Overview
Crimson ("we", "our", "the app") is an AI-powered period and fertility tracking application. We are committed to protecting your privacy, especially given the sensitive nature of menstrual and reproductive health data. This policy explains what data we collect, how we use it, and your rights.
Data We Collect
Health data you provide: Period start/end dates, cycle lengths, symptoms, moods, daily health logs, and fertility-related information. This data is entered by you and used solely to provide cycle tracking, predictions, and insights.
Account information (optional): If you choose to create an account for cloud sync, we collect your email address and an encrypted password. Account creation is not required to use the app.
AI chat interactions: If you use the AI assistant feature, your messages and the AI's responses are processed to provide personalized cycle insights. Chat history may be stored locally or in the cloud if sync is enabled.
How Your Data Is Stored
Local-first: By default, all your health data is stored exclusively on your device using local storage. No data is transmitted to any server unless you explicitly enable cloud sync.
Cloud sync (optional): If you create an account and enable sync, your data is stored in our Supabase-hosted database with row-level security ensuring only you can access your records. Data is transmitted over HTTPS (TLS 1.2+).
How We Use Your Data
We use your data exclusively to:
- Display your cycle history and calendar
- Calculate cycle predictions and fertile windows
- Generate personalized AI insights based on your cycle phase and symptoms
- Sync your data across your devices (if you opt in)
We do not:
- Sell your data to third parties
- Share your health data with advertisers
- Use your data for purposes unrelated to the app's functionality
- Build advertising profiles from your health information
Third-Party Services
OpenRouter (AI features): When you use the AI chat feature, your messages are sent to OpenRouter's API to generate responses. OpenRouter processes these messages according to their privacy policy. The AI is provided with context about your current cycle phase and recent symptoms to give relevant answers. No identifying information is included in AI requests.
Supabase (cloud sync): If you enable cloud sync, your data is stored in Supabase's infrastructure. Supabase implements industry-standard security measures and row-level security policies.
Data Retention
Local data remains on your device until you delete the app or clear app data. Cloud-synced data is retained as long as your account is active. You can delete your account and all associated cloud data at any time through the app's settings.
Your Rights
You have the right to:
- Access all data we store about you
- Delete your account and all associated data
- Use the app without an account and keep all data on-device
- Opt out of cloud sync at any time
Children's Privacy
Crimson is not directed at children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, please contact us and we will delete it.
Changes to This Policy
We may update this privacy policy from time to time. We will notify you of any material changes through the app or by updating the "Last updated" date above.
Contact Us
If you have questions about this privacy policy or your data, contact us at support@getcrimson.app.