Privacy policy
What we do (and don’t do) with your data
Effective 13 September 2026. Controller: WellPeriod (Abraham Rubio), Mexico. Contact: privacy@wellperiod.com.
Honest summary: there is no account, your cycle logs are stored on your iPhone and in your private iCloud, we cannot read them, and no health data ever leaves your device to us or to any third party. No ads, no data selling.
1. What data exists and where it lives
WellPeriod has no user accounts. We do not ask for your real name, email, phone number or a password. There is no WellPeriod server storing your logs.
1.1 What you log in the app
Dates and flow level, mood, energy, symptoms, notes, basal body temperature, cervical mucus, sexual activity, pill intake, sleep hours, ovulation test results, and your answers to the initial questionnaire (goal, usual cycle and period length, birth control, conditions, birth year, due date if pregnant, optional name).
All of this is stored on your device (the app’s local database) and, if iCloud is enabled, in your private iCloud database (CloudKit, container iCloud.com.abraham.WellPeriod). Apple encrypts that database and only you, with your Apple ID, can access it. WellPeriod, as a company, cannot read your private iCloud database. iCloud sync is subject to Apple’s privacy policy.
1.2 Preferences
Settings such as reminders, reminder time, Face ID lock, discreet icon or language are stored only on your device.
1.3 Anonymous identifier
The app generates a random identifier (a UUID-style string) stored in your device keychain. It is not linked to your name, email or Apple ID. It is used only so analytics and purchases work without an account (see section 3).
2. Health data
Menstrual cycle data is health data and we treat it as sensitive information.
- It is never sent to WellPeriod or to any third party.
- It is never used for advertising or profiling, and never sold or shared.
- Apple Health. Only with your permission, the app can read and write menstrual flow and basal body temperature in Apple Health, and read wrist temperature from Apple Watch. That data moves between the app and Apple Health on your own device; it does not leave it except through your own iCloud or Health sync. You can revoke permission at any time in iPhone Settings → Health → Data Access & Devices.
- All computation (predictions, patterns, PDF report, 4-week plan) happens entirely on your device.
3. Third parties the app talks to
The app communicates with exactly these providers, and no one else. You can see this list and the events sent, verbatim, inside the app under Settings → “What leaves your phone”.
| Provider | Purpose | What it receives | What it never receives |
|---|---|---|---|
| Apple (App Store, iCloud, Apple Health) | Purchases, sync, health data | What you share with Apple under its policy | Nothing extra from us |
| RevenueCat | Validate whether you have WellPeriod Pro and manage subscriptions | Apple purchase receipt, the app’s anonymous identifier, storefront country, app and OS version | No health data, no cycle logs |
| Amplitude | Anonymous product analytics to understand which screens are used and improve the app | Events such as “Insights Viewed”, “Pro Feature Tapped”, “Trial Started”, with technical properties (version, language, device type) and the anonymous identifier | No symptoms, flow, mood, energy, goal, period dates, notes, temperature or any other health data. No location and no IDFV either: we switch both off in the SDK |
You can turn analytics off with a switch on that same screen. The app stops sending events to Amplitude immediately.
4. What we don’t do
- We show no ads and integrate no ad networks.
- We do not integrate the Meta (Facebook, Instagram) SDK, Google Analytics, TikTok or similar.
- We do not sell, rent or share personal data with data brokers or anyone else.
- We do not track your activity in other apps or websites.
- We do not ask for your location, and we switch off IP geolocation (country, region, city) and the IDFV — the identifier shared by all apps from the same developer — in analytics.
- We do not build health profiles for commercial purposes.
5. Your control: export, opt out, delete
- Export. Settings → Export CSV creates a file with your full history that you can save or share anywhere.
- Opt out of analytics. Settings → “What leaves your phone” → turn off.
- Delete everything. Settings → Delete all data removes your logs from the device and from your private iCloud. This is irreversible. Uninstalling the app deletes local data; iCloud data is deleted with this option or from iPhone Settings → your name → iCloud → Manage Storage.
- Apple Health. Data the app wrote to Apple Health is managed from the Health app.
6. Children
WellPeriod is not directed to children under 13 (16 in the European Union). We do not knowingly collect data from children. If you believe a child has used the app, write to us and we will help; in practice, since the data lives on the device, deleting it from the app is enough.
7. Users in the EU and UK
Legal bases. Cycle data is processed on your device under your control; to the extent WellPeriod processes it, it is with your explicit consent (Art. 9(2)(a) GDPR), which you can withdraw by deleting the data. Anonymous analytics rely on our legitimate interest in improving the app (Art. 6(1)(f)), with an immediate opt-out. Purchase management relies on performance of a contract (Art. 6(1)(b)).
Rights. You have the rights of access, rectification, erasure, portability, restriction and objection. Because the data is on your device, you exercise them directly: export CSV (access and portability), edit logs (rectification) and delete everything (erasure). For anything concerning RevenueCat or Amplitude, write to us with your anonymous identifier (shown in “What leaves your phone”) and we will handle it with the provider. You may also lodge a complaint with your data protection authority.
Transfers. RevenueCat and Amplitude operate in the United States under Standard Contractual Clauses and the EU–US Data Privacy Framework.
8. Users in Mexico
This document is our privacy notice under the Ley Federal de Protección de Datos Personales en Posesión de los Particulares. Health data is sensitive data and we do not collect it in our systems. You can exercise your ARCO rights (access, rectification, cancellation, objection) from the app itself or by writing to privacy@wellperiod.com.
9. Security
Local data is protected by your iPhone’s system encryption. You can enable Face ID or Touch ID lock inside the app. iCloud sync travels encrypted and is stored encrypted by Apple. Connections to RevenueCat and Amplitude use HTTPS.
10. Changes to this policy
If something relevant changes (for example, a new provider), we will update this page, the effective date and the “What leaves your phone” screen in the app. We will never add data selling or advertising based on health data.
11. Contact
WellPeriod · Abraham Rubio · Mexico
privacy@wellperiod.com