Privacy Policy

We do not run servers that collect your data, and there is no account, sign-up, or login. What you enter in Petal is stored locally on your device and is never sent to us: your period start and end dates, flow, symptoms (including custom symptoms), moods, energy, sleep, discharge, sexual activity, basal body temperature, ovulation test results and notes; the tracking mode you choose (regular tracking, trying to conceive, or pregnancy) and, in pregnancy mode, the due date you enter; the predictions and statistics calculated from these entries; and your settings (reminders, app lock and display choices, theme and language). Petal does not use analytics or crash-reporting services. The only data that leaves your device is what the third-party services described below (advertising and consent, and in-app purchases) need to work, plus anything you choose to export or share yourself. The app does not ask for access to your contacts, location, camera or microphone.

Your predictions, averages, insights and charts are calculated on your device from the entries you make, and the Learn articles are stored in the app. Tracking, predictions, insights, backups and reports work offline; ads, ad consent checks and purchases need an internet connection. The PDF report and the encrypted backup are created on your device. Because we do not receive your health entries, we do not use them for any purpose of our own.

Petal handles sensitive health-related information, including menstrual cycle data, period flow, symptoms, mood, sexual activity, basal body temperature, ovulation tests, pregnancy due date and related notes. All of it is stored on your device only. We never access, collect or sell it, and none of it is included in ad requests or sent to the advertising or purchase services described below. You can delete all of it at any time (see Retention of Your Information). Petal is a self-tracking and educational tool; its predictions and fertile-window estimates are not a reliable form of contraception and are not medical advice.

We do not sell or share your health entries with anyone. They leave your device only if you choose to send them: by creating an encrypted backup file (Me, then Data & privacy) or a PDF health report (from Insights) and picking an app in your system share sheet or a place to save the file. The app uses these third-party services, each under its own privacy policy: Google AdMob, its mediation partners Unity Ads, ironSource and Liftoff, and Google's User Messaging Platform (ads and ad consent, see Advertising); and Google Play Billing on Android, or Apple's App Store (StoreKit) and RevenueCat on iOS, to process and verify the optional Petal Pro purchase (see In-App Purchases). The app may occasionally show your device's built-in store review card (Google Play / App Store), which those stores handle. Links inside the app, such as the privacy policy and support, open in your browser.

Petal is supported by ads served through Google AdMob. Banner ads can appear on some screens (for example Calendar, Insights and Me), an ad card can appear in the Learn section, and you can choose to watch a short video ad to switch ads off for 24 hours. The Today screen and the daily log screens do not show ads.

Petal asks for non-personalized ads only, on both Android and iOS. Non-personalized ads are not based on your past activity, and Petal adds nothing about your cycle, your health entries or your settings to an ad request: no keywords and no targeting data. Ads are served by Google AdMob and its mediation partners Unity Ads, ironSource (Unity LevelPlay) and Liftoff (Vungle). To serve, limit the frequency of, measure and protect ads against fraud, these companies still collect information from your device, such as device identifiers (including the advertising ID on Android, and on iOS only if you allow tracking), your IP address (from which an approximate location may be derived), your interactions with ads, and diagnostic information. Google's ad software is started when the app opens, so it may contact Google at launch, before you reach a screen that shows an ad. The app itself does not read or store these identifiers.

Where your region requires consent (the EEA, the UK and Switzerland, and US states with privacy laws), Google's consent form (User Messaging Platform) is shown before ads are requested. Each time the app starts, Google's consent software checks whether a form is needed for your region, which involves Google receiving your IP address and device information. You can review or change your choice later with the Privacy choices row in the Me tab, in the About section. That row is shown only where your region requires it, is added in version 1.3.0 of the app and is not present in earlier versions.

On iOS, after any consent form, the app asks for Apple's App Tracking Transparency permission. Ads stay non-personalized either way; if you allow tracking, the advertising identifier is used only to measure ads, and you can change this at any time in iOS Settings › Privacy & Security › Tracking. Google's use of this data is described at policies.google.com/technologies/partner-sites. You can reset or limit ad tracking from your device's system settings at any time, and you can remove ads with the optional Petal Pro purchase.

