Consumer Health Data Privacy Policy

This policy comes from Phasie, the maker of the Phasie app. It covers Washington's My Health My Data Act, Nevada's SB 370 (NRS 603A) and Connecticut's Public Act 23-56.

It takes effect on the date at the top of this page.

Phasie is a period tracker, so even a purchase could suggest you use one. We list those records here too.

Period and cycle logs

Period days, flow, mood, energy, symptoms and notes you enter. Used on your phone to show your calendar, estimates, Today card, widgets and reminders.

Apple Health data

Menstrual flow, if you connect Apple Health. Used on your phone to bring in your period days and save them back.

Estimates

Cycles, cycle day, phase and predictions, worked out on your phone from the data above. Used to power the same features.

Partner forecast

When partner links are available, and if you consent: last period start, average cycle length, period length, a 56-day phase calendar, your time zone, and any fields you turn on (energy, mood, and a first name if you type one). Used to show your partner page.

Community stats

When we offer them, and if you opt in: counts for things like cycle length, period length, energy by phase and symptoms by phase, sent with an anonymous device ID. Days imported from Apple Health are left out. Used to show totals to people using Phasie.

Account, purchase and app records

Your sign-in details, subscription status, a purchase ID, a device ID and phone details, crash reports, IP addresses and emails you send us. Once they're available, and if you use them, also your partner link consent record and daily page view counts, and your community stats device registration. Used to sign you in, show prices, give you Plus, see how many people try, buy and keep it, run and improve the app, fix bugs, limit abuse and reply to you.

Lines about the partner forecast and community stats describe how they'll work once they're available.

• Your logs are stored and processed on your phone, and your estimates are worked out there. Phasie doesn't send them to us or to iCloud, except for the partner forecast and community stats below.
• Apple Health data is stored and processed on your phone too, and it's never part of the partner forecast or community stats. It's never sent to our servers, never used for ads or marketing and never shared with third parties.
• The partner forecast goes to our servers. It's replaced on each upload and deleted when you revoke the link or delete your account.
• Community stats are stored as counts with no user ID. We keep them de-identified and won't try to re-identify them. Small groups stay hidden.

You

What you log, type or send us.

Apple Health

Period days, if you connect it.

Your phone

Estimates, made by the app. Once they're available, also your time zone for the partner link and an anonymous device ID for community stats.

Apple

Your sign-in ID and purchase details.

Service providers

Your subscription status, IP addresses and request logs.

Lines about the partner forecast and community stats describe how they'll work once they're available.

A person you choose

The partner forecast, after your separate and explicit consent. Whoever has your link can see your partner page: cycle day, phase, a cycle path, an estimated next period, a tip, your last update date and any extra fields you turned on. Days imported from Apple Health are left out.

Service providers

Companies that run our hosting, database and purchases for us. They handle the partner forecast, community stats, account records, device details, request logs and subscription status. They work under contracts that limit how they use your data, and they must protect it at least as well as this policy does.

Apple

Runs Sign in with Apple, the App Store, Apple Health and the device check for community stats. Phasie doesn't send your logs to Apple's servers.

A new owner

If Phasie is ever sold or merged with another company, the consumer health data we hold would pass to the new owner, and this policy would still apply to it.

Affiliates

None. We have no affiliates.

We don't share consumer health data with anyone else, unless the law requires it.

• We don't sell consumer health data.
• We don't use geofences. Phasie doesn't ask for location permission.
• No third party collects consumer health data over time and across different websites or online services when you use our website or app.

• Confirm whether we collect, share or sell your consumer health data.
• Access it, including a list of the third parties and affiliates we've shared it with and a way to contact them.
• Withdraw your consent, and have us stop collecting and sharing it.
• Delete it. We'll pass your request to the providers and third parties we've shared it with.
• Review it and ask for changes.

Most of your data never reaches us, so the app is the fastest way.

Access

Export your data in Settings > Export data.

Review and change

Edit any day in the calendar. Any partner forecast updates on its next upload.

Withdraw consent

When partner links are available, you'll revoke yours in Settings. When we offer community stats, you'll be able to turn them off in the app. Counts already added stay, because they can't be traced back to you.

Delete

Use Settings > Delete all data for your logs and app settings on your phone. Deleting data in Phasie may not remove what's in Apple Health, so manage that in the Health app. If you have an account, delete it in Settings > Account > Delete account. If you no longer have the app, install it, sign in with the same Apple Account and delete it there. You can also stop using Sign in with Apple for Phasie in your Apple Account settings, and we'll delete your account when Apple tells us. We can't find your account from your email address, but if you're stuck, email privacy@phasie.app and we'll help. Each one is a separate step.

For anything else, email privacy@phasie.app and tell us which right you want to use. You don't need to create an account. If you have one, we may ask you to sign in so we can confirm it's you.

• We reply within 45 days of getting your request. If we need more time, we may extend that once by 45 days, and we'll tell you why within the first 45.
• We delete data within 30 days of confirming your request, and always within the response time above. Data on backup systems can take longer, within the limits the law allows.
• Requests are free at least twice a year. If a request is clearly unfounded, excessive or repetitive, we may charge a reasonable fee or decline it.
• We won't discriminate against you for using these rights.

If we refuse a request, you can appeal. Reply to our decision, or email privacy@phasie.app with "Appeal" in the subject line, within a reasonable time after you get it.

We'll answer in writing within 45 days and explain what we did and why. If we deny your appeal, we'll tell you how to contact your attorney general.

If your appeal is denied, you can file a complaint here:

• Washington: Attorney General complaint form
• Nevada: Attorney General consumer complaints
• Connecticut: Attorney General complaint form, then choose "Consumer Data Privacy"

When we change this policy, we'll update the date at the top of this page. If a change is material, we'll also tell you in the app.

Before we collect, use or share new categories of consumer health data, use it for new purposes, or share it with new third parties or affiliates, we'll tell you and ask for your consent.

Phasie: privacy@phasie.app.