Privacy policy

On your device

Health records, preferences, and notes are stored locally on your device, in a SQLite database. Hormaly has no account system and no server for health records. Hormaly does not upload your health records.

What you can record includes:

• Cycle information, including bleeding or spotting
• Symptoms
• Mood
• Sleep
• Medications
• Lab results
• Weight
• Notes

Preferences, such as reminder settings and how the app looks, stay on the device as well. There is no advertising and no cross-app tracking. Hormaly does not include an advertising SDK, an attribution SDK, or a behavioral analytics or crash-reporting SDK.

Purchases

Optional subscriptions use Apple’s App Store and RevenueCat. RevenueCat processes purchase and subscription information so the app can tell whether Hormaly Plus is active. That includes an anonymous app-user identifier, transaction history, and technical information needed to provide and verify access. RevenueCat’s processing includes purchase-related analytics. It does not include your journal.

Apple and RevenueCat handle this information under their own privacy policies. Payment details are handled by the store, not by Hormaly. Hormaly does not provide RevenueCat with your health records, your name, your email, or a custom user identifier. The app does not ask you to sign in, and it does not attach customer attributes to the purchase.

A small record of whether Plus is active, and when that access expires, is stored on the device so a recent result can be remembered offline. It is not a copy of your health journal. Everyday tracking works offline. An internet connection is used when you purchase or restore a subscription, and when you open a link that leaves the app.

App lock and reminders

If you turn on app lock, Hormaly asks the operating system to authenticate you with enrolled biometrics or your device passcode. Hormaly does not receive biometric templates or your passcode. App lock hides your records. It is not a separate encryption system for the database.

On iOS, Hormaly in the background shows “Hormaly” and “Your private space.” A locked Hormaly asks you to unlock and does not show your records.

Notifications are optional and scheduled on the device. Reminder text is generic. It does not include symptoms, lab values, or medication names. You can turn reminders off in Hormaly or in your device settings.

Exports and backups

Appointment-summary PDFs and JSON exports are created on your device. PDF export is part of Hormaly Plus. JSON export is available without a subscription. A PDF or JSON file leaves the device only when you explicitly share it and choose a destination in the system share sheet.

Hormaly deletes its temporary export files after sharing finishes or fails, and again the next time the app launches. Copies you save or send remain with those destinations. Hormaly cannot delete them for you.

Your device’s own backup settings may include Hormaly’s iOS data. Android app backup is disabled.

Deletion

In Settings, under Privacy & data, you can delete all local data. Deletion clears journal records, preferences, scheduled reminders, lock settings, the on-device record of Plus access, and temporary exports. You return to onboarding.

Deletion does not cancel an App Store subscription. It does not remove copies you already shared, or copies included in a device backup. Manage or cancel a subscription through your Apple account.

Your choices

You can review, edit, export, and delete your records in the app. Everyday tracking, the calendar, basic charts, lab and medication records, the in-app appointment summary, and JSON export do not require a subscription. Hormaly Plus adds advanced patterns, lab trend charts across matching results, and PDF export of the 90-day appointment summary.

Children’s privacy

Hormaly is not directed to children under 13. Hormaly does not ask for a date of birth and does not verify age.

Operator and contact

Questions about App Store billing can also be directed to Apple.