Privacy Policy

What we collect

When you use HerPhase, we store:

• Your name and phone number -- to identify you on WhatsApp
• Cycle data -- period dates, cycle length, symptoms, mood, bleeding
• Conversation history -- your messages with the companion, so it can remember context
• Survey answers -- onboarding responses (goals, cycle info, preferences)
• Partner info -- their name and phone number, if you choose to connect a partner
• Personal facts -- things you mention in conversation (e.g., exercise habits, health conditions) that help personalize your experience
• Media you send -- voice messages and images are processed to extract text and cycle data

Why we process your data

• Your consent -- you choose to message us and share your information
• Providing the service -- we need your data to track your cycle, generate insights, send check-ins, and deliver partner updates
• Improving the product -- understanding usage patterns to make HerPhase better (never for advertising)
• Product updates and communications -- sending you service announcements, product updates, and occasional messages from the team (you can opt out anytime by replying "stop")

You can withdraw your consent at any time by sending "stop" on WhatsApp or emailing us.

AI processing

Your conversations are processed by third-party AI services to generate responses, extract cycle data, transcribe voice messages, analyze images, and create partner updates. We currently use:

• OpenAI (data policy)
• Anthropic (data policy)
• Perplexity (data policy)

According to their current policies, these providers do not use API data to train their models. We may add or change providers; this page will be updated accordingly.

The companion uses past conversations to provide personalized, contextual responses over time.

Who we share data with

We work with a small number of service providers:

• Twilio -- delivers WhatsApp messages
• OpenAI, Anthropic, Perplexity -- AI processing (see above)
• Supabase -- database hosting in the EU
• Railway -- application hosting

We do not sell your data, share it with advertisers, or use it for any purpose other than providing and improving HerPhase.

Partner data

If you connect a partner:

• They receive an opt-in message and must consent before receiving updates
• They receive curated cycle phase updates -- the information shared depends on the privacy level you choose
• They can opt out at any time by replying "stop"
• We store their name and phone number, and may store conversation messages to improve the service

Partners are data subjects with the same rights described above. Partners can contact privacy@joinherphase.com to access, correct, or delete their data.

Data storage and security

Your data is stored in a database hosted in the EU. Our application servers and some service providers process data in the United States.

All data is encrypted in transit (TLS/HTTPS) and database connections use SSL. No system is 100% secure, but we follow industry best practices.

Your rights

Under Swiss (nDSG) and EU (GDPR) data protection law, you have the right to access, export, correct, delete, object to, or restrict the processing of your data.

Contact privacy@joinherphase.com to exercise any of these rights.

You may also lodge a complaint with a supervisory authority. For Switzerland: FDPIC. For the EU: your local data protection authority.

Data retention

We keep your data for as long as you actively use HerPhase. If you request deletion, we remove your personal data from our systems within a reasonable timeframe.

Children

HerPhase is not intended for anyone under 16. If we learn we have collected data from someone under 16, we will delete it promptly.

Changes

If we make meaningful changes, we will notify you via WhatsApp. Minor updates will be reflected here with an updated date.

Contact

HerPhase is operated by Daniel Stadelmann, Zurich, Switzerland.
privacy@joinherphase.com