Privacy Policy — umay

Short version

• Your cycle, symptom, mood, and energy data lives on your phone. We don't have a server, and we don't see it.
• The app does not require an account, and we do not collect your name, email, phone, or any contact info.
• We do not show ads, and we do not use third-party tracking.
• The only thing that can leave your device is anonymous analytics (via PostHog, EU host), and only if you turn it on in Settings.
• Deleting the app deletes your data. That's it. There's no “account” to delete separately.

1. Who we are

The app is made by Arda Kaan Özcan, an individual developer based in Türkiye.

Contact: hey@ardakaanozcan.com

2. What we DON'T do

• We don't run a server that stores your health/cycle data.
• We don't have an account system, so we don't know who you are.
• We don't sell, rent, or share any data with third parties for advertising.
• We don't use your device's advertising ID (IDFA).
• We don't access your location, contacts, photos, microphone, or camera.

3. What's on your device

The following is created by you, stored locally on your iPhone/iPad inside the iOS app sandbox, and never sent to us:

• Cycle start/end dates
• Daily logs (flow, mood, energy, symptoms, notes)
• Profile preferences (display name, year of birth, contraception method, language, goals)
• Streak, level, badges, and quest progress

If you have iCloud Backup enabled for your device, Apple may include a copy of this data in your encrypted iCloud backup. Apple is a separate data processor — see Apple's Privacy Policy.

4. What we collect (only if you opt in)

The app does not collect anything by default. If you turn on Settings → Privacy & Data → Analytics, we enable PostHog (EU host, eu.i.posthog.com) to receive:

• Event name (e.g., insight_unlocked, language_selected, screen_viewed)
• A randomly generated, rotating anonymous identifier
• App version, iOS version, device model, country (derived from IP, then discarded)

PostHog does NOT receive:

• Your cycle, symptom, mood, energy, or any log data
• Your name, year of birth, or any profile field
• Your device advertising ID (IDFA)
• Your precise or coarse location

You can turn analytics off at any time. When you do, the SDK is fully reset and the anonymous identifier is rotated. See PostHog's privacy policy.

5. Apple Health (only if you connect it)

If you connect Apple Health through the iOS HealthKit permission dialog, we read or write only the data types you specifically authorize (e.g., menstrual flow, basal body temperature). The data goes through Apple HealthKit on your device — we don't see it on a server.

You can revoke HealthKit access at any time in iOS Settings → Health → Data Access & Devices → umay.

6. Your controls

• See your data: open the app — it's all there.
• Export your data: Settings → Privacy & Data → Export My Data (sends a copy to your email or files app).
• Delete your data: Settings → Privacy & Data → Delete All My Data, or simply delete the app.
• Opt out of analytics: Settings → Privacy & Data → Analytics toggle.
• Revoke Apple Health access: iOS Settings → Health → Data Access & Devices → umay.

We don't have a “delete my account” button, because there's no account.

7. Children

• umay is not intended for children under 13.
• Users aged 13–18 may use umay only with the consent and supervision of a parent or legal guardian.
• We do not knowingly collect personal data from children under 13. If you believe this has happened, email hey@ardakaanozcan.com.

8. International transfers

• Your health/cycle data never leaves your device.
• If analytics are enabled, data goes to PostHog's EU host in Frankfurt, Germany. We chose the EU host specifically to keep data inside the EU.
• We don't transfer any personal data outside the EU/EEA.

9. Security

• On-device data is protected by iOS app sandboxing and (when enabled) device-level encryption.
• We never transmit your health/cycle data to any server.
• Analytics are sent over HTTPS.
• We cannot recover your data if you lose your device without a backup — that responsibility is between you and Apple.

10. Changes to this policy

We may update this Privacy Policy from time to time. We'll notify you of material changes via the app or by other reasonable means. The “Last updated” date at the top will reflect the change.

11. Contact

Questions about this Privacy Policy or your data:

• Email: hey@ardakaanozcan.com
• Developer: Arda Kaan Özcan, Türkiye