Last updated 17 August 2026 · This is a plain-English policy. It is the one we hold ourselves to.
Your email address (to sign you in — there are no passwords), and what you choose to log: symptom severities, menstrual flow, medication confirmations, notes, and your cycle dates. If you use Circle, we store what you post. If you invite loved ones, we store the messages they write for you.
Symptom and cycle data is special-category health data under UK GDPR. We process it only with your explicit consent, given when you create your account, and only to show your own chart back to you and produce reports you ask for. You can withdraw consent at any time by deleting your account.
Our infrastructure providers process data on our behalf: Railway (hosting and database), Stripe (payments — they see your payment details, we don't), and Resend (delivering sign-in and invite emails). Each is bound by data-processing agreements.
From your Account screen you can download everything we hold about you as a file, or delete your account — deletion is immediate and removes your chart, medication log, letters, posts and subscription. You also have the right to complain to the ICO (ico.org.uk).
We keep your data only while your account exists. Data is encrypted in transit, stored in the UK/EU region, and sign-in links work once and expire in 15 minutes.
Questions or requests: privacy@ebbandflow.app.