Privacy Policy
What the app stores, and where
Everything you log — symptoms, pain scores, cycle and flow, medications, food triggers, sleep, stress, check-ins, notes, and the reports you generate — is stored only on your device, in an encrypted database (SQLCipher). The encryption key is kept in your device's secure hardware store (iOS Keychain / Android Keystore).
- The database is excluded from operating-system cloud backups (iCloud Backup / Google Auto Backup) and from device-to-device transfer.
- Nothing you log is transmitted off your device. The app makes no network requests in normal use.
What we collect
Nothing. We have no servers, no accounts, and no analytics or advertising SDKs. We cannot see your data, and neither can anyone else through us.
Sharing
The only way data leaves your device is when you choose to share it — for example sharing a report PDF, a CSV, or a data export through your phone's share sheet. Where it goes then (email, messaging app, printer) is your choice, governed by that service.
Your controls
- Export all data (Settings → Privacy & data) creates a complete JSON copy of everything, delivered through the share sheet.
- Delete all data permanently erases the database and its encryption key from your device. There is no server copy; deletion is immediate and final.
- App lock (optional) protects the app behind your device's biometrics or passcode.
Purchases (when available)
Subscriptions and one-time purchases are processed by Apple's App Store or Google Play. If purchases are enabled in your version, the app uses RevenueCat (a purchase-infrastructure provider) to validate receipts: RevenueCat receives purchase tokens and a randomly generated anonymous identifier — never your name, email, or any health data. We never link purchases to your identity, and your health data plays no part in any purchase flow.
Children
The app is not directed at children under 13 and does not knowingly collect information from them (it collects no personal information from anyone).
Health disclaimer
Linnea is a general-wellness app — not a medical device, and not medical advice. It helps you notice and share patterns; your clinician interprets them.
Changes
If a future version adds optional features that transmit data (for example end-to-end-encrypted sync), this policy and the store privacy labels will be updated before those features ship, and any such feature will be opt-in with its own clear consent screen.
Contact
Questions about privacy: hello@getlinnea.com