Privacy Policy — WomensPal

1. Our Core Privacy Commitment

🌸 The WomensPal Promise

We will never sell, rent, trade, or monetise your personal health data to any third party — including advertisers, data brokers, insurance companies, employers, or government agencies — under any circumstances. This is not a marketing statement. It is a core principle of how WomensPal is built.

WomensPal was built because we believe women deserve a health app that truly protects them. We are aware of the significant privacy violations that have occurred in the women's health app industry, and we have designed our entire system to ensure WomensPal users are never put in that position.

Period, pregnancy, and fertility data is among the most sensitive personal data that exists. In many jurisdictions, this data can have real-world consequences for employment, insurance, and personal safety. We take this seriously.

2. What Data We Collect

We collect only the data necessary to provide you with a personalised, useful health tracking experience. Here is exactly what we collect:

Data you provide directly:

Name (optional — you can use a nickname or remain anonymous)
Age or date of birth
Cycle length and last period date
Health goals (period tracking, pregnancy, TTC, postpartum, wellness)
Health conditions you choose to disclose (PCOS, endometriosis, etc.)
Dietary preferences and country of residence
Notification preferences

Data you log during use:

Period start and end dates, flow intensity
Symptoms (cramps, bloating, mood, energy, headaches, etc.)
BBT (Basal Body Temperature) readings
Pregnancy week and kick counter logs
Wellness goal completions (water, sleep, movement)
Community posts (always anonymised)
Symptom data entered into the AI Symptom Checker (processed by third-party AI, not stored by WomensPal)

Technical data collected automatically:

Device type and operating system (for app compatibility only)
App version and crash reports (to fix bugs, never linked to your health data)
General region (country level only, for country-specific recommendations)

3. How We Use Your Data

Your data is used exclusively to provide and improve the WomensPal service for you. Specifically:

To calculate your cycle phase, fertile window, and period predictions
To provide personalised Cycle Sync recommendations (workouts, nutrition, productivity)
To power the Pregnancy Tracker with week-by-week personalised content
To generate your Doctor's Report for healthcare appointments
To show you relevant community posts and country-specific shopping recommendations
To send you notifications you have explicitly opted into
To improve prediction accuracy over time (using only your own data)

🤖 AI Symptom Checker

When you use the Symptom Checker feature, the symptoms you enter are sent to Google Gemini via OpenRouter (openrouter.ai) for analysis. This data is not stored after processing and is not used to train AI models. The Symptom Checker is entirely optional — you may use all other WomensPal features without using it.

4. Third-Party AI Services

WomensPal's Symptom Checker feature uses Google Gemini, an AI service provided by Google, accessed via OpenRouter (openrouter.ai). When you use the Symptom Checker:

The symptoms you select, any notes you write, your current cycle day, and pregnancy mode status are sent to Google Gemini via OpenRouter for processing.
This data is used solely to generate an informational health response and is not stored or retained by WomensPal or OpenRouter after processing.
Your explicit consent is requested within the app before this feature is used for the first time.
You may choose not to use the Symptom Checker if you do not wish your data to be processed by a third-party AI service.

🔗 Google's Data Practices

For more information on how Google handles data, see Google's Privacy Policy.

5. What We NEVER Do With Your Data

These are absolute prohibitions — not exceptions, not "unless required by law" carve-outs. We have built our systems specifically to ensure we cannot do these things, even if asked.

We never sell your health data to advertisers, data brokers, or any third party
We never share your period, pregnancy, or health data with insurance companies
We never share your data with employers or background check services
We never use your data to serve targeted advertising
We never share your individually identifiable data with government agencies without a specific legal obligation and your notification (except in emergencies where your life is at risk)
We never sell your data as part of a company acquisition without your explicit consent
We never monetise your data in any form — your data is not a product
We never retain data from users who have deleted their accounts

6. Third-Party Services We Use

WomensPal uses the following third-party services to operate. Each is listed transparently below with its purpose:

Supabase (supabase.com) — database, authentication, and file storage. Your data is stored on Supabase's infrastructure (PostgreSQL on AWS). Row-level security ensures only you can access your records.
Google (google.com) — optional Google Sign-In only. Used solely to authenticate your account if you choose this login method.
Apple (apple.com) — optional Apple Sign-In only. Used solely to authenticate your account if you choose this login method.
OpenRouter / Google Gemini (openrouter.ai) — AI Symptom Checker only. Symptoms you enter are analysed by Google Gemini via OpenRouter. Data is not stored after processing. This feature is entirely optional.
Resend (resend.com) — transactional email only. Used to send password reset emails and magic links when you request them.

