Privacy Policy
The short version. Hemogoblin has no accounts, no servers, no analytics, no ads and no trackers. The app makes no network connections. What you log stays on your iPhone (and your Apple Watch, if you use one). The developer never receives your cycle data, so there's nothing to sell, share, leak or hand over.
This policy covers the Hemogoblin app for iPhone, iPad and Apple Watch, and this website. "We" and "the developer" mean the independent developer who makes Hemogoblin, listed as the seller on the App Store.
What the app collects
Nothing. The developer doesn't collect, receive or store any personal data from the app. That's also what the App Store's privacy label says: Data Not Collected.
What the app stores on your device
To do its job, Hemogoblin keeps what you enter on your own device:
- Your logs: period days and flow, spotting, symptoms, mood, pain and notes.
- What you tell it during setup: your usual cycle and period length, and whether estimates are paused.
- Settings: reminder choices and times, the lock, and similar preferences.
- Body signals, if you turn them on (see Apple Health below).
Estimates, insights and patterns are calculated on your device from those logs.
Your logs, what you entered at setup and any readings copied from Apple Health live in the app's storage on your iPhone, protected by iOS data protection. They're kept out of iCloud and out of device backups (iCloud Backup and computer backups). Ordinary settings, like reminder times and whether the lock is on, live in the app's preferences, which iOS includes in device backups like any app's preferences. They don't contain anything you've logged.
Because your logs aren't backed up anywhere automatically, the app lets you make an encrypted backup yourself (see Backups and exports below).
Apple Watch, widgets and complications
Your iPhone sends the Watch app a summary of your cycle and your last week of logs, over Apple's direct connection between your iPhone and Watch. What you log on the Watch goes back to your iPhone the same way. The Watch keeps its copy out of backups too. Widgets and complications read a summary kept in the app's storage on the same device.
Apple Health
Connecting Apple Health is optional, and you choose exactly what to allow in the permission screen iOS shows.
- Read: menstrual flow and spotting, to bring in your history.
- Write: periods, spotting and the symptoms you log (abdominal cramps, headache, bloating, fatigue, acne, nausea, breast pain, lower back pain, hot flashes, sleep changes, mood changes and appetite changes), so they're in Health too.
- Body signals, if you turn them on: sleeping wrist temperature, basal body temperature, resting heart rate and ovulation test results. The app keeps a copy of these readings in its database on your iPhone to show patterns and estimate when a temperature shift happened.
Health data is used only to show you your own cycle. It's never used for advertising or marketing, never shared with anyone, and never sent off your device by the app.
You can change or withdraw Health permissions at any time in iPhone Settings, under Privacy & Security, then Health. Remove from Apple Health in Hemogoblin's Settings deletes what Hemogoblin wrote to Health.
Other things on your device
- Face ID or passcode lock. iOS handles the check. The app only learns whether it passed, and never sees your face data or passcode.
- Reminders. Notifications are scheduled on your device. The Discreet setting keeps cycle words out of the notification text, which matters on a lock screen.
- Siri and Shortcuts. When you log by voice, Apple processes the request under Apple's own privacy policy and hands the result to the app, which saves it on your device.
- Apple Intelligence. On devices that support it, the app can use Apple's on-device language model to suggest symptoms from a note you write. It runs on your device.
- Links. Some cards cite a source you can open. Those open in Safari, and the sites have their own privacy policies.
What's outside the app's control
Some things depend on Apple or on you, not on Hemogoblin:
- Apple Health. Data written to Health is stored and synced by Apple under your Health and iCloud settings, and other apps you allow can read it.
- Your screens. Notifications, widgets and watch complications can show cycle information on your Lock Screen, Home Screen or watch face. Discreet reminders, and choosing where you put widgets, keep that private.
- The lock is a screen lock. Face ID keeps prying eyes out of the app. The data itself is protected by iOS encryption tied to your device passcode, so a strong passcode matters most.
- Files you export, once they leave the app.
Backups and exports
Only you can start these. An encrypted backup is a file sealed with a passphrase you choose (AES-256-GCM, with the key derived from your passphrase). Nobody can open it without the passphrase, including the developer, and a lost passphrase can't be reset. A CSV export is a plain spreadsheet and isn't encrypted. Once you save or send either file somewhere (Files, iCloud Drive, AirDrop, Mail), it's covered by wherever you put it.
Files you import are read on your device.
What the developer can see
- Nothing from the app itself.
- From Apple, in aggregate. Apple gives developers download and sales totals. If you've chosen to share analytics with app developers in iPhone Settings, Apple may also share crash reports and usage statistics. Those come from Apple, under Apple's terms, and don't include your logs.
- Support email. If you write to us, we receive your email address and whatever you include. Please don't send health details you'd rather keep to yourself. Support emails are used only to answer you and are deleted when they're no longer needed.
Sharing, selling and requests for your data
We don't sell, rent, share or trade personal data, and we don't use it for advertising, profiling or tracking. There are no third-party SDKs, analytics tools or ad networks in the app.
Because the developer never receives your cycle data, there's none to provide in response to a subpoena, court order or any other request. What's on your devices, and in any backups or exports you make, is under your control. A strong device passcode, the app's lock and Discreet reminders all help keep it that way.
Keeping and deleting data
- Your logs stay on your device until you delete them.
- Delete all data in Settings erases your logs from the app. Deleting the app removes its data from your device.
- Anything Hemogoblin wrote to Apple Health stays there until you use Remove from Apple Health or delete it in the Health app.
- Backups and exports you made stay wherever you saved them until you delete them.
- Withdrawing a permission (Health, notifications, Face ID) works the same way as any app: in iPhone Settings.
Children
Hemogoblin doesn't collect personal information from anyone, of any age.
Your rights
Depending on where you live, you may have rights to access, correct or delete personal data a company holds about you. The only personal data we could hold is a support email you sent, and we'll gladly show it to you or delete it. Just ask at the address below.
This website
This site has no cookies, analytics or embedded third-party content. It's hosted on GitHub Pages, and GitHub logs visitors' IP addresses for security purposes, as described in GitHub's privacy statement.
Changes
If this policy changes, the new version will be posted here with a new effective date. If a future version of the app ever adds something that sends data off your device, such as optional iCloud sync, it will stay off until you turn it on, and this policy will be updated before it ships.
Contact
Questions about privacy: hemogoblinappsupport@gmail.com