HerFlow Privacy Policy

Who we are

HerFlow is developed and operated by Stefan Dasic, an independent developer. "We" and "HerFlow" in this policy refer to that developer. You can reach us at support@herflowapp.com.

No accounts and no personal identifiers

• No account required: there is no sign-up, login, or password. HerFlow works the moment you open it.
• No personal identifiers collected: we never ask for your email address, phone number, or Apple ID, and a name is optional. The name you may enter for yourself or for a person you follow is stored only on your device.
• Random codes only: your profile is identified by a randomly generated code such as HF7FQ9D3. It is the only thing that links your cycle summary to anyone, and it is not derived from anything personal.
• An anonymous installation credential: to write to and read from the sharing database, the app signs in to Firebase anonymously in the background. This creates a random technical identifier for your installation. It contains no personal details, is stored in your device's keychain, and is needed both to read from the sharing database and so that the database can check that a record is updated by the installation that created it.

Because no name, email, or Apple ID is ever collected, we cannot connect a cycle summary to a specific person. Someone can only see your cycle data if you have given them your code.

Keeping HerFlow private

HerFlow is anonymous by design, and you decide how private it is. To keep your cycle off HerFlow's server and out of Apple Health:

• Switch off Share my cycle on the People tab. Your cycle summary is deleted from the server, and nothing about your cycle is uploaded until you switch it back on. Sharing is on by default so that your code works the moment you hand it over.
• Leave Save to Apple Health off in Cycle Settings. It stays off unless you turn it on.

HerFlow then sends nothing about your cycle anywhere: your periods, moods, notes, symptoms and everything else you log stay in the app on your iPhone or iPad. Like all app data, they are included in your device backup; if you back up to iCloud, Apple keeps that backup in your iCloud account. You can turn iCloud Backup on or off in your device settings. The server keeps only a placeholder with your anonymous installation identifier, which holds no cycle data and stops anyone else from taking your code. Following other people still downloads their summaries, but sends nothing about your cycle. Feedback is sent only when you choose to send it.

What stays on your device

The following information is stored only on your iPhone or iPad and is included in your normal device backup:

• Your daily moods and notes, except on days you explicitly choose to share (see below)
• Flow intensity
• Contraception details, which are never uploaded and never shared with a partner
• Your reminders, notification settings, theme, and language
• The names and relationships of the people you follow
• Your full period history

If you turn on Save to Apple Health, copies of your period days, flow intensity, some symptoms and your mood are also saved to the Health app on your device, as described under Apple Health.

The cycle summary stored for sharing

HerFlow's sharing feature (called Partner Sync or People in the app) lets someone who has your code follow your cycle. So that your code works the moment you hand it over, the app keeps a small cycle summary in our Firebase Realtime Database, a cloud service provided by Google, under your random code. This summary is created when you finish setting up your own cycle and is refreshed when your data changes, for as long as Share my cycle is switched on in the app's People tab (it is on by default). It contains:

• Your period days from the last 30 days
• Your cycle length and typical period length
• Your current cycle day and phase
• The symptom tags you logged today, if any
• A timestamp and the anonymous installation identifier described above
• On a day where you turn on "Share this day with your partner" in the day's log, that day's mood and note as well. They stop being shown to people following you when your day ends, and are removed from the server the next time HerFlow updates your summary.

The summary never contains your name, email, phone number, Apple ID, flow intensity, contraception details, or notes and moods from unshared days. It is transmitted over an encrypted connection (HTTPS/TLS). Reading it requires your code. Database rules let only the installation that created a record change or delete it.

If you use HerFlow only to follow other people and never set up your own cycle, no cycle position of yours is published.

What a person with your code can see

Someone who enters your code in their copy of HerFlow sees your cycle day and phase, your recent period days and cycle length, a general explanation of what that phase may feel like, tips on how to support you, notifications when your period is due or a phase changes, and today's symptom tags. They see your mood and note only on days you chose to share. They never see your name through HerFlow, and they do not need any login from you.

You decide who receives your code. You can switch off Share my cycle at any time, which deletes the summary from the server and stops all uploads until you switch it back on, or choose Get a new code, which retires your old code so that nobody holding it can see your cycle any more. Anyone following you can also remove you from their list.

Apple Health

HerFlow can save your own logs to Apple Health. This is off by default. It starts only when you turn on Save to Apple Health in Cycle Settings and allow it in Apple's permission screen.

• What is saved: your period days with flow intensity, the symptoms cramps, headache, bloating, fatigue, nausea and mood changes, and your daily mood (iOS 18 and later). Predicted periods are saved only after you confirm them.
• What is never saved: notes, contraception details, reminders, and anything about the people you follow.
• Write only: HerFlow does not ask for permission to read your Health data and cannot see data from other apps.
• Kept by Apple: HerFlow writes this data directly into the Health app on your device. It never passes through HerFlow's servers. Apple stores and protects it under its own privacy policy, and may sync it to your other devices through iCloud, depending on your settings.

To stop, switch off Save to Apple Health and choose Keep in Apple Health or Remove from Apple Health. You can also delete HerFlow's data in the Health app at any time.

No analytics, no advertising, no selling of data

• No analytics or tracking services and no crash-reporting SDKs
• No advertising and no advertising identifiers
• No third-party SDKs of any kind; the app talks to Firebase and to Apple's App Store only through standard system networking
• We do not sell, rent, trade, or share your data with anyone for marketing or advertising purposes

Feedback you send us

If you use Give Feedback inside the app, your message is stored in our Firebase database together with the app version, iOS version, device model, and app language, so that we can reproduce problems. Adding your email address is optional; we use it only to reply to you. Feedback is not linked to your cycle summary or your code.

Subscriptions

The optional People subscription is handled entirely by Apple through the App Store. We do not have access to your payment information, credit card details, or Apple ID. Apple's own privacy policy applies to the purchase.

Third parties

We use Firebase (Google) to store the cycle summary and feedback described above. Google processes this data on our behalf as a service provider; like any internet service, Google may log technical information such as IP addresses when the app connects. We do not use any other third-party service, and we do not share your data with anyone else.

Deleting your data

On your device: use Clear all data in the app's settings, or delete the app. Clear all data also deletes the cycle summary stored under your code on the server and gives you a fresh code.

On the server: switch off Share my cycle on the People tab to delete the cycle summary from Firebase while keeping everything on your device. Only a placeholder holding your anonymous installation identifier stays, so that nobody else can take your code. Deleting the app on its own does not remove the summary, so switch sharing off first, or email support@herflowapp.com with your code and we will delete it. Because the record carries no personal details, the code is the only way for us to find it.

In Apple Health: switch off Save to Apple Health and choose Remove from Apple Health, or delete HerFlow's data in the Health app. Clear all data and deleting the app leave data saved to Apple Health in place.

Feedback: email us and we will delete any feedback message you sent.

Security

Data travels between the app and Firebase over encrypted connections. Database rules let only the installation that created a record change or delete it, and every record is stored without personal identifiers. No system is perfectly secure, so we deliberately store as little as possible and nothing that identifies you.

Children's privacy

HerFlow is not intended for children under 13. We do not knowingly collect information from children.

Changes to this policy

We may update this Privacy Policy from time to time. We will post the new version on this page and update the "Last updated" date.

Contact us

If you have any questions about this Privacy Policy or want to request data deletion, please contact us at: support@herflowapp.com. Common questions are also answered on the support page, and you can read a plain-language overview of how HerFlow protects your privacy on the home page.