The short version
- You can use Her Good Days without an account. Everything you log then stays on your phone.
- With an account, your logs sync to our server so they are there on a new phone. They sit in a separate health database, kept apart from your email address and from anything to do with the shop.
- We do not sell your data. The app has no ads and no advertising or analytics code from other companies.
- Our usage statistics record which screens and features get used. They never hold what you logged: saving a sleep log is counted as "a sleep log was saved", without the hours.
- You can delete your account in the app (You › Delete account) or from this website. Your health logs are erased from our server the moment you do.
Who we are
The Her Good Days app for iPhone and Android and the website hergooddays.com are published by Asper Digital, LLC, 651 N Broad St Ste 201, Middletown, DE 19709-6402, United States.
We decide what happens to your personal data, which makes us its "controller" under European data protection law. Write to [email protected] with any question about this policy.
What we collect
What we hold depends on whether you made an account.
| What | When | Details |
|---|---|---|
| Your account | When you sign in | Your email address, and your name and time zone if you set them. With Sign in with Apple or Google, the email address they share and the ID of your account with them. If you chose Apple's Hide My Email, we only get the relay address Apple made for you. |
| Sign-in codes | When you sign in by email | We email you a one-time code that works for 15 minutes. We store a scrambled (hashed) copy of it, never the code itself. |
| Your health logs | Only with an account | What you log: symptoms, cycle and period days, sleep, weight, food and water, mood, activity, habits and notes, plus your reminder settings and the numbers in your weekly reports. As a guest these stay on your phone and never reach us. |
| Your choices | When you answer | Each consent you give or withdraw (to process your health data, to receive marketing email or shop notifications), with the date and the version of the wording. Also the preferences you set in the app. |
| Your phone | The first time the app opens | A random ID the app makes for itself, iOS or Android, the app and system versions, the phone model, the country your connection comes from, and when the app was first opened. If the app store tells us how the app was installed (for example from an ad link), we keep that too. |
| Notifications | If you allow them | The token Apple or Google gives your phone for notifications, your time zone, your quiet hours and which kinds of notification you turned on. |
| How the app is used | While you use the app | Events such as "opened the app", "viewed Insights", "saved a sleep log" or "opened an article", with the phone's random ID, your account ID if you are signed in, app version, phone model, language and country. |
| Messages to us | When you write to us | Your email address and what you send. |
| Website visits | On hergooddays.com | The platform this site runs on sets a session cookie and a visitor cookie and records the pages you view, with your IP address and browser. If you use the form on Delete your account, it stores the email address and note you type, with your IP address. |
Usage events carry no health details
The app may only send events from a fixed list, and our server drops anything that is not on it. An event can say which kind of log you saved (sleep, mood, weight and so on) and whether you were offline. It cannot carry the value, an answer to a question, or text you typed.
The shop
The shop in the app lists wellness products. When you open one to buy, the seller's checkout page loads in a browser window inside the app. Your name, address and payment details go to that store under its own privacy policy, and we do not receive your card details. On our side the app only records that you opened the shop or a product, by product ID. Your health logs play no part in what the shop shows you.
What the app does not ask for
Her Good Days does not ask for your location, contacts, photos, camera or microphone.
What we never do
- Sell or rent your personal data, or share it with anyone for advertising.
- Show ads in the app or build in advertising, attribution or analytics code from other companies.
- Use your health logs for marketing or to pick products for you.
- Put health details in a notification. Lock-screen text is the same for everyone, for example "Your weekly summary is ready."
- Let staff read your health logs as part of routine work. Opening them needs a separate permission and a written reason, and every attempt, allowed or refused, is recorded.
Why we use it
Each use has a legal basis. The ones in brackets are the articles of the EU and UK General Data Protection Regulation (GDPR).
| Purpose | Data | Legal basis |
|---|---|---|
| Run your account and sign you in | Account, sign-in codes, phone | Providing the service you asked for (6(1)(b)) |
| Store and sync your logs, build your weekly report | Health logs | Your explicit consent, which you can withdraw (9(2)(a)) |
| Send the notifications you turned on | Notification token and settings | Providing the service (6(1)(b)); shop notifications only with your consent (6(1)(a)) |
| Send marketing email | Email address | Your consent, only if you opt in (6(1)(a)) |
| See which features get used, find errors, stop abuse | Usage events, phone details | Our legitimate interest in keeping the app working and improving it (6(1)(f)) |
| Reply to you | Your messages | Providing the service (6(1)(b)) |
| Keep proof of consents and deletions | Consent and deletion records | Legal obligation (6(1)(c)) |
Companies that handle it for us
These companies work on our instructions and may use the data only to provide their service to us.
