Privacy Policy

Last updated: 6 September 2026

The short version: Alchemilla stores everything you log only on your own device. We have no account system and no servers that receive your health data. We don't collect it and we can't see it — so there's nothing to sell, share, or leak, because your health data never leaves your phone. The one thing that does leave, if you choose to buy the app, is the purchase receipt Apple issues — needed to unlock what you paid for and to give it back if you reinstall. It carries none of your health data and no name or email. See section 5.

1. Who this policy is for

This policy explains how the Alchemilla mobile app ("Alchemilla," "we," "us") handles your information. It applies to the Alchemilla app for iOS. By using Alchemilla, you agree to this policy.

2. What we collect

Of your health data: nothing. Alchemilla does not collect, transmit, or store your symptoms, cycle, temperature, notes, or any other health information on any server. Specifically:

We do not require an account, sign-up, login, name, or email address.
We do not use advertising, ad networks, or third-party trackers, and we do not track you across other apps or websites.
We do not have a backend that receives your symptom logs, notes, or any other data you enter.
We do not sell or share your data with anyone, for any purpose.

The one exception is buying the app. If you purchase a subscription or the lifetime unlock, that transaction is processed by Apple and validated through our payments provider, RevenueCat. This is the only part of Alchemilla that talks to a server, it happens only around a purchase, and it never carries any of your health data. Section 5 sets out exactly what that involves.

On the App Store, our privacy label therefore declares a single category — Purchases — used for app functionality and analytics, not linked to your identity and not used for tracking. Your health data is not declared, because it is not collected.

3. Where your data lives

Everything you log — symptoms, severities, daily notes, your tracking history, and any insights Alchemilla generates — is stored in a private database on your device only. It is computed and displayed locally. Alchemilla's pattern insights and your doctor-summary PDF are created entirely on your phone; no upload or network request is involved.

4. The doctor-summary export

When you choose to export a summary PDF, the file is generated on your device and handed to your phone's standard share sheet. You decide what happens next — whether to AirDrop it, email it, print it, or save it. Alchemilla never sees or stores the export, and sharing only happens when you initiate it.

5. Purchases

If you buy a subscription or the lifetime unlock, the payment itself is processed by Apple through the App Store, under Apple's terms and privacy policy. Alchemilla never receives or stores your payment details, card number, or billing address.

To know whether your purchase is active — so the paid features unlock on your phone, and come back if you reinstall the app — we use RevenueCat, a subscription management service, as our data processor. When you make or restore a purchase, the app sends Apple's transaction receipt to RevenueCat for validation, along with basic technical information about the device and app version needed to process it.

What this deliberately does not include:

Any of your health data. No symptoms, no cycle, no temperature, no notes. None of it is ever sent, to RevenueCat or anyone else.
Your name, email address, or any account identifier — because Alchemilla has no accounts. We do not set a user ID of our own, so a purchase record is tied to an anonymous identifier and to your Apple Account, not to a person we can look up.
Advertising identifiers or cross-app tracking of any kind.

We use the resulting purchase records only to keep your access working and to see aggregate figures such as how many subscriptions are active. RevenueCat processes this on our behalf under its own privacy policy. If you never buy anything, this section never applies to you: the free app makes no network requests at all.

6. Notifications

If you enable a daily check-in reminder, it is scheduled locally on your device. We do not run a push server and do not send you remote messages.

7. How to delete your data

Because your data lives only on your device, you are always in control of it. To erase everything, delete the Alchemilla app from your phone — this removes its local database and all logged data permanently. We cannot delete your data for you because we never had a copy of it.

8. Children

Alchemilla is intended for adults and is not directed to children. We do not knowingly collect information from anyone, including children.

9. Your rights

Privacy laws such as the EU/UK GDPR, the California Consumer Privacy Act (CCPA), and the Australian Privacy Act give you rights to access, correct, and delete your personal data. With Alchemilla, those rights are satisfied by design: your data is already entirely in your possession on your device, and you can view, change, or delete it at any time. We hold no copy to disclose, correct, or erase on your behalf.

10. Medical disclaimer

Alchemilla is a personal symptom-tracking tool to support your own awareness of your health. It is not a medical device, does not provide a diagnosis, and is not a substitute for professional medical advice, diagnosis, or treatment. Always consult a qualified healthcare provider about your symptoms and any decisions regarding your care.

11. Changes to this policy

If we change how Alchemilla handles information, we will update this page and revise the date above. If a future version of the app ever introduces optional features that involve transmitting data (for example, an opt-in backup or sync), we will describe them clearly here and they will be off by default and require your explicit consent.

12. Contact

Questions about your privacy? Email us at support@alchemilla.cc.