mySorelle

Privacy policy

The short version

mySorelle keeps your data on your phone. There is no account, no mySorelle server, and no tracking of any kind. We cannot see what you log, and neither can anyone else through us. The only things that ever leave your phone are subscription billing (handled by Apple or Google) and, if you choose to switch it on, a backup to your own iCloud or Google Drive.

What the app stores, and where

When you use mySorelle you may record your name or nickname, period dates and flow, symptoms, feelings, private notes, and your settings. All of it is stored in a database on your device, protected by your phone's built-in encryption. You can also protect the app itself with Face ID, your fingerprint, or your passcode.

This information is yours. It is never sent to us, and we hold no copy of it. We could not show it, sell it, or hand it over even if asked, because it never reaches us.

Copies you control

• Your phone's own backup. Like most apps, mySorelle is included in your device backup (iCloud or Google), if you have that switched on. Those backups belong to your Apple or Google account and follow their terms.
• Private cloud backup (optional, off by default). If you switch it on, the app saves a copy of its database to your own iCloud or Google Drive storage, in a private container in your own Apple or Google account, under their terms: we and other apps cannot see it. On iPhone the copy is stored using Apple's CloudKit encryption. On Android it lives in a hidden, app-only area of your Google Drive: the app can see that one backup file and nothing else in your Drive. Switch the backup off, or delete everything in the app, and that copy is deleted too. When you first open the app on an iPhone, it checks your own iCloud once for an existing mySorelle backup, so a returning user can be offered her data back; on Android nothing is checked until you ask.
• Backup file (optional). You can export a backup file that is encrypted on your phone (AES-256) with a passphrase you choose, before it is written anywhere. Where you keep that file is up to you; without the passphrase it cannot be opened, by anyone. We never receive it.
• Exports (optional). You can export your data as a spreadsheet (CSV) or a PDF summary at any time. These files are unencrypted by design, so you can read them; share them only as you would any private document.

What does leave your phone

• Subscription billing. Payment is handled entirely by Apple's App Store or Google Play through your store account. We never see your card details. To manage your subscription and free trial, the app talks to our billing provider, RevenueCat, which processes a random app identifier and your purchase receipt — never your cycle data, never your name. RevenueCat acts as our processor for this single purpose, under a data-processing agreement. RevenueCat is based in the United States; that transfer is protected by the European Commission's standard contractual clauses, which form part of our agreement with them. It keeps the billing record only as long as needed to manage your subscription, and we can instruct it to delete the record if you ask.
• Your own cloud, if you opt in, as described above. That traffic goes from your phone to your Apple or Google account directly; we are not in the middle.

Nothing else. The app contains no analytics, no crash-reporting SDKs, no advertising, no trackers, and it makes no other network connections.

Notifications

Reminders are created and shown by your phone itself (local notifications). No notification server is involved. You choose the wording, including wording that does not mention periods at all, and you can switch reminders off any time in the app or in your phone's settings.

Your rights (GDPR)

Because your data lives only with you, you can exercise your rights directly in the app, at any time and without asking us:

• Access and portability: export everything as CSV, PDF, or an encrypted backup file (Controls → Export your data).
• Rectification: edit any day from the Calendar.
• Erasure: Settings → "Delete account and data" permanently removes everything from the device and deletes the private cloud backup. It cannot be undone. Copies you made yourself (device backups, exported files) are under your control and yours to delete.

We hold no copy of your health data, so there is nothing for us to look up, correct, or delete on your behalf. The one exception is the anonymous billing record at RevenueCat, which we can have deleted if you ask. If you contact care@mysorelle.app we will see your email address and whatever you write to us; we use it only to reply, we delete support correspondence within 12 months of the last reply (sooner if you ask), and you can ask us to delete it at any time. You also have the right to complain to your data-protection authority.

Where GDPR asks us to name a legal basis: the little processing that exists happens because it is necessary to provide what you asked for. Billing runs on our contract with you (Article 6(1)(b)); replying to your email rests on our legitimate interest in answering you (Article 6(1)(f)). Nothing in the app relies on your consent, because nothing about you is collected.

Health data, honestly

Cycle information is sensitive ("special category") data under GDPR. Our approach is not to safeguard it on a server, but never to collect it at all. The app also makes no diagnosis and gives no medical advice; predictions are estimates from your own logs.

Children

mySorelle is not directed at children under 16. It is a general wellbeing tool, and the store age ratings apply.

Changes

If we ever change how the app handles data, we will update this policy, change the effective date, and say plainly in the app what changed before it applies to you. A change that added any collection of your data would be a fundamental change to the product's promise, and we would tell you plainly in the app before it applied — never quietly.

Contact

care@mysorelle.app — we usually reply within 2 working days.