Consumer health data privacy policy

What health data we collect, and why

Only if you turn on cycle tracking, and only what you enter: period start and end dates, cycle and period length, flow level, the symptoms you select, and the predictions we calculate from them — the current phase, the next period, and the fertile window.

We use it for exactly two things: to run the cycle-tracking features you turned on, including phase-aware care suggestions, and — only if you choose — to show selected categories to your partner. It is never used for advertising, marketing, profiling, research, or anything else, and it never reaches our analytics or crash reporting: our usage events describe actions, never health content.

Where it comes from

You. You type it into the app. If you switch on partner logging in cycle settings, your partner can mark a period as started or ended on your behalf — that is the only other source. We do not read Apple Health, Health Connect, wearables, or any third party, and we do not infer health data from anything else you do in the app.

Who can see it

Your partner — only the categories you switch on in cycle settings. Each category is off by default and can be switched off at any time, and sharing stops the moment either of you leaves the shared space.

Railway, which hosts our database in the United States and processes data only on our instructions, to store it for you.

Nobody else. We do not sell health data, share it with advertisers or data brokers, or pass it to affiliates — we have none. Our analytics provider (PostHog) and our crash-reporting provider (Sentry) never receive it.

Consent, and taking it back

Cycle tracking is off until you accept the in-app consent card; nothing is collected before that. Sharing with your partner starts only when you switch a category on. You can withdraw either at any time: switch categories off in cycle settings, stop logging, or delete the data as described below.

Your rights

• See it. Your cycle history is in the app, and alignlife.app/export gives you a full copy by email code, with no account request and no waiting.
• Delete it. Delete any cycle entry, together with its symptoms, from the Care tab. Deleting your account erases all of it along with everything else at the end of the 30-day grace period — delete the entries first if you want the health data gone today. Or email us and we will delete it within 30 days, including from our hosting provider. Backup copies expire within three months at most.
• Withdraw consent. As described above.
• Know who has it. The list is on this page: your partner, if you chose, and Railway.

We answer requests within 45 days; for a complex request we may take up to 45 more, and we will tell you if so. We never treat you differently for exercising a right.

Appeals. If we refuse a request, reply to our answer within 30 days and say you are appealing. We will review it again and answer in writing within 45 days, with reasons. If you are still unhappy, you can contact your state attorney general — in Washington, atg.wa.gov.

Location and geofencing

The app never collects your location, and we do not use geofencing of any kind.

How it is protected

Encrypted in transit (TLS) and at rest at the disk level, and the symptoms you log are individually encrypted (AES-256-GCM) before they are stored. Notifications about cycle tracking use generic wording, so your lock screen never shows health information.

Changes to this notice

When we change it, we will update the effective date at the top. If a change would use your health data in a new way, we will ask for your consent first — we will not assume it.

Contact

Questions, requests, or appeals: hello@alignlife.app

Raja Rajeshwari N (Qubb Labs)
India