Privacy policy

What Petalune stores

• Your account: a sign-in id from Firebase Authentication, and the email address or Google name you sign in with. Guests get an anonymous id.
• What you log: periods (dates and flow), daily logs (flow, symptoms, mood, notes), and body measurements (weight, water, sleep, basal temperature).
• Your profile and settings: name, goal, typical cycle and period length, height, birth year, units, time zone and reminder choices.
• Health app data, only if you connect it: weight, water, sleep, basal temperature and menstrual flow from Apple Health or Health Connect, with a note of which app each value came from.
• Buddy, only if you use it: your chats with Buddy, your Buddy settings, things Buddy remembers about you (with a numeric index used to find them), and any ratings or reports you give replies.
• Partner sharing, only if you use it: who you're linked with, since when, what you chose to share, and, for the partner, the name they call you.
• A notification token, on Android: an id from Firebase Cloud Messaging for your phone, so Petalune can tell a partner when the person whose cycle they view logs a period.

Petalune doesn't collect your location, contacts or advertising identifiers, and it includes no analytics or advertising software.

Apple Health and Health Connect

If you connect Apple Health (iPhone) or Health Connect (Android), Petalune reads only the types you switch on, on your phone, and saves the daily values to your Petalune account so they appear in your charts and predictions on all your devices. You can disconnect at any time and choose to remove the synced values.

Health data is used only to provide Petalune's features. It is never used for advertising or data mining, never sold or shared with anyone else (Buddy never sees it), and never stored in iCloud.

Buddy, the AI companion

Buddy is an optional chat companion for signed-in accounts aged 16 and over. Before your first chat, Petalune asks for your agreement and lets you choose whether Buddy may see your cycle and whether it may remember things.

• What is sent to Google: to write each reply, Petalune sends your message, recent messages in the chat, Buddy's instructions and, if you allow it, your cycle day, phase and predictions, the last week of logs and the body values you typed in Petalune, plus things Buddy remembers that relate to your message. This goes to the Google Gemini API. Data from Apple Health or Health Connect is never sent.
• What Google does with it: Petalune uses Google's paid Gemini API with storage turned off. Google uses the data to produce the reply and doesn't use it to train its models; under its API terms it may keep it for a limited time to detect abuse.
• Memories: if you allow it, small things you share (for example what helps your cramps) are kept so Buddy can recall them later. You can see and delete them in “What Buddy remembers”, or turn remembering off.
• Keeping and deleting: chats and memories stay until you delete them, a chat at a time, all memories at once, or everything with your account. They're included in Download my data.
• Safety: Buddy isn't a doctor and can be wrong. Messages about self-harm get a fixed reply with crisis lines. You can report any reply; reports are kept so we can review them.

Partner sharing

You can share your cycle with one person. They join with a code you create, which works once and for 24 hours. They see your phase, cycle day, next period, fertile window, hormone chart and a typical sex-drive pattern for your phase (an estimate from your cycle day, not something you log), plus your mood, symptoms or period days only if you switch those on. They never see your notes, body measurements, health app data or Buddy. If they turn it on, their phone gets a notification when you log a new period, showing only the name they call you and that it started. Either of you can end the link at any time, and deleting your account ends it.

How it's used

Only to run Petalune for you: predictions and the calendar, your charts and history, articles for your phase, reminders and, if you use it, Buddy. Nobody at Petalune reads your logs, and Petalune doesn't sell or share your data or use it for ads.

Reminders are scheduled on your phone. Their text (for example "Period expected soon") can appear on your lock screen; you can turn reminders off in the app.

Where it's kept

Petalune relies on a few service providers, which handle data only to run the service:

• Fly.io runs Petalune's server in the United States (Virginia).
• Neon hosts the database in the United States (Ohio).
• Google Firebase Authentication handles sign-in.
• Google Gemini API writes Buddy's replies and helps it remember (only when you use Buddy).

Data travels between the apps and the server over encrypted connections (HTTPS).

Your choices

• See and correct: everything you log can be edited or removed in the app or on the web.
• Download: Account → Download my data gives you everything Petalune stores, as a JSON file.
• Delete: Account → Delete account removes all your data from Petalune's database straight away and closes your sign-in. Copies may remain in our providers' backups for a short time until those backups expire. Data Petalune wrote into Apple Health or Health Connect stays there, under your control. How to delete your account.

Petalune keeps your data until you delete it or your account.

Children

Petalune is for people aged 16 and over. It isn't directed at children and doesn't knowingly collect data from anyone under 16.

Health information

Petalune's predictions are calendar-based estimates from your own history. They aren't medical advice, a diagnosis or contraception. Talk to a healthcare professional about anything that worries you.

Changes and contact

If this policy changes, the date at the top changes too, and significant changes are announced in the app.

Questions or requests about your data: skydev.apps.contact@gmail.com.