Privacy Policy.

1. Scope and important context

This policy applies to information MANstrual handles for the Service. It does not govern a connected wearable provider, a retailer you visit through an external link, or another third party’s service. Those parties apply their own privacy terms.

MANstrual is a direct-to-consumer wellness service, not a health care provider, health plan, or medical device. The Health Insurance Portability and Accountability Act (“HIPAA”) generally does not govern information you give directly to a consumer app that is not acting for a HIPAA-covered entity. Other privacy and consumer-protection laws may still apply to MANstrual.

This policy is a notice of our practices. It is not a substitute for any separate consent that applicable law requires us to obtain.

2. Information we collect and why

The table describes information we have collected or processed for the Service during the preceding 12 months, where it comes from, why we use it, and the types of recipients involved.

We may also receive information you choose to send when asking for support or exercising a privacy right. Please do not send raw wearable exports, passwords, provider tokens, full payment-card numbers, or medical records in a support message.

3. Consumer health data

For purposes of Washington’s My Health My Data Act, Nevada’s consumer health data law, and similar laws, MANstrual may collect the consumer health and derived wellness categories listed above. The sources are Her, Junction, the connected wearable provider, and MANstrual’s calculations. We process this information to provide the forecast and sharing features Her requests, maintain the Service, protect it from misuse, and comply with law.

What a paired partner may see

While pairing is active, Him may see approximate cycle timing and phase probabilities, derived weather and advisories, confidence and freshness, the anchor history needed by the Intel experience, and normalized daily temperature, HRV, resting-heart-rate, readiness, and sleep summaries. He may also see Comfort Kit content marked visible and the status of shared Code Red requests.

Him does not receive wearable credentials, provider tokens, raw provider payloads, raw or minute-level samples, Her account activity, or private notes. A paired person can remember, copy, or capture information after viewing it; MANstrual cannot retrieve copies kept outside the Service.

How processing works

Her may enter a period anchor directly or choose to connect a supported wearable through Junction. MANstrual normalizes supported observations into daily signals and applies a deterministic cycle-and-weather model. Missing or conflicting data lowers confidence. The result is a wellness estimate, not a diagnosis, fertility prediction, contraceptive instruction, or medical decision.

Health-data recipients and affiliates

Our processors for consumer health data are Supabase for database and storage, Vercel for application delivery, and Junction for the wearable connection and retrieval. The paired partner is the third-party recipient of the limited categories described above. MANstrual has no affiliates with which it shares consumer health data. We do not permit a third party to collect consumer health data through MANstrual over time and across unrelated websites or online services.

No sale; advertising limited to public pages

MANstrual does not sell consumer health data or other personal information, and has not done so in the preceding 12 months, including information about anyone we know to be under 16. We do not use consumer health data to advertise products.

Two public marketing pages — the home page and the pricing page — load the Meta advertising pixel so we can measure which advertisements bring people to MANstrual. That pixel shares limited technical information, such as your IP address, browser details, and which of those two pages you viewed, with Meta for cross-context behavioral advertising. It is configured to collect nothing else: automatic collection of button, link, and form content is switched off, and we send no email address, telephone number, account identifier, or web address query.

No page you reach after signing in loads the pixel or any other advertising technology. Meta receives nothing about your cycle, your forecast, your wearable, your partner, or your subscription, and cannot learn that a given person uses MANstrual from anything we send after sign-in.

You can stop this sharing. We honor the Global Privacy Control signal, and when your browser sends it the pixel is never loaded at all.

4. How we disclose information

We disclose only what is reasonably needed for the following recipients and purposes:

• Your paired partner. We provide the shared and derived information described in the consumer health data section while the pairing remains active.
• Service providers and processors. Clerk supports identity and sessions; Supabase provides application database and storage; Vercel hosts and delivers the Service; Junction connects the supported wearable; Stripe processes earlier subscriptions and payments; Expo relays push notifications to the iOS app; Apple delivers push notifications, issues App Attest attestations for the iOS app, and processes MANstrual Plus purchases and sends their signed notifications; Resend may deliver an opted-in email; browser and device push services deliver opted-in push; PostHog Cloud US receives only limited public-page events and sanitized operational errors; and Meta receives public-marketing-page advertising events as described above.
• Concierge orders. When Him places a concierge order, Stripe processes the card hold and charge and collects the delivery address and phone number; Resend delivers the operator email that carries the order, the address, and the phone number; and the retailer or delivery service that fills the order receives the items, the address, the recipient’s name, and the phone number. MANstrual sends none of them cycle, forecast, or wearable data, though the items ordered may themselves be period products.
• Legal, safety, and security recipients. We may disclose information when reasonably necessary to comply with law, protect a person’s safety or rights, detect fraud or abuse, defend legal claims, or protect the Service. We will assess requests for sensitive information and disclose only what law requires.
• A business successor. Information may transfer as part of a merger, financing, acquisition, bankruptcy, or sale of assets. A successor remains subject to this policy and applicable consumer health data law unless it gives required notice and obtains required consent for a new practice.

