Fazia Privacy Policy

Last updated: [PUBLICATION DATE]

Fazia is a menstrual cycle tracker. Cycle data is health data, among the most sensitive personal information there is. That is why we built the app so that nobody but you can read it: it stays on your phone and, if you choose sync, leaves it only encrypted.

In short

• No account needed. Without one, we never ask for your name, email or phone number.
• Everything you log stays on your phone only, in an encrypted database (SQLCipher, AES-256).
• The encryption key lives in your phone's secure storage (Keychain on iPhone, Keystore on Android). It is not synced to iCloud and never reaches another device.
• Without an account, the app sends nothing over the internet. The account and sync are optional and encrypted (see below).
• No ads, no analytics, no trackers (for example Facebook, Google Analytics, AppsFlyer). The only third-party SDK is RevenueCat, for the subscription, and it gets nothing about your cycle (see below).
• In the app, Settings → Transparency shows you at any time, from your own settings, what data is on the phone and what leaves it.
• We never sell or share your data with anyone.
• You can export everything you logged at any time and delete everything, permanently, in one place.

Who is responsible

[FULL NAME OF CONTROLLER / COMPANY], [ADDRESS], email: privacy@fazia.app.

Your health data never reaches us unencrypted: in practice, you are the only one who can read it.

What data is in the app

Only what you enter:

• period days and flow;
• symptoms, moods, energy and notes;
• sexual activity (protected or not), if you choose to log it;
• basal body temperature, ovulation test results and cervical mucus observations;
• your life stage (for example pregnancy or hormonal contraception) and typical cycle lengths;
• preferences: language and whether the app locks with Face ID or fingerprint.

Predictions (next period, fertile window) are calculated on your phone, not on a server.

Legal basis

Health data is a special category of data (GDPR Art. 9). We process it only with your explicit consent, which you give by using the app and entering the information. You can withdraw it at any time by deleting your data (Settings → Delete all data) or uninstalling the app.

Optional account and encrypted sync

You can use Fazia without an account. If you choose to create one (email, Apple or Google):

• What reaches the server: your email address (to sign in) and encrypted copies of your data. Encryption happens on your phone (XChaCha20-Poly1305) with a key the server does not have. Even the names of the records are hidden (HMAC), so the server cannot learn, for example, which day a period started. The server only sees when each encrypted copy was last changed.
• Recovery code: you get it once and only you have it. It opens your data on a new phone. If you lose it, nobody can recover the data on the server, not even us.
• Where: the server (Supabase) is in [SERVER REGION, e.g. EU – Frankfurt]. Supabase acts as a processor on our behalf.
• Deletion: Settings → Account & sync → Delete account from the server. The account and every encrypted copy are deleted immediately.

Partner mode

If you invite a partner (with a code), they see only what you tick among: cycle phase, when your period is due, fertile window and today's mood. This is worked out on your phone and encrypted with a key only your partner has. Your partner never sees symptoms, intimacy, notes or your history. You can stop sharing at any time, and from then on they see nothing.

Premium subscription

Cycle tracking is free forever. If you choose Premium:

• The App Store or Google Play takes the payment. We never see your card details.
• RevenueCat (RevenueCat, Inc., USA) keeps track of the subscription. It gets an anonymous ID generated by the app and your store purchase history. It does not get your email or anything about your cycle. RevenueCat acts as a processor; the transfer to the USA relies on the European Commission's standard contractual clauses and/or the EU-US Data Privacy Framework.

Apple Health and Health Connect

Only if you turn them on (Settings → Integrations): Fazia reads your basal temperature (for example from a watch or ring) and writes your period days to the phone's health app. The exchange happens on the phone, between apps. The data never passes through our servers. You can turn it off at any time in Settings or in the phone's settings.

Widget and Live Activity

To show your cycle day on the home screen or lock screen, the widget gets your cycle day, phase and days until your period. These few values live on the phone, in a space shared by the app and the widget, outside the encrypted database. If you turn on the app lock, the widget only gets a plain gauge, and the lock-screen countdown no longer appears.

Notifications

Notifications are scheduled on the phone, not sent by a server. By default their text is discreet and says nothing about your cycle; you can change that in Settings → Notifications.

Face ID, Touch ID and fingerprint

If you turn on the lock, your phone checks who you are. The app only receives "yes" or "no". It has no access to your biometric data.

Export and deletion

• Export: Settings → Your data → Export a copy (JSON) or Export for Excel (CSV). The file is created on your phone and you decide where it goes. The temporary unencrypted copy is deleted right after.
• Deletion: Settings → Your data → Delete all data. We delete the database and its encryption key, so the data cannot be recovered.
• When you uninstall, the operating system deletes the app's data. If you reinstall, the app starts completely fresh.
• On Android, automatic cloud backup of the app is turned off, so health data never lands unencrypted in Google Drive.

The fazia.app website

• Statistics without cookies. We use Cloudflare Web Analytics: it counts visits in aggregate (pages, country, browser type), with no cookies, no identifiers and no tracking across sites. That is why the site has no consent banner.
• Bot protection. On the beta form, Cloudflare Turnstile checks that a human is sending it, without tracking cookies.
• Nothing from third parties. Fonts, scripts and images are hosted on fazia.app. We load nothing from Google or from ad networks.
• The encryption demo on the home page encrypts a sample note right in your browser, with a key made there. Nothing is sent.

The beta list

• What we keep: your email address, your language (Romanian or English) and the date you signed up.
• Why: to write to you once, when the beta starts. The legal basis is your consent (Art. 6(1)(a) GDPR), which you give by ticking the box on the form.
• Where: in the website's database at Cloudflare (D1), in the European Union (Cloudflare D1, EU jurisdiction). We share it with nobody.
• How long: until the public launch, then we delete it. We delete it at once if you write to privacy@fazia.app.

Your rights

Under the GDPR you have the right of access, rectification, erasure, restriction, portability and objection, and the right to complain to your data protection authority. You can exercise them directly in the app: you see, change, export and delete your data yourself.

Children

Fazia is intended for people aged 16 and over.

Not a medical device

Fazia gives estimates, not diagnoses. The fertile window shown is not a method of contraception. For any concern about your health, talk to a doctor.

Changes

If we add features that change how data is handled, we will update this policy before they launch and ask for your consent in the app.

Contact

privacy@fazia.app

Emails you send us reach Google Gmail through Cloudflare (forwarding), and we keep them for at most 12 months after the conversation ends. Please don't email us cycle data: we don't need it to help you.