | Crash logs, device and app version |
| Google AdMob | Advertising | Advertising identifier, device and ad-interaction data |
| Google Play Billing | Subscription processing | Purchase and subscription status |
We may also disclose information where we are legally required to do so, or to establish, exercise or defend legal claims. If the App is ever transferred to another owner, we will tell you before your information becomes subject to a different policy.
7. Advertising
The free version of the App shows advertising supplied by Google AdMob. To serve, cap and measure ads, Google may process your device's advertising identifier, coarse device and network information and your interactions with the ads. This is handled by Google under its own Privacy Policy.
- No health data is used for advertising. Your cycle, symptom and profile entries are never passed to ad networks.
- If you are in the European Economic Area, the United Kingdom or Switzerland, the App shows a consent form before requesting personalised ads, and your choice is respected. You can reopen it from the App's settings.
- You can limit ad tracking at any time in Android Settings → Privacy → Ads, where you may also delete or reset your advertising ID.
- Subscribing to the premium plan removes advertising.
8. Subscriptions and purchases
Optional subscriptions are sold and processed by Google Play Billing. Payment is handled entirely by Google — we never see or store your card number, billing address or any other payment credential. We receive only whether your subscription is active, which we record against your account so that premium features work on your devices. Manage or cancel a subscription in the Google Play Store app under Payments and subscriptions.
9. Device permissions
| Permission | Why the App asks |
|---|---|
| Internet / network state | Sync your data, load articles and request ads |
| Notifications | Send the period, ovulation and medicine reminders you enable |
| Alarms & reminders | Deliver reminders at the exact time you chose |
| Run at startup | Restore your scheduled reminders after the device restarts |
| Vibration | Provide haptic feedback with notifications |
| Biometrics / fingerprint | Unlock the App with the biometric method already set up on your device |
| Photos (via the system picker) | Let you choose a profile picture |
Biometrics never leave your device. Unlocking is performed by Android, which tells the App only whether verification succeeded. We never receive your fingerprint or face data.
You can withdraw any permission in Android Settings → Apps → Period & Ovulation Tracker → Permissions. Some features will stop working without them.
10. Security
- Data in transit is protected with HTTPS/TLS.
- Cloud records are protected by access rules that limit each document to the account that owns it.
- Your app-lock PIN and security answers are stored as a salted cryptographic hash, not as readable text.
- On-device data is held in the App's private storage area, isolated from other apps by Android.
No method of transmission or storage is completely secure, so we cannot guarantee absolute security. Please keep your Google account protected, since it controls access to your synced data.
11. How long we keep data
- On-device data is kept until you delete it in the App, clear the App's storage, or uninstall the App.
- Cloud data is kept while your account exists. When you delete your account, your profile and associated records are removed from our live database.
- Crash reports are retained by Firebase Crashlytics under Google's standard retention period (currently 90 days).
- Records we must keep for legal, tax or fraud-prevention reasons are retained for as long as the law requires.
- Residual copies may persist in encrypted backups for a limited period before being overwritten.
12. Your rights and choices
Deleting your data
You can delete your account and its associated data from inside the App: open Account → Delete account and confirm. To remove data held only on your device, uninstall the App or clear its storage in Android settings.
Your legal rights
Depending on where you live, you may have the right to access, correct, delete, restrict or object to our use of your personal information, to withdraw consent, and to receive a copy of your data in a portable format. To exercise any of these, contact us at arbazitech737@gmail.com. We will respond within the time limit set by applicable law.
If you are in the UK or EEA, you may also complain to your local data protection authority. If you are in California, we confirm that we do not sell or share personal information as those terms are defined by the CCPA/CPRA, and we will not discriminate against you for exercising your rights.
Notifications and ads
Turn reminders off in the App's settings or in Android notification settings. Reopen the ad consent form from the App's settings, or reset your advertising identifier in Android settings.
13. Children
The App is not directed to children under 13 (or the minimum age of digital consent in your country, which may be higher). We do not knowingly collect personal information from children below that age. If you believe a child has provided us with personal information, contact us and we will delete it.
14. International transfers
Our service providers operate globally, so your information may be processed in countries other than your own, including the United States. Where personal data is transferred out of the UK or EEA, it is protected by appropriate safeguards such as the European Commission's Standard Contractual Clauses or an adequacy decision.
15. Changes to this policy
We may update this policy as the App changes. The “Last updated” date at the top will always show the current version. If a change materially affects how we use your information, we will give you notice in the App before it takes effect. Continuing to use the App after an update means you accept the revised policy.
16. Contact us
For any question about this policy, or to exercise your rights:
- Email: arbazitech737@gmail.com
- Provider: Kelly Apps
Comments
Post a Comment