PostHog is limited to the shared anonymous identifier “broflo-public-anonymous,” a public page path, one of three public events, environment, and release identifier; or a sanitized error category, normalized route, operation, timing, job state, and Diagnostic ID. It does not receive emails, account or couple identifiers, provider identifiers, complete URLs or queries, biometrics, forecasts, or relationship actions. MANstrual does not use authenticated session replay, autocapture, heatmaps, or form capture.

5. Your choices and privacy rights

Product controls

• Her can decline or disconnect a wearable. Disconnecting stops future wearable retrieval but does not by itself delete information already received.
• Her can correct period anchors and can revoke partner sharing. Revocation removes the other member’s access immediately, dissolves the pair, and schedules any earlier shared subscription to end. A MANstrual Plus subscription is billed by Apple and is managed or canceled in the payer’s Apple Account settings.
• Each user can change notification preferences. Browser or device settings can remove permission for push notifications.
• Each user can request account deletion in Settings, or in the iOS app when it cannot verify the device. Deletion also ends active sharing. You can also ask us by email, as described below.

Privacy requests

Depending on where you live, you may have the right to confirm whether we process your personal or consumer health data; access it; obtain a portable copy; correct it; delete it; withdraw consent and stop future collection or sharing; obtain a list of third parties and affiliates with whom consumer health data was shared; opt out of sale, targeted advertising, or qualifying profiling; and appeal a refusal. You will not receive discriminatory treatment for exercising a right.

Use the in-product controls above or email privacy@mylotech.org with the subject “Privacy Request.” To appeal a decision, use the subject “Privacy Appeal.” Tell us the right you want to exercise and the email associated with your account. An authorized agent may submit a request with proof of authority. We may ask you to sign in or take another proportionate step to verify the request and protect sensitive information.

We respond without undue delay and ordinarily within 45 days after verification, or sooner where law requires. If reasonably necessary, we may extend the response period as allowed by law and will explain why. Requests are free unless applicable law permits a reasonable fee for manifestly unfounded, excessive, or repetitive requests.

MANstrual does not sell personal information or perform profiling with legal or similarly significant effects. We do share limited technical information from two public marketing pages for cross-context behavioral advertising, as described above, and you may opt out of it. We treat the Global Privacy Control signal as a valid opt-out request: when your browser sends it, the advertising pixel is not loaded. Third parties are not permitted to track authenticated MANstrual activity across unrelated services, and no advertising technology runs on any signed-in page.

6. Retention and deletion

We retain personal information only while reasonably necessary for the purpose described, to protect the Service, or to meet a legal obligation. The type and sensitivity of the information, the active account or subscription, operational needs, and legal requirements determine the period.

• Active account data. Account, pairing, health, forecast, Comfort Kit, and notification information is generally kept while the account or feature is active and as needed to provide it.
• Account deletion. Pairing access is revoked immediately. Our policy is to remove or anonymize live profile, consumer health, forecast, Comfort Kit, push, and account content within 24 hours, disconnect Junction, ask applicable processors to delete covered data, and remove the Clerk login. A deletion-status record may remain as needed to document and complete the request.
• Backups. Encrypted disaster-recovery backups age out within 35 days. If a backup must be restored, deletion controls prevent deleted content from being returned to the live Service.
• Security and operations. Rate-limit records expire after 24 hours. Privacy-safe operational ledgers are scheduled to expire after 90 days unless needed for an active security investigation, fraud prevention, legal claim, or compliance record.
• Financial records. MANstrual may retain minimal transaction identifiers, amount, currency, status, and timestamps for up to seven years for tax, accounting, fraud-prevention, and legal purposes. Stripe retains payment information under its own policy and legal duties.
• Legal acceptance records. MANstrual may retain the accepted Terms and Privacy Policy version, acceptance method, account identifier, and timestamp for as long as reasonably necessary to document compliance, enforce an agreement, or address a legal claim, including after account deletion where permitted by law.

Deleting one account does not delete information independently held by the paired person, a retailer, a wearable provider, or another third party under its own relationship with you.

7. Security, children, and changes

Security and breach notice

We use administrative, technical, and organizational safeguards designed for the sensitivity of the information, including access controls, encrypted transport, signed provider events, row-level authorization, privacy-limited logging, and separation of production from development data. No system is completely secure. If a breach occurs, we will investigate and provide notices required by the Federal Trade Commission’s Health Breach Notification Rule and other applicable laws.

Children

The Service is for adults age 18 and older and is not directed to children. We do not knowingly collect personal information from anyone under 18. If you believe a minor has created an account, contact us so we can investigate and delete it.

Processing location

MANstrual and its providers may process information in the United States and other places where they operate. Privacy protections may differ by location. If law requires a specific transfer mechanism, we will use one before making the transfer.

Changes to this policy

We will update the date above when this policy changes. For a material change, we will provide additional notice through the Service, by email, or by another legally required method before the change takes effect. We will not collect, use, or share an additional category of consumer health data, add a materially different health-data purpose, or add a new category of health-data recipient without first updating this policy and obtaining consent when law requires it.

8. Contact us

MyloTech, Inc., a Delaware corporation doing business as MANstrual, is the provider of the Service and the entity responsible for the practices described in this policy. Questions, privacy requests, and appeals may be sent to:

For contract terms, see the Terms of Service.