Privacy Policy

What we collect

When you use HerPhase, we store:

• Your name and phone number — to identify you on WhatsApp
• Cycle data — period dates, cycle length, symptoms, mood, bleeding
• Conversation history — your messages with the companion, so it can remember context
• Survey answers — onboarding responses (goals, cycle info, preferences)
• Partner info — their name and phone number, only if you choose to share it
• Personal facts — things you mention in conversation (e.g., exercise habits, health conditions) that help personalize your experience

We do not collect your location, contacts, photos, or any data outside of your WhatsApp conversation with us.

How we use it

• Provide the service — track your cycle, generate insights, send check-ins
• Partner updates — send your partner curated, phase-aware messages (if you opt in)
• Remember you — your companion recalls past conversations and preferences so it feels personal, not generic
• Improve the product — understand usage patterns to make HerPhase better (we never use your data for advertising)

AI processing

Your conversations are processed by AI language models to generate responses, extract cycle data, and create partner updates. We use services from OpenAI, Google Gemini, and Anthropic.

None of these providers use data sent via their APIs to train their models. You can read their respective data usage policies: OpenAI, Gemini, Anthropic.

We also use AI to generate text embeddings (for remembering past conversations) and to transcribe voice messages you send.

Who we share data with

We work with a small number of trusted providers:

• Twilio — delivers WhatsApp messages between you and HerPhase
• OpenAI, Google, Anthropic — process conversations to generate responses (see above)
• Supabase — hosts our database in the EU (see below)

We do not sell your data. Ever. We do not share it with advertisers, data brokers, or anyone else.

Your partner only receives curated cycle phase updates — never your raw health data, symptoms, or conversation content.

Data storage and security

Your data is stored on Supabase servers in the EU (Ireland, AWS eu-west-1).

All data is encrypted in transit (TLS/HTTPS). Database connections use SSL. We follow security best practices, but no system is 100% secure — we are transparent about that.

Partner data

If you choose to connect your partner, here is how it works:

• We send your partner an opt-in message. They must reply "yes" to receive updates
• Your partner receives only curated phase and cycle updates — never your symptoms, mood, or raw health data
• Your partner can opt out at any time by replying "stop"
• We store your partner's name and phone number. If they opt out, we stop all messages immediately

You are never shown or asked to approve partner messages — the companion decides what is appropriate to share.

Your rights

You have full control over your data:

• Access — ask us what data we have about you
• Export — get a copy of all your data
• Delete — request full deletion of your account and all associated data
• Correct — ask us to fix any inaccurate data

To exercise any of these rights, message us at privacy@joinherphase.com. We will respond within 30 days.

Data retention

We keep your data for as long as you actively use HerPhase. If you request deletion, we remove all your data from our systems within 30 days.

We may retain anonymized, aggregated data (with no way to identify you) for product improvement.

Children

HerPhase is not intended for anyone under 16. We do not knowingly collect data from minors.

Changes to this policy

If we make meaningful changes to this policy, we will notify you via WhatsApp before the changes take effect. Minor wording updates will be reflected here with an updated date.

Contact

HerPhase is operated by Daniel Stadelmann, based in Zurich, Switzerland.

For any privacy questions or requests:
privacy@joinherphase.com