Your health data
stays on your phone

📱What stays on your device

The following data is stored exclusively in an encrypted SQLCipher database on your phone:

• Menstrual cycle logs (period dates, flow intensity, spotting)
• Daily symptoms, mood ratings, energy levels, and sleep hours
• Body metrics (basal body temperature BBT, weight, ovulation test results, medication)
• Personal notes and custom cycle journal entries
• Cycle length preferences, notification schedules, and theme settings

The encryption key is generated randomly on your device and stored securely in the hardware-backed iOS Keychain or Android Keystore.

☁️What we collect on our server

To keep the service reliable, our server receives minimal technical metadata:

• A random anonymous installation ID (not linked to your advertising identifier, name, or Apple/Google account)
• Platform (iOS or Android), operating system version, and app build number
• If enabled: anonymous feature usage statistics (such as whether the calendar or export was opened). This setting is disabled by default and strictly counts feature interactions without any health information
• If you subscribe to Premium: purchase validation tokens from the Apple App Store or Google Play Store to verify subscription entitlement

We never receive or sell your cycle entries, symptoms, notes, or intimate health records.

🔔Local notifications

Reminders are scheduled locally on your smartphone processor. They use discreet wording designed to protect your privacy on the lock screen without disclosing cycle specifics to passersby.

🚫What we never do

• We never sell, rent, or monetize your health data
• We never display third-party advertisements
• We never include third-party tracking or advertising SDKs
• We never request access to your contacts, camera roll, microphone, or precise location
• We never share health profiles with insurers, data brokers, or advertising networks

🔐Security & encryption

Local databases are protected by AES-256 encryption via SQLCipher. Communication with our server for update checks occurs strictly over encrypted TLS connections. You can also activate biometric app locking (Face ID, Touch ID, or PIN) in Settings.

🗑️Data export and deletion

• Export your data: In Settings → Privacy, you can export your complete records as an unencrypted JSON file or an AES-256-GCM password-encrypted archive (Premium).
• Delete all local data: Use Settings → Privacy → Delete All Data to instantly wipe the local encrypted database.
• Delete server-side records: Tapping "Delete All Data" also transmits a request to DELETE /api/v1/devices/me, permanently erasing your anonymous installation ID, push tokens, and feature counters from our server.

🧒Minors and children

Moonthly is not directed at children under 13. Because data resides solely on the physical device, parents and guardians maintain complete physical control over any information stored.

🔄Changes to this policy

Any updates to this policy will be reflected on this page with an updated revision date. Material changes will be communicated via in-app release notes.

✉️Contact

• Email: [email protected]
• Contact page: moonthly.appstoi.com/contact