Privacy Policy

1. Who we are

Luteal is an iOS application for menstrual cycle tracking, mood logging, and partner sharing. The app is operated independently by its developer, reachable at hello@luteal.fr.

2. What data we collect

We collect only the data necessary to provide the service:

• Account information — your email address, used to create and authenticate your account.
• Cycle data — period start and end dates, flow level, symptoms (cramps, discharge, sleep, etc.), and mood check-ins you log in the app.
• Partner link — if you choose to invite a partner, we store a link between accounts. Your partner only sees the data you explicitly choose to share (current phase, mood, next period estimate). You can revoke this access at any time.
• Usage data — basic, anonymous analytics (e.g. crash reports) to improve the app. No personal identifiers are included.

We do not collect your location, contacts, photos, or any data unrelated to cycle tracking.

3. How we use your data

Your data is used exclusively to:

• Display your current cycle phase, predictions, and history in the app.
• Show your partner the information you have opted to share.
• Send you push notifications (reminders, period predictions) — only if you enable them.
• Improve the app through anonymized, aggregated analytics.

We will never use your health data for advertising, sell it to third parties, or share it with anyone other than as described in this policy.

4. Data storage and security

Your data is stored in Google Firebase Firestore, hosted on Google Cloud infrastructure (EU region). All data is encrypted in transit (TLS) and at rest (AES-256). Each user's data is protected by Firebase security rules that prevent any other user from reading your records.

Partner sharing is explicit and consent-based: no data is visible to a partner until you generate and share an invite link.

5. Data retention

Your data is retained for as long as your account is active. If you delete your account, all your personal data (cycle logs, mood entries, partner links) is permanently deleted within 30 days.

6. Your rights (GDPR)

If you are located in the European Union, you have the right to:

• Access — request a copy of the personal data we hold about you.
• Rectification — correct inaccurate data directly in the app or by contacting us.
• Erasure — delete your account and all associated data at any time from the app settings.
• Portability — request an export of your data in a machine-readable format.
• Objection — object to any processing you believe is not justified.

To exercise any of these rights, contact us at hello@luteal.fr.

7. Third-party services

We use the following third-party services:

• Google Firebase (authentication, database, crash reporting) — governed by Google's Privacy Policy.
• Apple App Store (subscription billing) — governed by Apple's Privacy Policy.

No health data is shared with these services beyond what is technically necessary to operate the app (e.g. Firebase stores your cycle records as described above).

8. Children's privacy

Luteal is not directed to children under the age of 13. We do not knowingly collect personal data from anyone under 13. If you believe a minor has provided us with data, please contact us immediately at hello@luteal.fr.

9. Changes to this policy

We may update this Privacy Policy from time to time. When we do, we will update the "Last updated" date at the top and, for material changes, notify you via the app or by email.

10. Contact

Questions about this policy? Reach us at hello@luteal.fr. We aim to respond within 5 business days.