Health & Intimacy Data

In short

Your cycle and intimacy records are some of the most private things you can keep. Our promise:

• We use them only to run Cycle and Intimacy for you.
• We never sell them, use them for advertising, or share them with data brokers, insurers or employers.
• We never send them to AI features or use them to train AI models.
• Your partner sees them only if you turn on sharing.
• You can delete them, or withdraw your consent, at any time.

This notice explains the details. It supplements our Privacy Policy and is also our Consumer Health Data Privacy Policy under US state laws such as Washington’s My Health My Data Act.

What we collect

Cycle: period start and end dates; cycle, period and luteal phase length; whether you are on birth control; and the daily logs you add, which can include flow, symptoms, mood, sleep, energy and activity, digestion, stool, sex and intimacy, and notes. We also calculate estimates from them, such as your next period, ovulation and fertile window.

Intimacy: the date and time of each record, whether it was solo or with a partner, and any place, contraception, mood and note you add.

This data comes from what you log, the estimates we calculate and the records your partner chooses to share with you. We read it from Apple Health, Health Connect or other apps only if you connect them, and only the data you allow.

How we use it

We use this data only to:

• store your records and sync them across your devices;
• calculate your estimates and send the reminders you turn on;
• show your partner what you choose to share;
• give you a copy, or delete it, when you ask.

In the UK and EU, our legal basis is your explicit consent, which you give on the consent screen before you start each feature. Cycle and Intimacy are optional: the rest of Mallow.ai works without them. We will never use this data for a new purpose without asking you first.

What we never do

We never sell this data or share it for advertising. We never use it to show you ads, to build a profile of you for anyone else, or to make decisions about you. We never send it to AI features or use it to train AI models, and it is never included in analytics.

Who can see it

• You.
• Your partner, only what you share (see below).
• Supabase, our hosting provider, which stores it for us in the United States under contract and may not use it for anything else.
• Our team does not browse cycle or intimacy records. If you ask us for a copy of your data, an authorized team member prepares it and sends it to your account’s email address, and this is logged.
• Authorities, only when the law requires it (see below).

No one else.

Sharing with your partner

Connecting with a partner shares nothing by itself.

Cycle: your partner can see your cycle only after you turn on Visible to Partner in Cycle settings, and only records from the first day of the month you turned it on.

Intimacy: your partner can see a record only when Share with partner is on in Intimacy settings and that record is marked Visible to Partner.

Sharing stops when you turn it off or disconnect. Your partner may already have seen what you shared before then.

A record of a moment together can also say something about your partner, so please only log what you know they would be comfortable with.

Notifications and widgets

Cycle and intimacy notifications never show details on your lock screen. They only say that you have a reminder or that your partner added something, and they reach your device through Apple’s or Google’s push service without any of your records. Cycle and intimacy data appears in a widget only if you add one that shows it, and anyone who can see your screen can then see it. You can also turn on Require Face ID for Cycle and Intimacy.

Storage and security

Your records are encrypted in transit and at rest, and access rules allow only your account, and your partner for what you share, to read them. We keep them until you delete them, withdraw your consent or delete your account.

Requests from authorities

We never hand over cycle or intimacy data voluntarily. We disclose it only when we receive a request that is legally binding on us, such as a court order. We review every request, challenge requests that are unlawful or too broad, and disclose only what is strictly required. Unless the law forbids it, we tell you before we disclose anything.

Withdrawing consent and deleting data

You can withdraw your consent at any time. Deleting your account withdraws it and permanently deletes all your cycle and intimacy data along with the rest of your account. To keep your account but delete all your cycle data or all your intimacy records, email [email protected] from your account’s email address, and we will delete that data and your consent within one month.

You can also delete single records at any time. Account deletion usually completes within 24 hours, and copies in our encrypted backups are overwritten within 30 days. Withdrawing consent does not affect processing that took place before you withdrew.

Your rights

Wherever you live, you can ask us to confirm whether we hold your cycle or intimacy data, give you a copy, tell you which third parties have received it, correct it, delete it, or stop processing it. Use Ask about privacy in Help & feedback or email [email protected]. We reply within one month, and we won’t treat you differently for using these rights.

If we decline your request, you can appeal by replying to our decision, and we will answer within 45 days. If you are still unhappy, you can contact your data protection authority or, in the US, your state attorney general.

Contact

Questions about this notice: [email protected]. Our Privacy Policy explains how we handle your other data and your other rights.