Privacy Policy

Last updated: October 6, 2026

Your cycle is personal. This policy explains exactly what Period Productivity collects, why, who processes it, and the control you have over it.

1. The Short Version

• We never sell your data, show you ads, or use tracking or analytics SDKs.
• Your health data is used only to run the App for you.
• Nothing goes to AI unless you ask for a summary and have given separate, explicit consent — and what is sent carries no name, email or account ID.
• Our AI provider is contractually prohibited from training its models on your data.
• Privacy Mode keeps everything on your phone: we then hold no cycle or health records for you at all.
• You can delete everything, permanently, from Profile › Delete Account.

2. Who Is Responsible

The developer of Period Productivity is the data controller for the personal data described here. Contact: yeegenework@gmail.com

3. What We Collect

• Account: your name, email address and the sign-in identifier provided by Sign in with Apple or Google. (With Apple, you may choose to hide your email.)
• Profile: birth month and year, average cycle and period length, your last period start date, and the PMS symptoms you select.
• Daily records: your mood, energy, sleep, digestion and productivity ratings, symptoms (including any you type yourself), period days and diary entries.
• Subscription status: if you buy Premium, the App Store's signed transaction (product, purchase and expiry dates), which our server checks to confirm Premium. We never see payment details.
• AI usage counter: your account ID and the date, used only to apply the one-summary-a-day limit. It holds no health or summary content and is deleted after 7 days.
• Stays on your device only: your profile photo, and AI summaries you save.
• Not collected: location, contacts, photos library, advertising identifiers, browsing history, crash or usage analytics, sexual activity, or pregnancy status.

4. Health Data Is Special-Category Data

Period dates, symptoms and mood are health data — "special category" data under the EU and UK GDPR, "sensitive personal information" under California law, and "consumer health data" under laws such as Washington's My Health My Data Act. We process it only with your explicit consent, which we ask for separately and never bundle with other terms:

• To run the App — asked during setup, before anything is saved to your account.
• For AI Summary — asked again, on its own, before subscribing or before your first summary.

You can withdraw either consent at any time (see Section 11).

5. How We Use Your Data, and Our Legal Bases

• To provide the App — show your calendar, predictions and history, and sync across your devices (performance of our contract with you; explicit consent for health data).
• To produce AI Summary when you ask for one (explicit consent).
• To confirm your subscription and apply the daily limit (performance of contract).
• To keep the service secure and prevent abuse (legitimate interests).
• To comply with the law (legal obligation).

We do not use your data for advertising, profiling, or automated decisions that have legal or similarly significant effects on you, and we do not sell or "share" it as those terms are defined under California law.

6. AI Processing

• Only on request. Nothing is sent to an AI service in the background. A request happens only when you open AI Summary and pick a date range.
• Only what is needed. For the dates you choose, we send your cycle phase, ratings and symptoms, plus your average cycle and period length.
• De-identified before it leaves. Your name, email, account ID, birth date, profile photo and diary entries are never included. The request goes through our server, which checks your subscription and then passes on only the de-identified content above. Please note: symptoms you type in your own words are sent as written, so avoid typing names or other identifying details there.
• Provider. Summaries are written by Anthropic, PBC (the Claude models), acting as our data processor under its commercial terms. Anthropic does not use data sent through its commercial API to train its models, and may keep it only for a limited period for safety and abuse monitoring before deleting it.
• Not stored by us. Our server does not keep the content you send or the summary that comes back. Summaries you choose to save are kept on your phone.
• Off switch. Without your AI consent, or with Privacy Mode on, no AI request is ever made.

7. Who Processes Your Data

We use a small number of service providers, each bound to process data only on our instructions:

• Supabase, Inc. — database and server functions that store and sync your account and records.
• Anthropic, PBC — AI Summary, as described in Section 6.
• Apple Inc. — Sign in with Apple, App Store purchases and subscription management.
• Google LLC — Sign in with Google (identity only; we receive your name, email and account identifier).

We do not disclose your personal data to anyone else except as described in Section 9.

8. How We Protect It

• All traffic between the App and our servers is encrypted in transit (TLS), and stored data is encrypted at rest by our hosting provider.
• Row-level security means each account can reach only its own records; every request must carry a server-issued pass tied to your sign-in.
• Our AI key and server secrets live only on the server, never inside the App.
• What we can't promise: synced data is not end-to-end encrypted — like most cloud services, our systems can technically read it in order to sync it. If you want data that we cannot access at all, use Privacy Mode: your records then exist only on your phone.

9. Law Enforcement and Reproductive-Health Privacy

We know that in some places, cycle data can be sought in investigations involving reproductive health care. Our commitments:

• We never sell, rent or voluntarily hand over your data to law enforcement, government agencies, data brokers or anyone else.
• We will disclose data only when we are compelled by a valid, legally binding order — such as a subpoena, court order or search warrant — that we are actually required to obey.
• We review every request carefully, and will challenge or narrow requests that are overbroad, legally deficient, or seek information about lawful reproductive health care.
• If we are compelled to disclose, we will give only the minimum data the order requires.
• We will notify you before disclosing, unless we are legally prohibited from doing so; if a gag order lapses, we will notify you then.
• We keep as little as possible: no location, no pregnancy status, no sexual activity — and with Privacy Mode on, or after you delete your account, we hold no cycle or health records for you at all, so there is nothing we could be compelled to produce.

10. Retention and Deletion

We keep your account and records while your account exists. Delete Account (Profile › Delete Account) permanently removes your profile and every record from our database immediately, and from this phone. Residual copies in our hosting provider's routine backups are overwritten within 30 days. Turning on Privacy Mode deletes the copy on our servers in the same way. We may keep data longer only where the law requires it.

11. Your Rights

Wherever you live, you can:

• Access and export your data, correct it (most of it directly in the App), and delete it (Delete Account, or ask us).
• Withdraw consent at any time: turn on Privacy Mode to stop all syncing and all AI processing, or delete your account to stop all processing.
• Object to or restrict processing, and receive your data in a portable format (EU/UK).
• Know, delete, correct and limit the use of sensitive personal information (California and other U.S. states). We already use it only to provide the service you asked for.
• Not be discriminated against for exercising any of these rights.

To exercise a right, email yeegenework@gmail.com from the address on your account, or include your Account ID (shown at the bottom of Profile). We respond within 30 days (45 days where U.S. state law allows). If you are in the EU or UK, you may also complain to your local data protection authority. Where U.S. state law gives you a right to appeal our decision, reply to our response with "Appeal" and we will review it.

12. U.S. Consumer Health Data

This section is our Consumer Health Data Privacy Policy under Washington's My Health My Data Act and similar laws in Nevada, Connecticut and elsewhere. The consumer health data we collect is listed in Section 3; we collect it directly from you, use it only for the purposes in Section 5, and share it only with the processors in Section 7. We do not sell consumer health data, and we do not use geofencing. Your rights and how to exercise them are in Section 11.

13. International Transfers

Our providers may process data in the United States and other countries. Where data from the EU, UK or Switzerland is transferred, it is protected by the European Commission's Standard Contractual Clauses or another lawful transfer mechanism.

14. Children

The App is for adults aged 18 and over. We do not knowingly collect data from anyone younger. If you believe a minor has given us data, contact us and we will delete it.

15. Changes to This Policy

We will update the date above when this policy changes and notify you in the App of material changes. We will never begin using your health data for a new purpose without asking for your consent first.

16. Contact

Privacy questions and data requests: yeegenework@gmail.com