Privacy Policy

HormoneLog (“HormoneLog,” “we,” “us”) is a perimenopause and menopause symptom, HRT, and cycle tracking app. This policy explains what data the app handles, where it lives, and what we do and don't do with it. We wrote it to describe exactly what the app does — not generic boilerplate.

The short version: your logs are stored on your device by default, not on our servers. No account is required to use HormoneLog. We never sell your data, and we never send symptom values to any analytics or advertising service.

1. Data stored on your device

Everything you log — symptoms, severity, mood/energy/sleep ratings, period dates, HRT regimen details, notes, and generated reports — is stored in a local database on your phone. Free-text fields that are most likely to contain sensitive detail (log notes and any HRT dose you type in) are additionally encrypted at rest with AES-256-GCM before being written to that database; the encryption key is generated on your device and held in your device's secure hardware-backed keychain (iOS Keychain / Android Keystore), never transmitted anywhere, including to us.

Your phone's own backup system (for example, iCloud Backup, or an encrypted Finder backup) may include this local, encrypted data as part of a normal full-device backup. That is a function of your device and your own Apple/Google account, entirely separate from — and unrelated to — the optional cloud sync feature described below.

2. Cloud backup (opt-in, not yet available)

HormoneLog is designed to support an optional, opt-in cloud backup so you can restore your data on a new device. This feature is not live in the current version — the setting exists in Settings, but turning it on does not yet sync anything anywhere. If and when it ships, it will remain off by default, require an explicit action from you to enable, and will be described here in detail (what's sent, where it's stored, and how to delete it) before it goes live.

3. Generating a clinician PDF report (Premium)

When you tap “Generate PDF for my doctor,” the already-computed summary shown on that screen — your HormoneLog symptom index scores and their category breakdowns, your top symptom frequencies (which symptoms and how often, not your individual daily log entries), and a short text summary of your HRT regimen (form, dose, and schedule, exactly as you typed it) — is sent over an encrypted (TLS) connection to a report-rendering service we operate, which lays it out as a PDF and returns it to your device. That service is stateless: it does not write anything to a database, and keeps nothing after it responds to your request. Your raw daily symptom log, mood/energy/sleep ratings, and free-text notes are never sent — only the aggregate scores and summary described above, and only when you choose to generate a report.

4. Apple Health (HealthKit)

If you grant permission, HormoneLog reads sleep analysis, heart-rate variability, resting heart rate, and body temperature data from Apple Health, to show it alongside your symptom log in Insights. HormoneLog never writes any data back to Apple Health, and this data never leaves your device — it is not sent to us or to any third party. You can deny or later revoke this permission in iOS Settings at any time; the rest of the app works fully without it.

5. Analytics

We use a minimal, privacy-conscious analytics setup to understand how people use the app in aggregate — for example, that someone completed onboarding, logged a symptom, or viewed the paywall. The complete list of events we can ever record is fixed in the app's source code and contains no symptom names, severities, notes, dose text, or any other health content — only that a screen was viewed or an action was taken, plus a randomly generated device identifier that is not tied to your name, email, or Apple/ Google account.

6. Payments and subscriptions

Subscription purchases are processed entirely by Apple (App Store) or Google (Play Store) and managed via RevenueCat, a subscription-management service. We receive confirmation that you have an active subscription and which plan it is; we never see or store your payment card details — those are handled directly by Apple/Google.

7. What we don't do

• We do not sell your data, to anyone, ever.
• We do not use third-party advertising SDKs, and HormoneLog does not show ads.
• We do not track you across other apps or websites.
• We do not require an account, email address, or phone number to use the app.
• We do not share your health data with employers, insurers, or advertisers.

8. Exporting and deleting your data

You can export your full data as a JSON or CSV file at any time from Settings, and share or save it yourself — this happens entirely on your device. “Delete everything” in Settings permanently erases your local database immediately; this cannot be undone. Uninstalling the app also removes its local data, subject to your device's own backup behavior described in Section 1.

9. Health data and special categories (GDPR/UK)

Symptom, HRT, and cycle data are “special category” health data under GDPR and UK data protection law. This data is stored locally on your device by default and not transmitted to us as part of ordinary use of the app — the one exception is the brief, stateless PDF-generation processing described in Section 3, which only happens when you explicitly choose to generate a report. If you enable a future cloud backup feature, we will present a specific, explicit consent step before any health data leaves your device, as required by law.

10. Children

HormoneLog is not directed at, or intended for use by, children. It is rated for users 12 and older, per its App Store age rating.

11. Changes to this policy

If we make a material change to how HormoneLog handles data, we'll update the “last updated” date above and, where required, notify you in the app.

12. Contact

Questions about this policy or your data can be sent to support@bakerventuresstudio.com. Data controller: Baker Ventures LLC, 355 E 1200 N, Logan, UT 84341, USA.