App Privacy Policy

1. Who this policy is from

PeriPause is a perimenopause symptom tracker published by H&N Innovations LLC. This policy covers the PeriPause mobile app and nothing else. It applies from the effective date shown at the top of this page.

2. Your account

You need an account to use PeriPause. It’s what keeps your history backed up and lets it move with you to a new phone. The account is just your email address. There is no password: each time you sign in on a phone, we email you a six-digit code.

We use your email address to sign you in, and to reply if you write to us. We do not send marketing email.

PeriPause Premium is paid for through Apple’s App Store, as a subscription or a one-time purchase. Apple takes the payment: neither we nor RevenueCat (see §4) ever see your card or bank details. What Apple keeps about your purchase is covered by Apple’s own privacy policy.

3. What we store, and where

Everything you enter is saved first in a private database on your phone. The app works from that copy, so it opens and saves without waiting for the internet. When you are signed in and online, PeriPause also copies the following to your account on our server:

• your daily logs — symptoms and how bad they were, bleeding and flow, clots, cramps, leaks, mood, sleep, triggers, medications taken and any notes you write
• the symptoms you track, including any you created yourself
• your list of medications
• your answers from setup, including the name you gave us, your age range and your stage
• your email address
• a random ID the app makes up for each phone, so two phones do not overwrite each other’s changes. It is not tied to your phone’s hardware.
• when each item was last changed

These stay on your phone and are never uploaded: your reminder settings, your text size, the statistics PeriPause calculates for its screens, and the built-in symptom list.

Your subscription is not stored on our server. RevenueCat keeps that record, as §4 explains.

4. Who handles your data, and how it is protected

Three companies handle data for us, and only to run PeriPause:

• Supabase runs our database and sign-in. Your account and everything listed in §3 is stored with Supabase in the United States (US East, Ohio).
• Resend delivers the sign-in code email. It sees your email address and the code, and nothing about your health.
• RevenueCat (RevenueCat, Inc., in the United States) keeps track of your subscription, so PeriPause knows whether it is active on any phone you sign into. It receives your account’s random ID — not your email address — and the purchase records the App Store reports: which plan, when it started and renews, the price and currency, and whether it was cancelled or refunded. Like any online service, it also sees basic technical details each time the app checks in: your phone’s model and operating system version, the app’s version, your region and language settings, a random identifier that Apple gives this phone for PeriPause’s apps (not the advertising identifier), and your IP address, from which a rough location can be worked out. It never receives your email address, your name or any health information.

No one else receives your data. No AI service reads your logs. Apple, which takes the payment, does so under its own privacy policy (see §2).

Your data is encrypted on its way to our server and encrypted where it is stored. The server only lets your own signed-in account read or change your records. It is not end-to-end encrypted: the people who run PeriPause’s server could technically read it, as with almost every online service. We may study combined statistics across everyone who uses PeriPause — for example, which symptoms are most common — to decide what to build or offer next. Those statistics never identify you. When you sign in, our sign-in provider records your IP address for security. We don’t currently keep separate backups of our server’s database; if that changes, this policy will say how long they are kept.

We keep your data for as long as you have an account. When you delete your account, it is removed from our server (see §9). §9 also says what happens to your purchase record at RevenueCat.

5. What PeriPause does not collect

• no usage analytics — PeriPause doesn’t track what you tap, which screens you visit or how long you spend on them, and PeriPause has no crash reporting of its own (if you have turned on sharing with app developers in your phone’s settings, Apple may send us anonymous crash reports). If that ever changes, we’ll update this policy and tell you in the app before it starts.
• no advertising and no advertising identifier
• no third-party trackers or marketing SDKs
• no location, contacts, photos, calendar, microphone or camera access
• no connection to Apple Health, Google Fit or any wearable
• no phone number or date of birth, and no card or bank details — Apple handles payment

6. When information leaves your phone

• Backup to your account. When you are signed in and online, what §3 lists is copied to our server, and changes you make on another phone are copied back. This happens on its own, and it’s the reason PeriPause has accounts.
• Signing in. Your email address goes to our server and to Resend, so the code can reach you.
• Checking your subscription. While you are signed in, PeriPause asks RevenueCat whether your subscription is active — when the app opens or comes back on screen, when it shows you the plans, and when you buy a plan or restore a purchase — sending only what §4 lists. Paying happens in Apple’s own payment sheet, not in PeriPause.
• Sharing a report or an export. Me → Export your data builds a PDF or a spreadsheet on your phone and hands it to your phone’s share sheet. You choose where it goes — mail, messages, a file, a printer, your doctor. We do not receive a copy. Once you send it, whoever receives it has your health information, and this policy no longer governs that copy.
• Opening a Learn link. Learn is a list of links to real health organisations. Tapping one opens that organisation’s website in your browser, and from that point their privacy policy applies rather than ours. We tell them nothing about you.

