Privacy Policy
đź”’ Our Core Privacy Commitment
Your health and reproductive data is deeply personal. OvaCycle is built with an on-device, local-first architecture. Your menstrual calendar logs, symptoms, notes, sexual activity, and medical history are stored directly on your phone, not on external centralized tracking servers. We do not sell your health diary contents to advertisers.
1. Introduction & Overview
This Privacy Policy applies to the Period & Ovulation Tracker – OvaCycle mobile application (“App”, “we”, “our”, or “us”) available on Google Play and Apple App Store, operated by BrainFlack.
We are dedicated to safeguarding your privacy and ensuring transparency in all our data handling practices in compliance with Google Play Developer Policies, Apple App Store Review Guidelines (5.1.1 Data Privacy), GDPR (General Data Protection Regulation), and CCPA (California Consumer Privacy Act).
2. Data We Process & How It Is Handled
| Data Category | Specific Items | Where It Is Stored | Purpose |
|---|---|---|---|
| Health & Cycle Logs | Period dates, cycle length, ovulation data, cervical mucus, BBT, pregnancy logs, symptoms, moods, medications, notes | Local Device Only | Cycle predictions, symptom tracking, insights, personal wellness calendar |
| Security & Auth | App lock PIN, Biometric lock (Face ID / Touch ID) | On-Device Secure Enclave | App privacy lock. Biometric verification is handled strictly by the OS (iOS/Android). We never access raw biometric templates. |
| Optional Calendar Sync | Predicted period / ovulation event titles and dates (when you enable calendar sync) | Your Device Calendar | Creates OvaCycle prediction events only when you turn the feature on |
| Advertising (non-Premium) | Advertising ID / IDFA (only if you allow tracking on iOS), approximate location inferred from IP address (no GPS), device/ad technical signals | Google Mobile Ads (AdMob) & advertising partners | To show more relevant ads to users who are not on Premium. Not used for cycle predictions. Health diary contents are never uploaded for advertising. |
| Analytics & Crash | Anonymous app usage events (screens/features), crash logs, device model, OS version, app version | Firebase Analytics / Firebase Crashlytics | Product improvement, stability, and bug fixing. No period/symptom diary contents. |
| Push Notifications | Device push token | OneSignal + Apple / Google push services | To deliver reminders and optional push messages you enable. Cycle diary is not sent. |
| Subscriptions | Purchase / subscription status, restore tokens | RevenueCat + Apple App Store / Google Play | Premium billing, restore purchases, entitlement checks |
| User Feedback | Optional satisfaction rating, feedback message, email (if provided) | Secure API Endpoint | To answer user queries and address reported technical issues |
3. Device Permissions & Use
The App may request specific platform permissions solely to enable intended features:
- Notifications: To send timely reminders for period start, fertile windows, medication reminders, water intake, and other alerts you enable (local and/or push via OneSignal).
- Biometrics / Face ID / Fingerprint: To unlock the application securely. Templates stay with your device OS.
- Storage / Photos / Media: Only when you manually choose to create a PDF report, backup your local records, or export CSV data.
- Network Access: To fetch educational wellness content, soundscapes, and self-care catalogs; to show ads (non-Premium); and for analytics, crash reports, push, and subscriptions.
- App Tracking Transparency (iOS): Optional. If you allow tracking, an advertising identifier may be used for more relevant ads when you are not on Premium. You can decline. Health diary contents are never used for tracking.
- Location: The App does not request location permission and does not access GPS. Advertising partners may infer an approximate (city/region-level) location from your IP address to show more relevant ads to non-Premium users. Location is not used to calculate your cycle and is not stored with your health logs.
- Device Calendar (optional): Adds predicted period and ovulation dates to your calendar only when you enable calendar sync.
4. Third-Party Services, Ads, Analytics & Content APIs
OvaCycle is local-first: your menstrual calendar, symptoms, notes, sexual activity logs, and related health diary entries are stored on your device. We do not upload your health diary contents to OvaCycle servers for advertising or analytics.
Internet access is used for optional / supporting features. The following third-party services may process technical data only:
4.1 Advertising (non-Premium users)
- Google Mobile Ads (AdMob) displays ads if you are not on Premium.
