Her Calendar Privacy Policy

Last updated:

Her Calendar is a period and cycle tracker for iPhone and iPad, developed by Hermanworks. This policy explains how the app and its website handle information, including your health records, optional backups, purchases, advertising, and support requests. Some features, including ads, may depend on your app version, region, and paid access.

Privacy at a glance

  • No Her Calendar account is required. You do not need to sign up or provide a name or email address to track your cycle.
  • Your health records are stored on your device. Hermanworks does not receive your periods, symptoms, moods, temperatures, sexual activity, or notes through the app.
  • Analysis runs on your device. Cycle predictions, Log Insights, Patterns, and PDF reports are calculated locally, without uploading your health records to an analysis server.
  • Apple Health and iCloud backups are optional. You choose whether to use them. New backups are encrypted by default in version 1.2.3 and later.
  • Your health logs are not used for ad targeting. Eligible free users may see Google AdMob ads. Advertising services can process device, ad-interaction, and technical information, but Her Calendar does not supply your recorded health data to them. Pro users do not see these ads.
  • Purchases and ad reporting use third-party services. Apple and RevenueCat process purchase information. RevenueCat also receives ad events and revenue information under your random app identifier, separately from your health records.

1. Your records and local analysis

Depending on the features you use, Her Calendar stores period dates and flow, symptoms, moods, fertility signs, basal body temperature, sexual activity, contraception records, test results, personal notes, reminders, and app settings. Records you choose to import from Apple Health or a backup are also stored locally.

These records are kept in the app’s storage on your device. Her Calendar does not upload them to Hermanworks or RevenueCat. We cannot view your records simply because you use the app.

Predictions, cycle comparisons, log summaries, and recorded patterns are calculated on your device. They are estimates and summaries of your recorded information, not a diagnosis or a guarantee of future cycles.

You can choose to move information outside the app through Apple Health, iCloud backup, file export, or sharing. Those choices are explained below. Your device’s own backup settings may also affect where copies of app data are stored.

2. Accounts and app identifiers

There is no Her Calendar registration or sign-in account. An Apple Account may be needed for Apple services such as App Store purchases, iCloud Drive, and iCloud Passwords & Keychain.

The app creates a random identifier to help RevenueCat manage purchases, paid access, and ad reporting. It is not generated from your name, email address, or health records. It is stored in Apple Keychain and may synchronize to your other approved devices through iCloud Keychain.

This identifier lets RevenueCat recognize the same app customer over time and associate purchase and ad-event information without using your name or email address. If the app cannot safely resolve a stored identifier, RevenueCat can use its own anonymous identifier for that app session.

3. Apple Health

Her Calendar can read and write supported Apple Health data only with your permission. Supported information includes menstrual flow and period records, spotting, selected symptoms, cervical mucus quality, basal body temperature, sexual activity, and supported test results. Not every log in Her Calendar has an Apple Health equivalent.

Importing copies permitted Health records into the app. When you enable synchronization, supported app records can be written to Apple Health. Her Calendar does not send the contents of these Health records to Hermanworks or RevenueCat.

You can review or revoke permissions in Apple Health or your device settings. Revoking access does not automatically erase records already imported into Her Calendar or records already saved in Apple Health. Manage or delete those copies separately when needed.

Apple controls storage and synchronization of information held in Apple Health according to your device and account settings. See Apple’s privacy information.

4. iCloud backups and encryption

Backing up to iCloud Drive is optional. You can create a backup yourself or enable Auto Backup where available. Backups contain the app records and settings supported by the backup feature, including period history, health logs, notes, and reminders. Backup files are saved in the HerCalendar Backups folder in your iCloud Drive.

In version 1.2.3 and later, new backups are encrypted by default. These files use the .hercalendar extension. Earlier readable JSON backups remain readable; updating the app or changing the format setting does not convert existing files.

Encrypted backups use AES-256-GCM encryption. Their encryption keys are stored in Apple Keychain, not in the backup file or on a Hermanworks server. Enable iCloud Passwords & Keychain to make this backup protection available on your other approved devices using the same Apple Account. Synchronization and recovery depend on Apple’s services and settings.