Nothing else. Logging, charts and the doctor’s report all work offline; anything you log offline is backed up the next time you connect.

7. Reminders

If you turn reminders on, PeriPause asks your phone to show a notification at the times you choose. They are scheduled on the phone itself — no reminder is sent from our server.

Reminder text is deliberately generic and never names a symptom, so a notification on your lock screen shows someone nearby only that it is from PeriPause. You can turn reminders off in the app, or in your phone’s notification settings, at any time.

8. Your phone’s own backups

PeriPause keeps your health data and your sign-in out of your phone’s own backups — iCloud Backup and computer backups — so what you log is never copied into iCloud. The only PeriPause detail a backup can contain is RevenueCat’s note of your account’s random ID and whether your subscription is active. Your account on our server is what carries your history to a new phone.

We spell this out because health data in a backup you didn’t know about is exactly the kind of copy a privacy policy should not leave you guessing about.

9. Deleting your data

There are two ways, and neither can be undone.

• Me → Your data → Delete all my data erases your logs, your symptom list, your medications, your custom symptoms and your setup answers from this phone and from our server. Your account stays, so you can start again. On the server — as soon as this phone is online — all of it is permanently deleted, and your other phones delete their copies the next time they connect. You never need a subscription to do this: Delete all my data is also on the Account & data screen.
• Me → Delete account removes your account and everything stored with it on our server, permanently. You never need a subscription to do this: Delete account is also on the Account & data screen, linked from the screen where you choose a plan.

Deleting your account does not cancel an App Store subscription, because Apple bills it, not PeriPause. To stop being charged, cancel it in your phone’s settings as well. If you have a subscription that renews, the app reminds you of this before you delete.

Deleting your account also deletes your purchase record at RevenueCat — your account’s random ID and the purchase history described in §4. If that ever fails, we remove it by hand; you can also write to privacy@peripause.io. Apple keeps its own record of what you bought, under Apple’s privacy policy.

With Delete all my data, a phone that is offline at the time erases its copy the next time it connects. With Delete account, any other phone signed in to your account is signed out once it next connects, and can no longer open your history; the copy on it stays on that phone until you delete the app there or sign in with a different account. Until then that copy is on that phone, and we cannot reach it.

Deleting the app removes its data from that phone, but not from your account.

10. Health information

What you record in PeriPause is sensitive health information and is treated as such. On your phone it sits in the app’s private storage, protected by your phone’s built-in encryption. On our server it is protected as §4 describes. We never use it for advertising, and we never sell it or share it with anyone except Supabase, which stores it for us (§4). Resend and RevenueCat, the other companies named there, never receive any of it.

The single most effective protection for this data is a passcode or Face ID on your phone, and that is not something an app can do on your behalf. If you share your phone, consider that anyone who can unlock it can open PeriPause.

11. PeriPause is not medical advice

PeriPause records what you tell it and calculates statistics from your own entries. It does not diagnose, does not predict, and does not recommend treatment.

The doctor's report is a summary of your own logs, together with general discussion topics for a clinician to consider or discard. It is a conversation aid, not a care plan. Always speak to a qualified healthcare professional about your symptoms and any treatment.

12. Children

PeriPause is intended for adults and is not designed for or directed at anyone under 18. We do not knowingly collect information from anyone under 18. If you believe a child has made an account, write to privacy@peripause.io and we will delete it.

13. Your rights over your information

Privacy laws including the UK and EU GDPR, the California Consumer Privacy Act and Washington’s My Health My Data Act give you rights to access, correct, export and erase your personal information, and to withdraw your consent. You can use them in the app:

• Access — everything you have entered is visible in the app, day by day, under Me → Full history, and in the spreadsheet export below.
• Correction — open any past day from Full history and change it.
• Portability — Me → Export your data produces a spreadsheet of your complete record, including notes and medications.
• Erasure and withdrawing consent — Me → Your data → Delete all my data, or Me → Delete account.
• Sale or sharing — there is nothing to opt out of. We do not sell your personal information, and never will.

Full history and changing past days are part of PeriPause Premium. Exporting your data as a spreadsheet, deleting your data and deleting your account are not: without a subscription, all three are on the Account & data screen, linked from the screen where you choose a plan.

You can also write to privacy@peripause.io to ask what we hold about you, or to have it corrected or deleted, and we will respond within 30 days.

14. Changes to this policy

If PeriPause changes what it stores or who handles it, this policy will be updated and you will be told inside the app before the change takes effect. Backup to your account is not such a change: PeriPause has worked this way from the first version anyone could install.

We will not quietly begin uploading information that today stays on your phone.

15. Contact

Questions about this policy can go to privacy@peripause.io.