- On iOS, personalized ads that use the advertising identifier require your permission via App Tracking Transparency. If you decline, ads may still appear in a less personalized form.
- Advertising partners may receive device/advertising identifiers and limited technical signals (and, where applicable, approximate location for ad relevance).
- We do not sell or upload your period dates, symptoms, notes, or other health diary contents to advertisers.
4.2 Analytics, crash reporting & configuration
- Firebase Analytics — anonymous/aggregate product usage (for example, which screens are opened).
- Firebase Crashlytics — crash and stability reports.
- Firebase Remote Config — remote feature flags (for example, ad-related configuration).
- These services do not receive the contents of your on-device health diary.
4.3 Push notifications
- OneSignal (with Apple Push Notification service / Firebase Cloud Messaging) may use a device push token to deliver notifications you enable.
- Your cycle diary contents are not sent to OneSignal.
4.4 Premium subscriptions
- RevenueCat together with Apple App Store / Google Play process purchase and subscription status so Premium can be unlocked and restored.
- Only billing/entitlement information is processed — not your health logs.
4.5 Public wellness / Self-Care content API
- Educational articles, soundscapes, self-care activities, and media are loaded from public read-only APIs (for example on
ovacycle.com). - These requests are anonymous content fetches.
- No personal health logs or cycle dates are transmitted during content sync.
- Images/audio may be cached on your device for offline use.
4.6 Optional Google Drive backup (user-initiated)
- If you choose Google Drive backup, you sign in with Google and the backup file is stored in your Google Drive under Google’s terms. We do not operate a server that receives your backup.
- The App requests only the
drive.appdataanddrive.filepermissions, so it can access only the backup files it creates — not your other Drive files. Your Google account name and email are used only to show which account is connected. - OvaCycle’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Google user data is never used for advertising, sold, or shared with third parties.
- You can disconnect at any time from the App or at myaccount.google.com/permissions, and delete backup files from your Google Drive.
- Backup is optional and off by default. Nothing is uploaded until you connect Google Drive. If you turn on Auto Backup, the App updates your backup file in Drive after you make changes; you can turn Auto Backup off at any time.
Advertising, analytics, crash, push, and subscription partners process data under their own privacy policies. They do not receive your on-device period calendar or symptom diary contents.
5. Sharing of Information
We may share information only as follows:
- With service providers listed above (ads, analytics, crash reporting, notifications, subscriptions, content hosting) to operate the App
- With other apps or services you choose, when you export, share, print, or back up a file
- If required by law, legal process, or to protect rights, safety, and security
- In a business transfer, subject to appropriate confidentiality and notice where required
We do not sell health/cycle diary data to data brokers.
6. Data Retention & Account Deletion
Because your cycle records and health logs reside on your local device:
- Instant In-App Deletion: You can clear all data instantly via Settings > Data Management > Reset App / Clear All Data.
- App Uninstall: Uninstalling the application completely erases all local database records and cached data.
- Account & Data Deletion Info: For detailed steps on removing your data, visit our Account & Data Deletion Page.
Data held by third-party providers (ads, analytics, push, billing) is retained according to their policies. You may reset advertising identifiers and tracking preferences in your device settings.
7. Children’s Privacy (COPPA Compliance)
OvaCycle is not directed to children under the age of 13. We do not knowingly collect or solicit personal information from children under 13. If we become aware that a child under 13 has provided personal data, we will take steps to delete such data promptly.
8. Medical Disclaimer
OvaCycle is a wellness tracking application and does not offer medical advice, clinical diagnosis, or treatment. Cycle predictions and fertile window estimates are approximations based on historical data and algorithms. The App should not be used as a standalone contraceptive method or for medical diagnosis. Always consult a qualified healthcare provider for medical concerns.
9. Contact Information
If you have any questions, feedback, or concerns regarding this Privacy Policy or our privacy practices, please contact us at:
Developer / Publisher: BrainFlack
Email: brainfleck@gmail.com
Support: support@brainflack.com
App Name: Period & Ovulation Tracker – OvaCycle
Privacy Policy: https://ovacycle.com/privacy-policy/
Delete Account: https://ovacycle.com/delete-account/