🩷 Femora – Privacy Policy

1. Overview

2. Information We Collect

Femora only collects data essential for providing accurate predictions and personalized insights:

• Account Information — such as your email and name (used for login and personalization).
• Cycle & Health Logs — menstrual dates, moods, symptoms, and wellness entries, provided voluntarily by you.
• Device Information — limited metadata like browser type or language settings for app optimization.
• Payment Details — securely handled by Stripe, never stored by Femora.

We do not collect unnecessary personal data such as geolocation, contact lists, or unrelated behavioral data.

3. How We Use Your Information

Your data is used exclusively to:

• Generate personalized health insights and predictions.
• Improve algorithm accuracy over time (using anonymized data only).
• Support app functionality like reminders, logging history, and AI analysis.
• Provide customer support and service notifications.

Your personal data is never used for marketing or advertising purposes.

4. Data Security & Storage

Femora uses Supabase, a secure cloud infrastructure with:

• End-to-end encryption (TLS in transit, AES-256 at rest).
• Row-Level Security (RLS) ensuring only you can access your data.
• Strict server access policies to prevent unauthorized use.
• Role-based permissions separating public and private data access.

We actively monitor for vulnerabilities and perform regular audits to maintain the highest security standards.

5. Your Rights & Control

You maintain complete ownership of your data. At any time, you can:

• Export Your Data in full from your Profile settings.
• Delete Your Account permanently, which erases all stored information from our servers.
• Modify or Update your data preferences.
• Opt Out of analytics or AI insights if you prefer manual tracking only.

Your privacy preferences are honored across all devices automatically.

6. Data Retention

Your data is stored only as long as your account remains active. When you delete your account, all related information is irreversibly deleted within 30 days.

7. Third-Party Services

Femora integrates trusted services that meet strict compliance standards:

• Supabase (Data storage & authentication)
• Stripe (Secure payment processing)

Both partners are GDPR and SOC 2 Type II compliant. We do not allow any third-party analytics, advertising SDKs, or data trackers.

8. Children's Privacy

Femora is not intended for use by individuals under 18 years of age. We do not knowingly collect or store information from minors.

9. Updates to This Policy

We may update this Privacy Policy periodically to reflect improvements in our data handling practices. The most recent version will always be available on this page with a revised "Last Updated" date.

10. Contact Us

For questions, data requests, or account support, contact our privacy team at: