Privacy

In short

Your check-ins stay on your device. No account, no analytics, no ads, no server that receives what you write. Nothing is ever sent to me, so there is nothing for me to read.

What the app stores

Your answers, the days they belong to, and your settings — all of it in the app's own database on your device, protected by your phone's own encryption.

Check-in durations go through Apple's logging system, so the app can be kept quick to fill in. Question names and durations are logged; answers never are. Those logs stay on your device.

iCloud sync

Off until you turn it on. With it on, your check-ins go to your own private iCloud database, where your answers are encrypted — Apple can't read them either. The dates are not encrypted, so a record of which days you logged, and which days you recorded a dose, is readable there.

Turning it off stops syncing and leaves what is already in iCloud. You can delete that from iCloud in the Settings app. Signing out of iCloud removes the synced copy from that device.

Apple Watch

The watch holds today's questions and answers, and any day it has finished but not yet handed over, and passes them to your iPhone directly. Nothing goes anywhere else.

Apple Intelligence

Summaries are written by a model running on your device. There is no server fallback: when it can't run, there's no summary.

Exporting

Export makes a CSV file and you choose where it goes. Once it leaves the app it isn't protected by it. The app says so at the moment you export.

This site

Static pages on Cloudflare. No cookies, no analytics, no trackers, and no form to fill in. Cloudflare briefly records the addresses that connect, as any host does; I never see them.

Children

The app is not aimed at children under 13 and collects nothing from anyone.

Changes and contact

If this changes, the date above changes too. Anything affecting what leaves your device will be said in the app first.

Questions: hello@genderfluidity.app.