None of these providers receive your raw health logs (cycle data, symptoms, BBT readings) for their own use. They are contractually prohibited from using your data for anything other than providing the service to WomensPal.

Your explicit sharing: Features like "Partner Bond" allow you to share selected data with a person you choose. You control exactly what they see, and you can revoke access at any time.

🌸 Community Posts

When you post in the WomensPal community, your post is associated only with an anonymised avatar — never your name, email, or any personally identifiable information. Not even we can link a community post back to your account without your involvement.

7. Data Storage & Security

☁️ Cloud Storage

Your data is stored securely on Supabase cloud servers (PostgreSQL on AWS infrastructure), encrypted in transit and at rest. Row-level security ensures only you can access your records — not other users, and not WomensPal staff without specific authorisation.

All data encrypted at rest (AES-256)
All data in transit encrypted using TLS 1.3
Row-level security: your data is logically isolated from all other users
Access to your data within our team is strictly limited and logged
We conduct regular security reviews

8. Your Rights

Regardless of where you live, WomensPal honours the following rights for all users:

Right to access: You can export all your data at any time in a machine-readable format
Right to correction: You can correct any data we hold about you
Right to deletion: You can delete your entire account and all associated data instantly, from within the app, with no questions asked
Right to portability: Your data export is in a standard format you can take to any other service
Right to object: You can object to any processing of your data and we will cease that processing
Right to restrict: You can restrict us to storing only the minimum data needed for core functionality

📤 Data Export & Deletion

To request a full export of your data, or to request permanent deletion of your account and all associated data, email contact@womenspal.com. We will process your request within 48 hours and confirm when complete. Account deletion removes all data from active systems and backups within 30 days.

To exercise any of these rights, contact us at contact@womenspal.com. We will respond within 48 hours.

9. Children's Privacy

WomensPal is designed for users aged 13 and above. We do not knowingly collect personal data from children under the age of 13. If you are a parent or guardian and believe your child has provided personal information to WomensPal, please contact us immediately at contact@womenspal.com and we will delete that information promptly.

For users between 13 and 17, we apply additional protections: more restricted data collection, no community posting without parental consent, and no personalised recommendations based on health condition data.

10. Anonymous Mode

🎭 True Anonymity

Anonymous Mode allows you to use all core WomensPal features without providing your name or email. In this mode, your account is identified only by a randomly generated ID stored on your device. We cannot link it to you. If you lose your device, your data cannot be recovered — but it also cannot be identified as yours by anyone, including us.

We built Anonymous Mode because we believe some women — particularly in regions where reproductive health choices carry legal or social risk — need an option to track their health with true anonymity. No account. No email. No name. No trace.

11. Data Retention & Deletion

Your data is retained for as long as your account is active
When you delete your account, all personal data is permanently deleted within 30 days from all our systems, including backups
Anonymised, aggregated statistical data (e.g., "47% of users experience cramps on Day 2") may be retained indefinitely — this data cannot be linked back to any individual
You can request immediate deletion at any time by contacting contact@womenspal.com

12. Cookies & Tracking

Our website (womenspal.com) uses the following cookies:

Essential cookies: Required for login and basic site functionality. Cannot be disabled.
Analytics cookies: We use privacy-respecting, cookie-free analytics (we prefer Plausible or Fathom over Google Analytics). No cross-site tracking, no fingerprinting.

We do not use advertising cookies, social media tracking pixels, or any form of cross-site tracking. Ever.

13. Changes to This Policy

If we ever change this privacy policy in a way that reduces your protections, we will:

Notify you via email at least 30 days in advance
Show a prominent notice in the app
Give you the option to delete your data before the changes take effect
Never apply new data sharing practices retroactively to data collected under the old policy

Minor changes (typos, clarifications, contact detail updates) will be noted with an updated "last modified" date.

14. Contact Us

If you have any questions, concerns, or requests regarding your privacy or this policy, please reach out. We take all privacy enquiries seriously and aim to respond within 48 hours.