Each company handles this data under its own privacy policy: Google, Unity Ads and ironSource, and Liftoff.

Petal offers an optional one-time purchase, Petal Pro, which removes ads. It is not a subscription. On Android the purchase is made through Google Play Billing. On iOS it is made through the App Store (StoreKit) and verified through RevenueCat, which receives an anonymous app user ID and your purchase records, along with basic device and app information; RevenueCat's software starts when the app opens so that the price can be shown (see https://www.revenuecat.com/privacy). Payment details are handled entirely by Apple or Google; we never see them. The app keeps only a local note on your device that you own Petal Pro, and the Restore purchases button asks the store for your existing purchase if you reinstall or change device.

Reminders are optional. If you turn them on, they are local notifications scheduled on your device; nothing is sent to a server, and your device may ask you to allow notifications first. Unless discreet mode is on, a notification can say things like "Your period may start in a couple of days", and it can appear on your lock screen. With discreet mode on, the wording is generic.

On Android, you can add an optional home-screen widget. It shows your cycle day and phase, or the days until your period, and stores that text in the widget's own storage on your device, outside the encrypted database described below. Anyone who can see your home screen can see it. With discreet mode on, the widget shows only generic text. There is no widget on iOS.

The PDF health report is generated on your device from Insights. It contains your average cycle and period length, your predictions, your cycle history and the symptoms you log most often by phase, and it is not encrypted. Where it goes depends on the app you choose in the share sheet.

The backup file (Me, then Data & privacy) contains your cycles and daily logs and a few settings (tracking mode, average cycle and period length, top symptoms, language, theme and haptics). It is encrypted with a key derived from a passphrase you choose. Petal does not store the passphrase, so we cannot recover a backup if you lose it. Keep the file and the passphrase safe.

Your cycle history and daily logs are saved in a local database that is encrypted with AES. Its 256-bit key is generated on your device the first time the app runs and is kept in your operating system's secure storage. The encryption covers the contents of each record. The database still labels each record with its date, so someone with access to the app's private files could see which dates have a logged entry or a period start, but not what the entry says.

Not everything is encrypted by the app. Your settings and the app's ad-frequency records are stored separately and are not encrypted. The settings include the tracking mode, your average cycle and period length, your pregnancy due date if you entered one, the symptoms you log most, your reminder settings, your app lock, discreet mode, theme and language choices, and the local note that you own Petal Pro. These records hold no daily logs.

All app data is kept in the app's private storage, which other apps cannot normally access, and relies on your device's own protections such as its screen lock and device encryption. If you use your device's backup service (such as Android backup or iCloud backup), the app's data may be included in that backup under your own account; we do not receive or control those backups.

Petal also offers an optional app lock with a PIN or your device's biometrics (such as fingerprint or Face ID). The PIN is stored only as a salted hash in secure storage, and Petal does not receive or store your fingerprint or face data. The lock controls access to the app; it is not what encrypts your data. With the lock or discreet mode on, the app hides its content in your device's app switcher.

We do not retain any personal information on servers of our own. Your data stays on your device until you remove it. You can erase every cycle, log and setting stored by the app at any time with Delete all data (Me, then Data & privacy), and uninstalling the app removes its data from your device. Copies you made yourself, such as backup files and PDF reports you saved or sent, and backups made by your device's own backup service, are separate and stay where you put them. Data collected by Google AdMob and Google's consent software, and by RevenueCat on iOS, is retained according to their own privacy policies.

Our application is not directed at children and is not intended for use by anyone under the age of 13 ("Children"). We do not knowingly collect personally identifiable information from children under 13. If you become aware that a child has provided us with personal data, please contact us at hello@microappdigital.com so that we can take steps to remove such information.

We may update our Privacy Policy from time to time to reflect changes in our practices or for other operational, legal, or regulatory reasons. We will notify you of any changes by posting the new Privacy Policy on this page. You are advised to review this Privacy Policy periodically for any changes. Changes to this Privacy Policy are effective when they are posted on this page.

If you have any questions about this Privacy Policy, please contact us at hello@microappdigital.com.