--- title: "Our privacy policy in plain language, the 2-minute version" description: "Our full privacy policy is thorough, but long. Here's the same content in plain language: what we do and don't do with your data, in 2 minutes." url: https://myperiod.app/en/blog/privacybeleid-in-mensentaal lang: en date: 2026-08-12 publisher: PERIOD. B.V., Amsterdam --- [Back to blog](https://myperiod.app/blog) [Privacy & PERIOD.](https://myperiod.app/blog/categorie/privacy) · 2 min read # Our privacy policy in plain language, the 2-minute version [Lees dit artikel in het Nederlands](https://myperiod.app/blog/privacybeleid-in-mensentaal) PERIOD. team · August 12, 2026 Our full [privacy policy](https://myperiod.app/privacy) is thorough, and therefore long. Fair enough: it's a legal document. But most people just want to know: *what do you actually do with my data?* Here's the complete TL;DR. No marketing fluff, no fine print. Want the original? It's [here](https://myperiod.app/privacy). ## What we store - **Account:** email, an optional display name, and an authentication ID (only for Sign in with Google or Apple). - **Cycle & health** (special category data under GDPR art. 9): period dates, flow, symptoms (pain, mood, energy, libido, sleep), free-text notes, spotting, contraception method, reproductive goal, and optionally basal body temperature and sexual activity. Only what you log yourself. - **Medical conditions** you tick yourself: endometriosis, PCOS, PMS, PMDD. - **AI conversations:** the messages you type, plus the cycle context we send with each message. - **Operational logs:** event names ("opened Today screen") and a session ID, so we can fix bugs. We don't log symptom values, free text, or AI message contents. ## What we *don't* do - ❌ No advertising trackers. - ❌ No third-party analytics SDKs (no PostHog, Mixpanel, Amplitude, Google Analytics, Segment, Facebook SDK, Adjust, Singular). - ❌ No ads. Anywhere. - ❌ No selling, renting or sharing data for marketing. - ❌ No location, no persistent advertising device ID. - ❌ No payment card data (Apple and Google handle payments). ## Where your data lives - 📍 Postgres database on **Supabase**, hosted in **Frankfurt (EU)**. - 🔒 Encrypted **at rest (AES-256)** and **in transit (TLS 1.2+)**. - 🛡️ **Row-level security** at the database level: only you can read your own rows. - 📜 Hosting infrastructure is **SOC 2 Type II** and **ISO 27001:2022** certified. ## The AI assistant - ✅ Only works after **explicit in-app consent**; you can use the app fully without ever opening it. - ✅ Our AI provider (Google Gemini, via a secure gateway) commits to: **not using your data to train their models**, and not retaining prompts/responses longer than needed. - ✅ Chat history lives in **our own database**, not at the AI provider. - ✅ We deliberately **don't** send: your email address, your sexual-activity flag, or notes marked as a private journal. - ✅ Withdraw consent: Settings → Privacy → Revoke AI consent. ## Who helps us (sub-processors) - **Supabase**, database hosting (EU region). - **Google (Gemini)**, AI Cycle Assistant. - **Google (OAuth/Workspace)**, optional Google login and our team email. - **Apple**, App Store, Sign in with Apple, push notifications. - **Resend**, transactional email. - **AppsFlyer**, install attribution, iOS app only. Measures whether an install came from one of our campaigns; receives no advertising ID and no cycle or health data. - **RevenueCat**, subscription management for PERIOD. plus. Sees payment status, no health data. - **EU-hosted infrastructure platform**, application platform and AI gateway routing (Ireland). We have a data processing agreement with every vendor. For parties outside the EU we rely on the Standard Contractual Clauses (SCCs, Module 2, 2021/914) and where applicable the EU, US Data Privacy Framework. Current list: [/sub-processors](https://myperiod.app/sub-processors). ## Your rights - **Access:** everything we have is visible in the app. - **Edit:** change it yourself, anytime. - **Delete:** Settings → Delete account. One button. Live data removed within 30 days, backups within another 14, including AI conversations. - **Question or complaint:** email [privacy@myperiod.app](mailto:privacy@myperiod.app), or file a complaint with your national data protection authority. ## That's it. No hidden chapters. Everything above is also, in more detail and legally precise, in the [full privacy policy](https://myperiod.app/privacy). Questions? Email [privacy@myperiod.app](mailto:privacy@myperiod.app). We always reply ourselves, no support bot. Want to try PERIOD.? [Download on the App Store](https://apps.apple.com/us/app/period-cycle-period-tracker/id6757947793) or [via Google Play](https://play.google.com/store/apps/details?id=app.myperiod.android). Free. No ads. Your data stays yours. Want to understand your cycle better? ## Keep reading [Best period tracker app for privacy in 2026: 6 questions that decide itWhich cycle app is safest for your data? Six questions to test any app in two minutes, plus how Flo, Clue, Natural Cycles and PERIOD. compare.Read more](https://myperiod.app/blog/best-period-tracker-app-privacy-2026)[Is PERIOD. free? What the app really costs (and what it does not)Short answer: yes. Tracking your cycle, predictions and reminders cost nothing. Plus and baby are extras. Here is exactly what is what, no fine print.Read more](https://myperiod.app/en/blog/is-period-gratis-wat-kost-de-app)[Does my period app sell my data? How to check in 5 minutesShort answer: you cannot tell from the app itself, but you can from the privacy policy and the trackers. Five checks you can do yourself, on any cycle app, including ours.Read more](https://myperiod.app/en/blog/verkoopt-mijn-menstruatie-app-mijn-data-checklist)