Privacy Policy

HerRhythm: Period Tracker · Last updated 1 November 2026 (Android section added)

HerRhythm is built on one principle: your menstrual and reproductive health data belongs to you and stays on your device. This policy explains exactly what the app does and does not do with your information.

What stays on your device

• All profiles (nicknames, birth month and year, life stage) — no full name, email or phone number is ever required.
• All period records, symptoms, moods, notes, predictions and reading progress.
• Personal notes are additionally encrypted (AES-GCM) with a key stored in your device's Keychain.

HerRhythm has no user accounts and no health-data server. We cannot see your data because it is never sent to us.

Family (dependent) profiles

• An adult (18+) manages the HerRhythm space and may add profiles for family members aged 10 and older.
• Dependent profiles never have their own login, email, phone number or social features.
• We never collect a child's email, phone number, school, location, contacts, photos or advertising identifier.
• No advertisements are ever shown while a dependent profile is active.
• The managing adult can withdraw consent and delete a dependent profile — with all its data — at any time.

Apple Health (optional)

• Health integration is optional and available only for the adult's own profile.
• You control read and write permissions separately in the Health app.
• Only data you explicitly confirm is written; predictions are never written to Health.
• Health data is never used for advertising and never leaves your device via HerRhythm.

Advertising

• The free version shows a small number of non-personalized ads (Google AdMob) on limited adult-facing screens only.
• We never pass health information, profile details, ages, interests or identifiers to the ad system — it receives no personal data from the app.
• The app does not use App Tracking Transparency because it does not track you.
• Ads are removed entirely with HerRhythm Plus, and are never shown on calendars, logging screens, insights, safety information or for dependent profiles.
• Where required by law, a consent prompt (Google UMP) is shown and can be revisited in Settings.

Analytics

None. HerRhythm contains no third-party analytics or crash-tracking SDKs.

Articles

Educational articles may be refreshed from our content server. These requests carry no identifiers, no health data and no profile information — they are plain downloads, verified for integrity before use.

Subscriptions

HerRhythm Plus is processed entirely by Apple through your App Store account. We receive only an anonymous entitlement status, never your payment details.

Your controls

• Export your data (CSV or PDF) at any time — exports are created only when you ask.
• Delete any profile or all app data permanently from Settings.
• App Lock (Face ID / passcode) and discreet notifications are available for free.

What HerRhythm never does

• Never sells or shares your health data.
• Never uses cycle, fertility or symptom data for advertising or profiling.
• Never uploads health records to any cloud service.
• Never diagnoses medical conditions — the app provides informational estimates only, and fertility estimates must not be used as contraception.

Children

HerRhythm is operated by adults. It is not directed at children, offers no child accounts and is not listed in the App Store Kids Category. Profiles for minors (10+) exist solely so a parent or guardian can record health information they are entitled to manage, on their own device.

On Android

HerRhythm is also on Google Play, for Android 8.0 or later. Everything above about your health data applies to the Android app unchanged: profiles, period records, symptoms, moods, notes and predictions are kept in the app's own storage on your phone, there is no account, no sign-up and no cloud sync, and personal notes are encrypted on your device. Where Android differs, it is listed here.

• Health Connect. On Android the optional health integration uses Health Connect instead of Apple Health. You grant read and write access in Health Connect, HerRhythm writes back only the periods you confirm and never an estimate or a prediction, and health data is never used for advertising.
• Advertising. The free Android app shows the same small number of non-personalized Google AdMob ads on adult-facing screens, and none while a managed family profile is active. It does not use your device's advertising ID. Where the law requires consent, Google's consent message is shown before any ad loads.
• Data collected and shared, in Google Play terms. HerRhythm's Google Play data-safety section lists approximate location (derived from your IP address), device or other identifiers (not the advertising ID), app interactions and diagnostics as collected and shared, for advertising, analytics, and fraud prevention, security and compliance. They are collected by the Google Mobile Ads SDK and go to Google, not to us, encrypted in transit. We hold no copy of them, so there is nothing we can delete; Google's privacy policy and ad settings apply to them. None of your health data, profile details or notes is among them.
• Analytics. As on iPhone, there is no separate analytics or crash-reporting SDK. The diagnostics above are the ad SDK's own.
• HerRhythm Plus on Android. The optional monthly subscription is processed by Google Play through your Google account. We receive only whether it is active, never your payment details.
• Your controls on Android. App Lock uses your fingerprint, face or screen lock, and reminders are discreet. Export (CSV or PDF) and permanent deletion of everything are inside the app, and free.

Changes and contact

If this policy changes, the updated version will be posted at this address with a new date. Questions: savedelete.com/contact.