Privacy policy
In short
Everything you log in PhaseStrong — cycle, workouts, food, measurements — stays on your phone. Your phone's own backup can also keep an encrypted copy in your own Apple or Google account (on by default, can be turned off) — never with us. No ads, no analytics, no tracking, and we never sell or share your data. The app only goes online when you use the store (store prices, buying, restoring purchases), and even then it never sends health data. There is no PhaseStrong account: subscriptions are handled entirely by the App Store or Google Play. You can export or delete everything at any time. Our Consumer Health Data Privacy Policy explains your health data and your rights in one place.
Who is responsible
PhaseStrong is offered by Andre Luiz Ferreira De Jesus Filho, a private individual (not a company) based in North Carolina, USA — Troutman, NC 28166, United States. Andre Luiz Ferreira De Jesus Filho decides how the app handles your data. For any privacy question or request, write to support@phasestrong.app. Your health data never reaches us, so we cannot see, share or sell it.
What the app stores
Cycle data (period dates, cycle length, hormonal contraception), daily check-ins and symptoms, life stage (pregnancy, postpartum, breastfeeding, menopause), body data (age, height, weight, measurements), workouts, food diary, goals and settings. Cycle, symptom, pregnancy and body data are health data — sensitive data under privacy laws such as those of Canada, Switzerland, Japan or Australia, and "consumer health data" under US state laws such as Washington's My Health My Data Act.
Why, and on what legal basis
Your health data is used only to adapt your training and nutrition to your cycle and life stage, on this phone. The app asks for your explicit, separate consent before collecting it — accepting the Terms of Use is not that consent — and records it on the phone with its date and version. You can withdraw it at any time under Your data & privacy; withdrawing erases your data. A subscription is a contract with us that Apple or Google sell and bill: the app tells you what the store buttons send before you use them. The app makes no decisions about you based solely on automated processing: its plan suggestions are only suggestions, and you can always change them.
Where it is stored and how it is protected
In a database inside the app's private storage on this phone. In the app installed from the App Store or Google Play, that database is encrypted (SQLCipher, AES-256) with a random key kept in the phone's secure keychain, usable only while the phone is unlocked; test versions of the app do not encrypt it. If encryption cannot be switched on for data you already have, the app keeps that data unencrypted rather than risk losing it and tells you so under Your data & privacy, where you can try again — that screen always shows whether encryption is active on your phone. A few things are kept outside that database: scheduled reminders (held by the phone's notification system) and the last file you exported or shared, such as the monthly recap picture (until your next export, the next app start or until you delete your data). On this phone only, the app also keeps a short list of recent changes to its privacy settings and of every time it went online (time, server and purpose), so you can check them. Optional extra: screen privacy in the app switcher. The app does not offer its own lock for now — to lock or hide it, use your phone's own settings (explained under Your data & privacy). With automatic phone backup on, an Android phone also keeps a copy of that key in the app's private storage so that the end-to-end encrypted Google backup can carry it (see Phone backups and changing phones).
What leaves the phone
Your health data: nothing, unless you decide — an export file you share yourself, workout events you choose to add to your calendar, or a shopping list you save to Reminders (these sync with your calendar or Reminders account, for example iCloud, and whoever that calendar or list is shared with can see them). Reminders are local notifications and, by default, never mention your cycle on the lock screen; the time a cycle reminder is set for could still hint at your cycle, so cycle reminders stay off until you turn them on. The app goes online only when you do something that needs it. When you tap Show store prices, Subscribe or Restore purchases, it asks Apple or Google directly for prices and your purchase status: your phone's store does this with your store account, your store country and your IP address, and the answer stays on this phone — there is no other company or server of ours in between. After you buy or restore a subscription in the app, the app checks its status with the store when it opens, and until you close the app the store's system may check it again on its own. When you enter your age during setup, the App Store or Google Play version may ask your phone's store for your age range (Apple Declared Age Range, Google Play Age Signals), as some US states require: your phone may ask you first, you can decline, and only the range is kept on this phone. Opening the subscription screen sends nothing. Links to our website open in your browser; the website receives what any visit sends (your IP address) and that it was opened from the app. The app never sends health data, and it contains no code for analytics, advertising or tracking. Apart from that, your phone's own backup can keep an encrypted copy of your data in your Apple or Google account (on by default, can be turned off — see Phone backups and changing phones).