Hermanworks does not receive your backup files or encryption keys through the app. We do not have a master key to decrypt your backups. Restoring an encrypted file requires its matching key to be available on the restoring device; permanently losing all copies of that key can make the file unrecoverable.

If you enable Save readable JSON backups, new backups are saved as readable .json files. Anyone with a readable file can read its contents and restore it. Existing files keep their original format when shared.

You can turn off Auto Backup in the app’s backup settings and delete individual backups from the app or iCloud Drive. Turning off backups does not remove files that already exist. The app may remove older backups according to its backup-count limit. Apple manages iCloud storage and synchronization; we cannot delete files from your iCloud account for you.

5. Reports and files you share

Health reports are generated locally from the history and sections you select. The app does not automatically send reports to Hermanworks, a doctor, or an AI service.

When you share a report or backup, you choose the destination through the system sharing interface. The selected person, app, or service receives the file and handles it under its own practices.

PDF reports and readable JSON backups can contain sensitive health information. They are not protected by Her Calendar’s encrypted-backup format. Share them only with people or services you trust. A recipient of an encrypted backup cannot restore it without the matching encryption key.

Copies you save or share outside Her Calendar can remain after you delete the original records or the app. You must manage those copies with the recipient or destination service.

6. Purchases, ad reporting, and RevenueCat

Apple processes App Store payments for subscriptions and lifetime purchases. Hermanworks does not receive your payment-card details from the app.

We use RevenueCat to validate purchases, manage paid access, display paywalls and offers, and support purchase restoration. RevenueCat processes purchase and subscription information on our behalf, such as products purchased, transaction history, and subscription status, together with the app identifier described above.

The RevenueCat SDK also sends technical information such as app and operating-system versions, device type, language or storefront information, and a device-vendor identifier. Network requests expose an IP address to the receiving service. RevenueCat can provide purchase and paywall statistics to help us understand subscriptions and offers. We also use RevenueCat to retrieve the app’s update policy.

When ads are requested or shown, RevenueCat also receives ad events such as loads, impressions, clicks, failures, and reported revenue, together with information such as the ad network, ad unit, and placement. This helps us understand advertising performance. Events are associated with the app identifier described above, not the contents of your health logs.

Your period dates, symptoms, notes, and other health-log contents are not supplied to RevenueCat by Her Calendar. A random app identifier can group purchase and ad records without being your name or email address, but this information is still processed by a third-party service.

Purchase-service information may be processed outside your country, including in the United States. Learn more about these services in RevenueCat’s privacy policy and Apple’s privacy information. Contact Hermanworks about requests concerning Her Calendar’s RevenueCat records.

7. Advertising, analytics, and diagnostics

Ads and the information they use

Eligible free users may see banner ads provided by Google AdMob. Ads can depend on the app version, App Store region, availability, and privacy requirements. Pro users do not see these ads. Messages about Her Calendar’s own paid features are separate from third-party advertising.

Google’s advertising and consent services may process your IP address, approximate location inferred from it, device or app-related identifiers, ad views and interactions, consent choices, crash information, and performance or diagnostic information. Google uses this information to deliver and measure ads, manage privacy choices, prevent fraud, and maintain its services. This processing can involve Google and its advertising partners and may take place outside your country, including in the United States.

Her Calendar does not supply your period dates, symptoms, moods, temperatures, sexual activity, notes, Apple Health records, or other recorded health data to Google for advertising. The app does not add health-based targeting keywords or send your Her Calendar app user ID to Google in ad requests. We disable Google’s optional publisher first-party ID feature. Ads and related technical processing do not mean that your health history is uploaded to an advertising network.

Your advertising privacy choices

Where required, Google’s User Messaging Platform asks for privacy choices before ads are requested. You can review available choices in Settings → Advertising → Ad privacy choices. Available choices vary by region. Declining personalized advertising does not automatically remove ads; whether an ad can be requested depends on the applicable choices and Google’s requirements. Non-personalized or limited ads can still involve technical information and ad measurement.

See Google’s privacy policy, how Google uses information from apps that use its services, and Google’s advertising SDK data disclosures. Ad-event reporting through RevenueCat is explained in section 6.

