Privacy Policy

Last updated: May 26, 2026

Period Buddy ("we", "us", "our") is a privacy-first cycle-tracking service delivered over WhatsApp. We collect the minimum amount of personal data needed to provide the service, and we never sell your data. This page describes what we collect, how we use it, and the rights you have over it.

1. Who we are

Period Buddy is operated as an independent product. For privacy requests, contact us at somveer.builds@gmail.com.

2. Information we collect

We collect only what we need to operate the service:

• Account data: Your WhatsApp phone number, the display name you provide to WhatsApp, and your time zone.
• Cycle data: The dates you log via the START and END commands, and any optional notes (e.g. flow, mood, symptoms) you choose to record.
• Conversation data: The messages you send to our WhatsApp number, used to interpret your commands and respond.
• Billing data: If you upgrade to Pro, our payment processor (Dodo Payments) handles your payment. We receive a subscription status and a billing identifier — we do not store your full card or bank details.
• Technical data: Basic logs (timestamps, message IDs, error traces) needed to operate and debug the service.

3. How we use your information

• To deliver core features: cycle tracking, predictions, reminders, and reports.
• To process and manage your Pro subscription, if applicable.
• To respond to your AI health questions. Messages sent to the AI feature may be processed by a third-party large-language-model provider under a data-processing agreement; we do not include your phone number with these requests.
• To send you service-related notifications (reminders, billing receipts, security alerts).
• To improve product quality, in aggregate and anonymized form only.

4. What we do NOT do

• We do not sell your data to anyone.
• We do not use your data for advertising.
• We do not run third-party advertising trackers on this site or in our messages.
• We do not share individual cycle data with employers, insurers, or government bodies except as legally required.

5. Legal basis for processing (GDPR)

Where the GDPR applies, we process your data on the following bases: contract (to provide the service you asked for), consent (where you opt in to optional features such as symptom tracking), legitimate interests (security, fraud prevention, service improvement), and legal obligation where applicable.

6. Data retention

We retain your cycle data for as long as your account is active. When you send the DELETE command, we permanently remove your cycle data and account from our active systems within 7 days. Backups containing the data may persist for up to 30 additional days before being overwritten.

7. Your rights

You have the right to:

• Access the data we hold about you.
• Correct inaccurate data.
• Delete your data (send DELETE or email us).
• Export your cycle data in a portable format.
• Object to or restrict certain processing.
• Lodge a complaint with your local data protection authority.

To exercise any of these rights, email somveer.builds@gmail.com. We respond within 30 days.

8. Sub-processors

We rely on a small number of trusted third parties to operate the service. Each is bound by contractual data-protection terms:

• Meta Platforms (WhatsApp Business API) — message delivery.
• Dodo Payments — subscription billing.
• Cloud hosting and database providers — service hosting.
• An AI/LLM provider — to power the AI Q&A feature.

9. International transfers

Your data may be processed in countries other than the one you live in, including the United States and the European Union. Where required, we rely on Standard Contractual Clauses or equivalent safeguards to protect international transfers.

10. Children

Period Buddy is not intended for users under 16. We do not knowingly collect data from anyone under 16. If you believe a minor has signed up, contact us and we will delete the account.

11. Security

We protect your data with industry-standard practices including encryption in transit (TLS) and at rest, restricted internal access, regular backups, and security monitoring. No system is perfectly secure; if we ever experience a breach affecting your data, we will notify you promptly.

12. Changes to this policy

We may update this policy from time to time. Material changes will be announced via the WhatsApp service and reflected by the "Last updated" date above.

13. Contact

Questions about privacy? Email somveer.builds@gmail.com or use our contact page.