Privacy Policy

Last updated:

Summary: Hoo-Ha does not collect, transmit, sell, or share any of your data. The app works entirely offline and stores everything locally on your device, encrypted.

1. Data we collect

None. Hoo-Ha has no servers and contains no networking code. We, the developers, never receive any information about you or your use of the app — including no analytics, no crash reports, and no advertising identifiers.

2. Data you store in the app

Everything you log — cycles, symptoms, mood, temperatures, journal entries, photos, medications, lab and test records, and custom fields — is stored only on your device. Sensitive fields are encrypted using AES-GCM, with the encryption key held in your device's Keychain.

3. When data leaves your device

Your data leaves your device only when you explicitly choose to:

• Export a spreadsheet, which you then share or save wherever you decide. Exported spreadsheets are not encrypted — store them securely.
• Create a backup file, which is encrypted with a passphrase you set (AES-GCM). If you lose the passphrase, the backup cannot be recovered.
• Apple Health (optional, off by default): if you enable it, the app reads from and writes to the Health app on your device. That sync is governed by Apple, not us.
• Siri & dictation (optional, off by default for Siri): voice transcription is performed on-device.

4. Apple HealthKit

If you turn on Apple Health integration, Hoo-Ha may write the following data to the local Health app on your device: menstrual flow, basal body temperature, cervical mucus quality, and ovulation test results.

If you separately turn on the optional metrics or nutrition importers, Hoo-Ha may read the following from Apple Health: body weight, basal body temperature, body temperature, resting heart rate, blood pressure, daily steps, active energy, exercise minutes, sleep hours, calories, protein, carbohydrates, fat, fiber, sugar, sodium, and water.

All HealthKit data accessed by Hoo-Ha stays on your device. In accordance with Apple's HealthKit usage rules, Hoo-Ha never uses HealthKit data for advertising or any similar purpose, never shares HealthKit data with third parties, and never sells or discloses HealthKit data to any party. HealthKit data is also never used in Hoo-Ha's analytics — because Hoo-Ha has no analytics at all.

5. State consumer-health-data laws

Because Hoo-Ha does not collect, store, process, sell, share, or transmit any of your data off your device, we do not collect or process "consumer health data" as defined under the Washington My Health My Data Act (RCW 19.373), Nevada SB 370, Connecticut's Public Act 22-15 amendments, or comparable laws in other US states. All processing of the information you enter happens locally on your iPhone, by software you control.

You are not required to make a request to access, correct, or delete your data — you already have full local access from inside the app, and Settings → Delete All Data removes everything permanently.

6. Payments

Purchases (the one-time unlock and free trial) are processed entirely by Apple through the App Store using StoreKit. We never see your payment information. Apple's privacy policy governs that transaction.

7. Children

Hoo-Ha is not directed at children under 13 and we collect no data from anyone.

8. Your control

You can delete all your data at any time from Settings → Delete All Data. Deleting the app also removes all locally stored data.

9. Not a medical service

Hoo-Ha is a general wellness product. It is not a medical device, does not diagnose, treat, cure, or prevent any disease, does not provide medical advice or interpret results, and is not a form of birth control. Predictions and any patterns shown in charts or correlations are estimates and statistical descriptions of the data you logged — not medical findings.

10. Changes

If this policy changes, the updated version will be posted here with a new date. Because we collect nothing, changes will generally only clarify wording.

11. Contact

Questions? Email contact@privateperiodtracker.com.