Analytics and diagnostics

The app does not include a separate general-purpose usage-analytics or crash-reporting SDK. Google’s advertising services and RevenueCat may process the technical and event information described above. Apple may provide app analytics or diagnostic reports according to its services and your sharing settings.

We do not sell your health records or share them for ad targeting. This does not prevent you from choosing to export a file, use Apple Health, or send information to us for support.

8. Information you send for support

If you contact us, we receive the information you choose to send, such as your email address, message, app user ID, screenshots, or diagnostic details. If you send a report or readable backup, we can see the information inside it. This is different from automatic access to records stored in the app.

We use this information to respond to your request and investigate the issue. Please avoid sending sensitive health information unless it is necessary for the help you want. We do not need your full health history for most support requests.

9. Keeping and deleting information

  • Local records: records remain in the app until you edit or delete them, replace them through restoration, or remove the app’s local data. Deleting the app is different from offloading it, which can keep its data.
  • iCloud backups: existing files remain until you delete them or the app removes older files under its backup-count limit. Deleting the app does not necessarily delete iCloud files.
  • Apple Health: manage records and permissions in Apple Health. Changes in Her Calendar do not necessarily remove every corresponding Health record, particularly records created by other apps.
  • Shared files: deleting a record does not erase backups, PDF reports, or copies already shared elsewhere.
  • Keychain information: app identifiers and backup-protection keys can remain in Keychain after app deletion and may be synchronized by Apple. App deletion is not a guarantee that Keychain information is removed or recoverable.
  • Support and purchase information: we keep information while needed to handle support, manage paid access, validate transactions, address security issues, or meet applicable legal obligations. RevenueCat processes purchase-related records for us under our service agreement. Apple manages records it holds under its own policies.
  • Advertising and consent information: Google manages information it processes under its own policies. You can review available ad privacy choices in the app. Contact us about ad-event records processed by RevenueCat on our behalf. Removing the app does not automatically erase information already received by these services.

To remove health history, delete the relevant records in the app and remove any separate backups, Apple Health records, or exported copies you no longer want. You can disable Auto Backup in Her Calendar and revoke Apple Health access in Apple’s settings. These actions do not automatically cancel an App Store subscription.

Contact us to request deletion of support information or app purchase-service records held on our behalf. We cannot remotely access or erase records held only on your device or in your personal Apple account.

10. Security and app unlocking

You can use the app’s available PIN, Face ID, or Touch ID options to limit access through its interface. Biometric authentication is handled by Apple; Her Calendar receives an authentication result, not your face or fingerprint data. App unlocking and backup encryption are separate features.

We use local processing and encrypted backups to reduce unnecessary exposure of health records. Your device security, Apple Account settings, and choices about readable exports also matter. No device, storage method, or online service can be guaranteed completely secure.

11. Website visitors

This website is hosted by GitHub Pages. GitHub states that it logs visitor IP addresses for security, including visits made without a GitHub account. See GitHub Pages’ data-collection information.

Other pages on this website may load fonts or libraries from Google, jsDelivr, or Start Bootstrap. Your browser contacts the relevant provider when loading those resources. This privacy page does not load external fonts, scripts, or analytics.

Website requests are separate from the health records held in Her Calendar. Simply visiting this website does not give us access to your app’s records.

12. Privacy requests

Depending on the laws that apply to you, you may have rights to access, correct, delete, or obtain a copy of personal information held about you, or to object to or restrict certain uses. Contact us to make a request about information held by Hermanworks. You may also have the right to contact your local data-protection authority.

We may ask for the minimum information needed to understand and verify a request. Do not send your health history just to identify yourself. We can coordinate requests about Her Calendar’s purchase-service records with RevenueCat. For records controlled by Apple or a service you chose for sharing, their own privacy-request procedures may also apply.

13. Children and young users

Her Calendar does not require a date of birth or an app registration account. We do not ask users to submit their health history to Hermanworks. If you are a parent or guardian and believe a child has sent personal information to us, please contact us so we can address it under applicable requirements.

14. Changes to this policy

We may update this policy when features, services, or data-handling practices change. The current version is published at this address, with its last-updated date shown above. Any additional notice or consent required by applicable law will be handled as required.

15. Contact us

For privacy questions, support, or requests about information you have sent to us:

Please include only information relevant to your request.