Privacy

Your notes stay yours

Period dates, symptoms and moods are some of the most personal data a phone can hold. Here is what happens to yours, in plain words. The full detail is in the privacy policy.

A hand holding up a phone against the sky, showing the Today screen of Her Good Days
Private mode

What is Private mode?

Private mode is how you use Her Good Days without an account. Tap "Not now" at the consent step and nothing leaves the phone: your health logs stay in an encrypted database on it, locked with a random 256-bit key kept in the iPhone Keychain or the Android Keystore.

Download my data and Delete everything on this phone are under You, Privacy. If you make an account later, it adds sync and backups, and a short "What an account adds" sheet shows you what changes first.

Privacy under You: health data consent off, Private mode on with no account and nothing leaving this phone, and Backup off, sign in to back up
Private mode on: nothing you log leaves this phone.
Private modeWithout an account, everything you log stays on your phone. An account adds sync so your history moves to a new phone.
The Account card under You: You are using Her Good Days as a guest. Your logs stay on this phone. With a Sign in or create an account button
Health logs on their ownSynced logs sit in a separate health database, apart from your email address and from the shop.
Privacy settings: health data consent switch, Download my data, Delete everything on this phone
Quiet notificationsLock-screen text is the same for everyone and never names a symptom, a pregnancy or your weight.
Notifications under You: the daily check-in reminder at 8:00 PM, news and updates, weekly summary ready, quiet hours from 9 PM to 8 AM
Copy and deleteDownload your data as one file, or delete your account in the app. Health logs go at once.
The Delete your account dialog: the account and its health data are erased now, what is on the phone stays until you delete the app

What the app never asks for

Her Good Days does not ask for your location, contacts or microphone. It uses your camera and photos only when you scan a barcode or add a meal or progress photo, and those photos stay on your phone.

Who can read your logs

Staff do not read health logs as part of routine work. Opening them needs a separate permission and a written reason, and every attempt, allowed or refused, is recorded.

Lock the app

Turn on Lock with Face ID or fingerprint, and the app opens only after Face ID, Touch ID, a fingerprint or your phone passcode. It locks again a minute after you leave it.

Lock with Face ID or fingerprint: the app opens only after Face ID, Touch ID, a fingerprint or your phone passcode, and locks again after a minute away

Guest, account, sync and backup

You can use every feature in Private mode.

Private modeWith an account
Where your logs liveOn this phone, in an encrypted databaseOn the phone, and synced to our server over HTTPS
New phoneYour logs stay on the old phoneSign in and your history comes back
BackupsNone on our sideEncrypted backups of the server copy
Sign inNothing to sign in toAn email code, Apple or Google

A Face ID or fingerprint lock keeps the app closed to anyone who picks up your phone.

Signed in, You, Privacy shows when you last backed up, with Back up now and Restore from my account. It also lists what is backed up to your account and what stays on this phone only, such as the Pregnancy mini app.

Backup, backed up at 9:38 AM, with Back up now and Restore from my account, then what is backed up to your account, your logs, habits and check-ins, and what stays on this phone only, Pregnancy
Signed in: the last backup, Back up now and Restore.

Download or delete, in a few taps

Step 1

Open You, then Privacy

Tap your picture at the top right. Privacy is near the end, with the health data consent switch.

A woman in her forties with auburn hair marking a paper calendar on her knee by a window
The top of the You screen: Profile, reminders, privacy and your data
Step 2

Download my data

One file with everything on the phone, plus the server copy if you are signed in.

A woman on her sofa looking at her phone with a mug in her hand
The Download my data button, one file with everything on this phone, and Delete everything on this phone below it
Step 3

Delete what you want gone

One tracker, everything on this phone, or, signed in, your account and its server copy.

A woman with a dark bob writing in a notebook at a table by the window, a mug of tea beside her
The Delete your account dialog: the account and the health data kept with it are erased now, what is on this phone stays until you delete the app, with Cancel and Delete

Teen mode. From 13 to 17 the app has no shop, no banners, no marketing consent and no shop offers. Teen mode

Our own statistics. Usage events go to our own server from a fixed list, such as "a sleep log was saved", never the hours. The app has no third-party analytics code.

The shop

A shop that cannot see your logs

Supplements and other wellness products.

The shop's code cannot read the health database. Shop offers can never be picked by your health or goal data. Shop notifications are off until you turn them on.

The end of the Today screen: a Wellness shop row for supplements, and the line Every feature in the app is free. The shop is optional.
The shop is one row at the end of Today.

Questions

What is Private mode?

Private mode is using Her Good Days without an account. Tap "Not now" at the consent step and your health logs stay in the encrypted database on your phone. An account later adds sync and backups.

Do I need an account?

No. In Private mode everything stays on your phone. An account adds sync to a new phone and encrypted backups.

Can the shop see my symptoms?

No. Health logs are kept in their own database, and the shop's code cannot read it.

How do I delete everything?

In the app, go to You, then Delete account. Your health logs are erased from our server the moment you confirm. You can also ask from the website.

Start with today

Free on iPhone and Android.