Your cycle is some of the most personal information there is. This policy explains, in plain language, what Periodiva collects, why, who helps us process it, and the choices you have. It covers the Periodiva app (iOS and Android, launching soon) and this website.
The short version: we never sell your data, we don't show ads, and we don't use analytics or advertising trackers. Supporters see only what you switch on. You can export your data and delete it.
Who we are
Periodiva ("we", "us") provides the app and this website. Our full legal details will be added here before launch. For anything about your privacy, email privacy@periodiva.com.
What we collect
Account details. Your email address (used to sign in with a one-time code), the name you choose to be called, and your timezone. Trackers also give their date of birth during setup. A profile photo is optional.
Your setup answers. Your goal (for example tracking, trying to conceive or avoiding pregnancy), how regular your cycle is, the birth control you use if any, and which symptoms you want to track.
Cycle and health data. Period start and end dates, your average cycle and period length, and the daily logs you add: flow, spotting, pain level and location, moods, symptoms, energy, sleep, water, medications (name, dose, time and notes) and free-text notes. Journal entries you write.
Luna conversations. The messages you send to Luna, our AI companion, and Luna's replies.
Supporter connections. If you connect with a supporter: both of your display names, the invite code, the connection status and the sharing switches you choose.
Notification settings. Whether you turn on push notifications, and if so a push token for your device so we can send them.
Sign-in security. When you request a sign-in code we briefly keep your email address, a scrambled (hashed) copy of the code and your IP address to stop abuse. Codes expire after 10 minutes and these records are deleted within about 11 minutes.
The waitlist. If you join the waitlist on this website we store your email address, the date and where you signed up.
What we don't collect. We don't use analytics, crash-reporting or advertising tools, and we don't collect advertising identifiers or your location.
Kept only on your phone. Daily care reminders, care check-ins and the water glasses you tick off stay on your device and are not sent to us. The website remembers only whether you have already seen its intro animation, in your browser's session storage; it sets no cookies.
How we use it
- To run the app: show your cycle, predictions, phase and daily care, and keep your data in sync across your devices.
- To sign you in and keep your account secure.
- To share with supporters exactly what you allow.
- To power Luna's replies (see below).
- To send the notifications you turn on, and to email you at launch if you joined the waitlist.
We don't sell your data, rent it, share it with advertisers or data brokers, or use it to show you ads.
Luna, our AI companion
Luna's replies are generated by Google's Gemini service. When you chat with Luna we send Google: your first name, whether you are tracking or supporting, your current cycle phase and cycle day, and the messages in the current conversation. Supporters' chats also include the first name of the person they support and that person's phase, if it is shared with them. We do not send your daily logs, journal, date of birth or email address.
We use Google's paid Gemini service, under which Google does not use these conversations to improve its products. Your Luna conversations are saved to your account so you can come back to them; you can delete any conversation in the app.
If you speak to Luna instead of typing, your phone's own speech recognition (from Apple or Google) turns your voice into text, and that provider may process the audio under its own privacy terms.
Luna offers general wellbeing information, not medical advice.
Sharing with supporters
You decide whether to connect with a supporter, and what they see. A new connection shares nothing until you approve it. Once approved, you choose from: whether you are on your period, predictions (such as your next expected period), your cycle phase, and from the last 45 days your symptoms, moods, pain and medication names and times.
Supporters never see your flow, notes, journal, energy, sleep, water, medication doses, date of birth or photo. You can pause a connection, which hides your details straight away, or disconnect, which removes what was shared.
Who processes your data
We use these service providers to run Periodiva. They process data on our behalf and only for these purposes:
- Google Firebase and Google Cloud: account sign-in and the database that stores your data.
- Google Gemini: generating Luna's replies.
- Cloudflare: our secure server functions (sign-in codes, the waitlist, the Luna connection) and short-lived security records.
- Resend: delivering your sign-in code emails.
- Cloudinary: storing your profile photo, if you add one. The photo is stored at an unlisted web address, so anyone who has the exact link could view it.
- Expo, Apple and Google: delivering push notifications to your device.
Some in-app content comes from other services: relaxing music from Jamendo (which receives only a mood word based on your current phase, not your details), and recipes from TheMealDB.
These providers may store or process data in countries other than your own. We'll disclose where our database is hosted here before launch.
We may also disclose information when the law requires it.
Security
All data travels over encrypted connections (HTTPS), and our providers encrypt stored data at rest. Database rules mean your private data can be read only by you, and a supporter can read only the slice you share, only while your connection is active. Our team's admin tools show account basics (name, email, sign-up date), never your cycle data, logs, journal or Luna chats. No system is perfectly secure, but we work to protect your information and will tell you if a breach affects you.
Keeping and deleting your data
We keep your data while you have an account.
- Delete cycle data: in the app, Settings → Privacy & data → Delete all cycle data removes your periods and daily logs.
- Delete a Luna conversation: open it in the app and delete it.
- Delete your account: in the app, Settings → Privacy & data → Delete account removes your account, profile, cycle data, logs, journal, supporter connections and invitations.
- Anything else, or if you have any trouble: email privacy@periodiva.com and we'll delete everything we hold about you, including your profile photo, Luna conversations and waitlist entry, within 30 days.
Waitlist emails are kept until launch, then used to tell you Periodiva is ready; ask us any time to remove yours.
Getting a copy of your data
In the app, Settings → Privacy & data → Export gives you a file with your profile, cycles, daily logs and journal. For a copy of anything else we hold, email us.
Your rights
Depending on where you live, you may have the right to access, correct, delete or get a copy of your data, to withdraw consent, and to object to or restrict how we use it. You can do most of this in the app; for anything else, email privacy@periodiva.com and we'll respond within 30 days. You can also complain to your local data protection authority.
Age
Periodiva is for people aged 16 and over. If you believe someone younger has given us their data, contact us and we'll delete it.
Changes to this policy
If we change this policy we'll update the date at the top, and tell you in the app before any significant change takes effect.