| Who | What for | What they receive |
|---|---|---|
| Our hosting provider (servers in the United States) | Runs the app's server and stores the data and its backups | Everything listed above for account holders |
| Cloudflare | Network and security in front of this website and the app's server | Your IP address and the requests your browser or phone sends |
| Our email delivery provider | Sends sign-in codes and replies | Your email address and the message |
| Apple | Sign in with Apple; notifications on iPhone (Apple Push Notification service) | The sign-in request; for notifications, your phone's token and the notification text |
| Sign in with Google; notifications on Android (Firebase Cloud Messaging) | The sign-in request; for notifications, your phone's token and the notification text | |
| ElasticFunnels | Hosts hergooddays.com and stores requests sent with its deletion form | Visit data and cookies on this site; the email address, note and IP address sent with the form |
Apple's App Store and Google Play, where you download the app, handle your download under their own privacy policies.
Where it is stored
Our servers are in the United States. If you use Her Good Days from another country, your data is sent to the United States and stored there.
How long we keep it
| Data | Kept |
|---|---|
| Account and health logs | Until you delete your account. Health logs are then erased from our live database at once, and your email and name are removed in the same step. |
| Usage events | Deleted automatically 25 months after they are recorded. Events tied to your account and its phones are erased when you delete the account. |
| Notification tokens | Until you turn notifications off, delete your account, or Apple or Google tell us the token no longer works. |
| Signed-in sessions | A sign-in that goes unused for a year stops working. Deleting your account ends every sign-in on every phone. |
| Backups | Encrypted copies of the databases, kept for up to 6 months and then overwritten. A deleted account leaves the backups as they roll over. |
| Consent and deletion records | Kept to show we respected your choices: a random ID and dates, without your email address. |
| Emails with us | Up to 2 years after our last message. |
Your rights
Wherever you live, you can ask us to:
- show you what we hold and send you a copy in a file;
- correct it (most of it you can edit in the app);
- delete it, as described on Delete your account;
- stop marketing, and withdraw any consent. Notifications can be switched off in the app or in your phone's settings. Withdrawing a consent does not undo what was done before it.
Write to [email protected] from the email address on your account. If you write from another address, we will first ask you to show the account is yours. We answer within 30 days and tell you if the law lets us take longer.
In the EU, the UK and Switzerland
You also have the right to restrict our use of your data, to object to uses based on our legitimate interest, and to receive the data you gave us in a machine-readable format. You can complain to the data protection authority where you live.
In US states with privacy laws
Laws in California, Washington, Nevada, Colorado, Connecticut, Virginia and other states give you the right to know what personal and health data we collect, to get a copy, to correct and delete it, and to opt out of its sale or use for targeted advertising. We do none of those last things, so there is nothing to opt out of. We use health data only to provide the app, and we will not treat you differently for using any of these rights.
You can use an authorized agent; we will ask them for proof that you gave permission. If we turn down a request, reply with "Appeal" in the subject and we will look at it again and answer within 45 days. If you are still unhappy, you can contact your state attorney general.
Children
Her Good Days is made for adults and is not meant for anyone under 16. We do not knowingly collect personal data from children under 13, or from anyone under 16 in the EU and UK. If you think a child has given us data, write to us and we will delete it.
Security
- Every connection between the app, this website and our server is encrypted (HTTPS).
- Health logs live in their own database that only the health part of our server opens. An automated test stops a release if the shop, statistics, notification or announcement code tries to reach it.
- Sign-in codes and the app's sign-in tokens are stored hashed.
- Staff accounts have limited roles, and health logs need the separate, logged permission described above.
- Backups are encrypted.
No system is perfectly secure. If a breach puts your data at risk, we will tell you and the authorities as the law requires.
Changes
When this policy changes we update the date at the top. If a change affects how we use data you already gave us, we will tell you in the app before it applies.
Contact
Asper Digital, LLC
651 N Broad St Ste 201
Middletown, DE 19709-6402
United States
[email protected]