Privacy

Your notes stay yours

Period dates, symptoms and moods are some of the most personal data a phone can hold. Here is what happens to yours, in plain words. The full detail is in the privacy policy.

A hand holding up a phone against a pale blue sky
Private mode

What is Private mode?

Private mode is how you use Her Good Days without an account. Tap "Not now" at the consent step and nothing leaves the phone: your health logs stay in an encrypted database on it, locked with a random 256-bit key kept in the iPhone Keychain or the Android Keystore.

Every feature works. Download my data and Delete everything on this phone are under You, Privacy. If you make an account later, it adds sync and backups, and a short "What an account adds" sheet shows you what changes first.

The Account card under You: You are using Her Good Days as a guest. Your logs stay on this phone. With a Sign in or create an account button
In Private mode, your logs stay on this phone.
Private mode

Without an account, everything you log stays on your phone. An account adds sync so your history moves to a new phone.

No third-party ads or trackers

The app has no ad networks, and no advertising, attribution or analytics code from other companies.

Health logs on their own

Synced logs sit in a separate health database, apart from your email address and from the shop.

Counts, never values

Our usage statistics record that a sleep log was saved, without the hours.

Quiet notifications

Lock-screen text is the same for everyone and never names a symptom, a pregnancy or your weight.

Copy and delete

Ask for a copy of what we hold, or delete your account in the app. Health logs go at once.

What the app never asks for

Her Good Days does not ask for your location, contacts or microphone. It asks for the camera only when you scan a barcode or photograph a meal.

Who can read your logs

Staff do not read health logs as part of routine work. Opening them needs a separate permission and a written reason, and every attempt, allowed or refused, is recorded.

How the app is paid for

The app is free. It has an optional shop for supplements and wellness products, kept apart from your health logs, and nothing you track decides what it shows you. It is switched off for anyone under 18.

Guest, account, sync and backup

You can use every feature in Private mode. Before you pick "Not now", a short sheet says what an account adds, so the choice is yours to make with the facts in front of you.

Private modeWith an account
Where your logs liveOn this phone, in an encrypted databaseOn the phone, and synced to our server over HTTPS
New phoneYour logs stay on the old phoneSign in and your history comes back
BackupsNone on our sideEncrypted backups of the server copy
Sign inNothing to sign in toAn email code, Apple or Google

The database on the phone is encrypted with a random key kept in the iPhone Keychain or the Android Keystore. A Face ID or fingerprint lock keeps the app closed to anyone who picks up your phone, and a view under You, Privacy shows what is on the phone only and what is backed up.

The Privacy card under You: Health data consent, off, your data stays on this phone and nothing syncs, even with an account
Health data consent: off means nothing syncs.

Download or delete, in a few taps

Step 1

Open You, then Privacy

Tap your picture at the top right. Privacy is near the end, with the health data consent switch.

A hand holding up a phone against a pale blue sky
The top of the You screen: Profile, reminders, privacy and your data
Step 2

Download my data

One file with everything on the phone, plus the server copy if you are signed in.

A woman on her sofa looking at her phone with a mug in her hand
The Download my data button, one file with everything on this phone, and Delete everything on this phone below it
Step 3

Delete what you want gone

One tracker, everything on this phone, or, signed in, your account and its server copy.

A woman with a dark bob writing in a notebook at a table by the window, a mug of tea beside her
The Delete your account dialog: the account and the health data kept with it are erased now, what is on this phone stays until you delete the app, with Cancel and Delete
Teen mode

From 13 to 17 the app has no shop, no banners, no marketing consent and no shop offers. Teen mode

Our own statistics

Usage events go to our own server from a fixed list, such as "a sleep log was saved". The app has no third-party analytics or ad code.

The shop

A shop that cannot see your logs

The optional shop sells supplements and other physical wellness products, and checkout happens on the seller's page. It is how the app stays free.

The shop's code cannot read the health database, and a test stops a release if it tries. Orders use their own id, separate from your account, and shop offers can never be picked by your health or goal data. Shop notifications are off until you turn them on.

The end of the Today screen: a Wellness shop row for supplements, and the line Every feature in the app is free. The shop is optional.
The shop is one row at the end of Today.

Questions

What is Private mode?

Private mode is using Her Good Days without an account. Tap "Not now" at the consent step and your health logs stay in the encrypted database on your phone. Every feature works, and an account later adds sync and backups.

Do I need an account?

No. In Private mode everything stays on your phone. An account adds sync to a new phone and encrypted backups.

Do you sell my data?

No. We do not sell or rent personal data, or share it with anyone for advertising.

Can the shop see my symptoms?

No. Health logs are kept in their own database, and the shop's code cannot read it. An automated test stops a release if it tries.

How do I delete everything?

In the app, go to You, then Delete account. Your health logs are erased from our server the moment you confirm. You can also ask from the website.

Start with today

Her Good Days is free, with no third-party ads and nothing to subscribe to. Free on iPhone and Android.