Privacy Policy

1. Introduction

EveFlow ("we," "us," or "our") develops and operates the EveFlow mobile application and website companion (collectively, the "Service"). We are committed to protecting your privacy and security.

By accessing or using our Service, you agree to the collection, storage, and processing practices described in this Privacy Policy. If you do not agree with any terms in this policy, please do not use the Service.

2. Information We Collect

We collect information you choose to provide directly or log within our Service. This includes:

• Account Profile Data: Optional email address, username, and basic profile parameters should you opt to synchronize data.
• Technical Parameters: On-device diagnostic reports, operating system versions, and anonymized identifiers.
• Support Communications: Inquiries, emails, and bug reports submitted to our team.

3. Health & Biological Data

Your physiological logs are treated as highly sensitive data. This includes period durations, flow details, basal body temperature, hormonal symptoms, basal biomarker variations, moods, and notes you choose to log.

On-Device First: By default, your health logs are calculated and stored locally on your device. We do not transmit this data to our servers unless you explicitly activate encrypted cloud synchronization services. We never sell, rent, or trade your biological or health data to anyone.

4. Third-Party Partners

We utilize specific, verified third-party integration pipelines to ensure payment security, app stability, and crash diagnostics. These partners process information under strict security rules:

• Firebase: Used to monitor application performance, track anonymous crash frequencies, and send push notifications. No sensitive biological data is shared.
• RevenueCat: Handles in-app purchase validation, tracking whether your premium membership is active without matching purchase details to health records.
• Google Play Billing API: Manages premium payments securely. We do not collect or store credit card details; all financial transactions are completed via Google's secure ledger.

5. Cookies & Local Storage

We use standard browser cookies and local storage tokens to preserve configuration states, keep track of your layout selections, and remember your session parameters. You can disable cookies inside your browser settings, though some functional features may cease to render correctly.

6. Security & Encryption

We enforce advanced security protocols to keep your databases protected:

• AES-256 Encryption: Used to protect all cloud backups and local database files.
• SSL/TLS Protocols: Secure tunnels encrypt all communication between your client device and our servers.
• Anonymized Databases: Backups do not contain identifiable markers, ensuring that even in the event of an archive compromise, logs cannot be mapped back to individuals.

7. Data Retention

We store your general parameters and encrypted backups only as long as necessary to maintain your active account profile. If you choose to delete your account or submit a data deletion request, all personal and physiological information is wiped from our active databases and backup files within 30 days.

8. Your Rights & Control

You maintain complete legal authority over your data. Depending on your jurisdiction (e.g. GDPR compliance), you have the right to inspect, export, correct, restrict, or request complete deletion of any parameters we hold. You can initiate a complete database purge directly from our Data Deletion Request page.

9. Contact Us

If you have questions regarding this Privacy Policy or wish to assert your data rights, please contact our privacy compliance officer: