Privacy Policy

Mood Cycle Tracker ("the app") is a mobile application published by Flit Soft. The app lets you keep profiles of people you care about, log their cycle dates and moods, and see an estimate of which cycle phase each of them is in, with a playful mood wiki for each phase.

This policy explains exactly what the app collects, where it is stored, who it is sent to, and how to get rid of it. Questions go to flitsoft.dev@gmail.com.

Account details. When you sign in with email, Google or Apple, we receive your email address and display name from the sign-in provider and store them with the account identifier it issues. We never see or store your password.

Profiles. For each person you add: a name, an emoji and colour, an optional photo, an optional birthday and note, and the cycle and period lengths the app works out.

Logs. The cycle events you record (period start and end, ovulation, spotting, symptoms and flow), daily moods with optional notes and tags, and simple 1–5 measures such as energy, sleep and pain — each with its date and the profile it belongs to.

Photographs. The one image you choose for a profile. The system photo picker or camera hands the app only that image; we store it and smaller copies made from it for display.

Settings. Your theme, privacy mode choice and similar preferences, kept on your device.

Bug reports, if you send one. If you shake the phone and choose to send a report, we receive the description you type, a screenshot of the current screen, and technical details such as the app version and device model.

The profiles you add describe other people, and some of it — cycle dates and symptoms — is health-related. You are responsible for only adding someone who is comfortable with it. The information is visible only to you, is never shown to another member, and is deleted when you delete the profile or your account.

The app contains no analytics SDK, no advertising SDK and no third-party tracking, and it does not use your data to track you across other apps or websites. We do not collect your location, contacts or microphone. We do not read your photo library; only the photo you pick reaches us. Your data is never sent to an AI model.

Image files are stored in Google Firebase Storage in the United States.

Everything else — your account record, profiles, logs and API keys — is stored in a PostgreSQL database hosted by Supabase in the United States (US East, N. Virginia), and served by our backend on Google Cloud Run in the same region.

Authentication is handled by Google Firebase Authentication. Traffic between the app and our servers is encrypted in transit with HTTPS.

Google Firebase Authentication, Google Sign-In and Sign in with Apple — sign you in and issue the token that identifies you to our backend.

Google Firebase Storage — stores your image files.

Supabase — hosts the database holding your account, profiles and logs.

Google Cloud Run — runs our backend.

Firebase Cloud Messaging — delivers a silent, data-only signal when a new version of the app is required. It carries no personal data and shows no notification.

Each of these providers operates under its own privacy policy and processes data on our instructions in order to run the app. We do not sell your data or share it with anyone else.

If you create an API key inside the app for your own programmatic access, that key can read and change your own data and nobody else's. We store only a hash of the key and a short visible prefix; you see the full key once, when you create it. You can revoke a key at any time.

We keep your data for as long as your account exists. Delete a log, a profile or a photo and it is removed, together with the smaller copies of that photo. Delete your account and we remove your stored images and their copies, then the account record and everything attached to it — profiles, logs and API keys.

Account deletion is permanent and cannot be undone. See the delete-account page for the steps.

You can see everything the app holds from inside the app, edit or delete any profile, log or photo, and delete your whole account at any time from the account settings screen.

Depending on where you live you may also have the right to request a copy of your data, to have it corrected, or to object to its processing. Write to flitsoft.dev@gmail.com and we will respond within 30 days.

The app is intended for adults and is not directed at children. We do not knowingly collect data from anyone under 18. If you believe a child has created an account, contact us and we will delete it.

If we change how the app handles your data we will update this page and change the date at the top. Material changes will also be announced inside the app.

Email flitsoft.dev@gmail.com for anything at all: a privacy question, a data request, or a mistake you spotted on this page.