Privacy Policy

MenstrualBae ("we", "us") is the data controller for the information you give us. Contact: hello@menstrualbae.app. This policy is written under UK GDPR and the Data Protection Act 2018. If you are in the EU, equivalent rights apply under EU GDPR.

We try to collect the minimum needed for the app to work. Specifically:

Account basics (required): email address and a nickname. We use these to sign you in and address you in the app.

Onboarding context (optional): age range, country, life stage (e.g. cycling / TTC / pregnant / postpartum / perimenopause), and any conditions you choose to tell us about. We use this to tailor what the app shows you — for example, swapping period predictions for pregnancy week-by-week tracking.

Symptom logs (optional, you create them): pain, mood, sleep, bleeding, BBT, cervical mucus, ovulation/pregnancy test results, fetal movement, lochia, hot flushes, medication, free-text notes. These are stored against your account so you can see your own history and so the app can spot patterns for you.

Assessments & GPS chats: answers you give to our questionnaires and the conversation you have with Health GPS. These are used to generate your personal summary and are stored under your account.

Community posts: if you post in the Circle, the title and body are visible to other members of that group. Don't post anything you wouldn't want a member of that group to read.

Technical: standard server logs (IP address, timestamp, browser type) kept for up to 30 days for security and abuse prevention. We do not run third-party analytics or advertising trackers.

Under UK and EU GDPR (Article 9), information about your menstrual cycle, pregnancy, fertility, mental health, and medical conditions is "special category" data and gets the highest level of protection. We process it only on the basis of your explicit consent, which you give by choosing to log it. You can withdraw that consent at any time by deleting the entries, or your whole account.

Your data is hosted on Lovable Cloud (built on Supabase), in encrypted databases in the EU. It is encrypted in transit (TLS) and at rest. Access at the database level is restricted by row-level security — every query is scoped to your user ID, so even our own engineers cannot casually browse other users' health logs.

When you use Health GPS, the symptom and answers you submit are sent to a large language model via the Lovable AI Gateway to generate your summary. The model provider is contractually prohibited from using your inputs to train their models. We do not send your email, nickname, or any account identifier alongside the content — only the conversation itself. We do not use your data to train any of our own models.

We only share with the providers we need to run the service:

• Lovable Cloud / Supabase — database, authentication, hosting (EU region).
• Lovable AI Gateway — routes Health GPS prompts to model providers; no training on user data.
• Email provider — sign-in links and account emails.

We do not share with advertisers, data brokers, insurers, employers, or social media platforms. We will disclose data only when legally compelled (e.g. a valid UK court order), and we will tell you unless legally gagged from doing so.

• Active account: as long as you keep the account open.
• After you delete your account: your profile, symptom logs, assessments and posts are deleted within 30 days. Encrypted backups are rotated out within 90 days.
• Server logs: up to 30 days.
• Aggregated statistics (e.g. "X% of users in their 30s tracked headaches this month") are de-identified — they cannot be linked back to you — and may be kept indefinitely.

Under UK/EU GDPR you have the right to:

• See what we hold about you (access).
• Get a copy in a portable format (data portability).
• Correct anything that's wrong (rectification).
• Have it deleted (erasure / "right to be forgotten").
• Object to or restrict processing.
• Withdraw consent at any time.

The fastest way to exercise these rights is from your account page — you can export and delete everything yourself. For anything else, email hello@menstrualbae.app and we'll respond within 30 days. You can also complain to the UK Information Commissioner's Office (ico.org.uk).

MenstrualBae is intended for people aged 13 and over. If you are 13–15, please ask a parent or guardian to help you set up the account — under UK GDPR a parent or guardian needs to give consent for under-13s, and we do not knowingly process data from under-13s. Teen mode hides intimate-health questions by default and uses softer language.

TLS in transit, encryption at rest, row-level security on every table, no third-party ad/analytics trackers, principle-of-least-privilege access for staff. New passwords are checked against the Have I Been Pwned breach database at signup and password reset (using k-anonymity, so your password never leaves your browser in plaintext) — if a password has appeared in a known breach, we won't let you use it. We require a minimum of 10 characters. No system is 100% secure — please use a strong, unique password. If you believe you've found a vulnerability, email hello@menstrualbae.app and we'll respond within 72 hours.

If we make material changes (new subprocessor, new data type, change in how we use AI), we'll email registered users and post a notice in the app before the change takes effect.

Privacy questions or to exercise your rights: hello@menstrualbae.app.