Your cycle data stays yours.

Overview

WholeFlo helps users track menstrual cycles, symptoms, wellness preferences, reminders, and educational content. This policy explains what information we collect, why we use it, and the choices users and parents or guardians have.

WholeFlo is designed for people age 13 and older. People under 13 may not use WholeFlo.

Information We Collect

Depending on how you use WholeFlo, the app may store:

• Cycle start dates, period logs, flow details, symptoms, and ovulation test results.
• App settings such as language, reminders, notification preferences, and app-lock preferences.
• Optional sync account information, such as an email address used for one-time passcode sign-in.
• Generated app, account, or record identifiers used to keep the app working and sync data correctly.
• Subscription product, purchase, and entitlement status needed to provide and restore WholeFlo+.
• Support messages you choose to send to us, including your email address and the content of the request.

How We Use Information

• To provide cycle tracking, predictions, reminders, logs, and wellness education.
• To save preferences, keep the app secure, and support optional sync across devices.
• To provide user support when you contact us.
• To protect the service, prevent abuse, troubleshoot issues, and comply with legal obligations.

WholeFlo does not sell personal information and does not use cycle or health data for advertising.

Storage, Sync, And Service Providers

WholeFlo can work locally on your device. If optional cloud sync is enabled, data may be processed by managed service providers such as Supabase and PowerSync. We use RevenueCat to process subscription status and entitlements, Apple or Google to process app-store purchases, and Expo services for app delivery and platform operations.

Production cloud data is protected in transit and encrypted at rest by managed service providers. Local device data is protected by operating-system storage protections, and WholeFlo includes optional app-lock controls.

We require service providers that process personal data for WholeFlo to protect it consistently with this policy and applicable law, and to use it only to provide their contracted services.

Retention And Deletion

Local cycle and wellness data remains on your device until you delete it or remove the app. Optional sync data remains in the cloud until you delete the signed-in account or ask us to delete it. We retain support messages only as long as needed to answer the request, maintain security records, or meet legal obligations. Apple, Google, and RevenueCat may retain transaction records according to their own legal and accounting requirements.

You can withdraw optional notification or sync consent in Settings, delete local data without signing in, and delete a signed-in sync account and its cloud data from within WholeFlo. You can also use our account deletion instructions.

Website Analytics

The WholeFlo website may use privacy-focused Vercel Analytics to understand aggregate website performance and page usage. This website analytics is separate from cycle tracking data in the WholeFlo app.

Children And Teens

WholeFlo is available only to people age 13 and older. It is built to be teen-safe, with no ads, no sexual content, and no sale of personal information. A parent or guardian can contact us if they believe a person under 13 has provided information so that we can delete it.

Your Choices

• You can use core tracking features without creating a required account.
• You can export or delete local app data from app settings.
• You can turn notifications and optional sync on or off.
• You can contact us to request help accessing or deleting synced account data.

Health Disclaimer

WholeFlo is for personal tracking and wellness education only. It is not medical advice and should not be used for diagnosis, treatment, contraception, or emergency decisions.

Contact

For privacy or support requests, email timmyadet@gmail.com.