Phone backups and changing phones
Your data is never sent to us, but your phone's own backup can keep it — in YOUR Apple or Google account, where we have no access and no copy. Automatic phone backup is on by default; you can turn it off under Your data & privacy. iPhone: the encrypted database is part of your iCloud or computer backup. With the setting on, the key that opens it is kept in iCloud Keychain in your Apple account — end-to-end encrypted, so not even Apple can read it — and comes back on a new iPhone restored from an iCloud backup (iCloud Keychain must be turned on); it also moves with Quick Start or an encrypted computer backup. Without iCloud Keychain, an iCloud backup restored onto a new iPhone brings the data but not the key, because Apple keeps the keychain part of an iCloud backup tied to the original iPhone. Android: the encrypted database and a copy of its key go into your Google backup only when it is end-to-end encrypted with your screen lock (no screen lock, no backup), or into a direct transfer to a new phone; for this, that copy of the key is kept in the app's private storage on this phone. With the setting off, the key never leaves this phone. Either way, you can create an encrypted backup with a password under Your data & privacy and restore it on another phone — it is merged with what is there, never overwritten.
Permissions
Camera: only to scan barcodes, processed on the phone, no photos kept. Calendar: only if you export your workout schedule. Reminders (iPhone): only if you save your shopping list — it goes into a new list of its own ("Shopping") that syncs with your Reminders account (for example iCloud) and can be seen by anyone that list is shared with. Notifications: only the reminders you switch on. Face ID, fingerprint or the phone's passcode: only to confirm it's you before your data is exported, restored or erased, or before a privacy protection is switched off — the phone does the check and the app never receives your biometric data. The app does not use your microphone or your location.
Your rights
Wherever you live, you can use these rights, free of charge. Access and portability: export everything on this phone as JSON or CSV at any time. Correction: edit any record in the app. Deletion: Settings → Delete all my data (this also removes the calendar events and Reminders the app created), or only some categories under Your data & privacy. Withdrawing consent: Your data & privacy. Because your data is on your phone, you can do all of this yourself, instantly. For anything else, write to support@phasestrong.app; we answer within 45 days (at most 45 more when necessary, and we tell you why). If we refuse a request, we explain why and you can appeal: reply with "Appeal" in the subject within 45 days, and we answer in writing within 60 days. If you are still not satisfied, you can contact your data protection authority or, in the USA, your state Attorney General.
How long it is kept
On this phone: until you delete it — item by item, by category, by the automatic clean-up if you switch it on, with Delete all my data or by withdrawing consent. Uninstalling the app erases its database, but the workout events and shopping-list reminders it added stay in your Calendar and Reminders apps (remove them before uninstalling with Remove from calendar and Delete all my data, or later in those apps). On iPhone, the database key and a few privacy settings stay in the phone's keychain after uninstalling (without the erased database they open nothing); reinstalling the app clears those settings the first time it opens. So before uninstalling, use Delete all my data. In your phone's own backup (iCloud, iCloud Keychain or Google, in your account): even after uninstalling, until your phone replaces that backup with a newer one or you delete it in your Apple or Google settings. With the store: Apple and Google keep your purchase records under their own policies; we keep no copy, and the app only reads your subscription status from the store on this phone.
Subscription and optional features
The app works without a subscription for its free features, and there is no PhaseStrong account. Subscriptions are sold only through the App Store or Google Play: Apple or Google charge you, and their terms govern billing, renewal, refunds and cancellation. You can cancel at any time in your phone's subscription settings (iPhone: Settings → your name → Subscriptions; Android: Play Store → profile → Payments & subscriptions → Subscriptions) — in the app, Settings → Account & subscription takes you there. Apple and Google process your payment and keep your subscription status under their own privacy policies; we receive no copy. Any feature that would send data to us or to another company (Apple Health / Health Connect, family sharing) will be off by default and ask for your separate consent first. Your phone's own backup is explained under Phone backups and changing phones.
Age and changes
PhaseStrong is for people aged 15 and over. From 15 to 17: no weight-loss goals, fasting or 40+ mode, and the app and any subscription only with a parent's or legal guardian's permission — the app asks for it, or takes it from the store when a parent manages the store account. We never sell data or show ads to anyone, minors included. If this policy changes in a way that affects how your data is used, the app shows the new version and asks for your consent again — once, without touching your data.