Privacy Policy

What stays on your phone

Everything you enter: period dates, flow, pain, mood, discharge and other symptoms, sex (unless you hide it), basal temperature and LH tests, sleep, water, exercise and notes; pregnancy dates, appointments, kicks and contractions; feeds and recovery; hot flushes; conditions, medications and your doctor’s contact; self-check answers; your name if you add one; your age range, mode, reminders and settings.

It is kept in the app’s private storage in an encrypted database (AES-256). The key is created on your phone the first time the app runs and is held in the iOS Keychain or the Android Keystore; it never leaves the device. Predictions, patterns, insights and the doctor report are all worked out on the phone from that data.

Device backups

By default your Mensia data is excluded from iCloud and Google backups. If you turn on Privacy & data → Include in device backup, the encrypted database is included in your phone’s own backup; the key that unlocks it stays on this device.

Exports and the doctor report

A PDF report, a CSV or JSON export, or an encrypted backup file is created on the phone only when you ask for one, and goes wherever you choose to send or save it. From then on it is outside the app. An encrypted backup is protected with a password you choose, which we cannot recover for you.

Anonymous diagnostics

Mensia uses two Google Firebase services to know that the app works and how many people use it. They never receive anything you have logged.

• Analytics records that the app was opened, which screen is showing, and a short list of actions — that onboarding was finished and in which mode, that the mode changed, how many entries were saved at once, that a report was shared or an export made and in which format, that a self-check was completed (not the answers), that a reminder was switched on or off, and that data was deleted. It never records dates, symptoms, flow, pain, pregnancy status, your age range, your name or your notes.
• Crashlytics sends a report when the app crashes: the error, where in the code it happened, and the state of the device at the time.

What those reports contain, and how to stop them

A Firebase installation identifier, your IP address, and basic information about the device and the app — the model, the operating system and app versions, the language, and the country worked out from the IP address. The identifier belongs to this installation of Mensia; it is not your Google account, and uninstalling the app ends it. The advertising ID is not collected: the app blocks it on both Android and iOS, and ad personalisation signals are off.

Switch off Privacy & data → Share anonymous diagnostics and no analytics or crash reports are sent. Google processes this data on our behalf under its terms at firebase.google.com/terms/data-processing-terms.

Remote settings

When it opens, the app fetches a small settings file from Firebase Remote Config — the helpline numbers, the minimum supported version, and switches for features. Fetching it sends the same device information as above, and nothing about you.

Advertising

Mensia is free and may show ads, served by Google AdMob, which is part of Google. Ads appear only on reading screens — the Learn feed, the end of an article and Insights — plus an optional “Support Mensia” video you choose to watch. There are never ads on Today, the calendar, logging, the pill tracker, pregnancy-loss or crisis screens, and never for anyone under 18. Whether ads appear at all is controlled by the app’s remote settings.

Every ad request is non-personalised and limited to general-audience content, and the app blocks the advertising identifier. To serve and measure an ad, AdMob receives your IP address and coarse information about the device and app — for example the model, the operating system version and the app version — along with whether an ad was shown or tapped. It never receives anything you have logged. Where the law requires it (for example in the EEA and the UK), Google’s consent form asks you first. Google acts as an independent controller of that information under its own privacy policy, at policies.google.com/privacy.

Permissions

• Face ID, Touch ID or fingerprint — only if you turn on the app lock. The check is done by your phone; the app never sees your face or fingerprint.
• Notifications — for the reminders you choose. They are scheduled on the phone, and with discreet reminders on they say only “Time to check in”.
• Vibration, and starting after a restart — so haptics work and reminders survive a reboot.

What we do not do

• We do not ask you to create an account, and we do not know who you are.
• We do not collect, receive or store your health information — it is never uploaded.
• We do not sell or share personal information, and we hold none to sell.
• We do not track you across other apps or websites.

Young people

Mensia is for people aged 13 and over. It has a First period mode for teenagers, and asks for an age range, never a birth date. Under 18 it hides sex logging and never shows ads. As for everyone else, nothing a young person logs leaves the phone.

Your choices

Turn diagnostics off, hide sex logging, lock the app, use the discreet icon and reminders, export your data, or pause tracking — all from Me → Privacy & data. Delete everything erases all of it from the phone at once, and uninstalling the app does the same.

Changes to this policy

If this policy changes in a way that affects you, the revised version will be published on this page with a new revision date before the change reaches the app.

Contact

Questions about privacy can be sent to mensia@makekk.com.