Data Privacy
This page explains, in plain language, what data Femy processes, why we process it, which providers we use, and what rights you have.
Last updated: September 12, 2026
Controller and scope
- Femy is the controller for personal data processed through the app and this website.
- This page covers the main categories of data we process, why we process them, which providers help us run the service, and the rights you have under applicable privacy law.
Data we process
- Account and device data: sign-in details, device identifiers, app version, subscription state, and technical logs.
- Product data: lesson progress, check-ins, actions, and other information needed to deliver the app experience.
- Sensitive self-reported data: if you enter health, symptom, cycle, wellbeing, or reflection information in the app, that content may be processed to provide the features you choose to use.
- Some onboarding answers and product interactions may be used for Mixpanel analytics without attaching them to your account identity. We do not use reflection text or mood and check-in scores for analytics.
- If you allow tracking through Apple’s App Tracking Transparency prompt, Meta receives app activation events and successful purchase events. A purchase event includes the amount, currency, purchased product, and item count. The Meta SDK may also access the Identifier for Advertisers, or IDFA, after you allow tracking.
- We do not send Meta your symptoms, cycle information, health answers, reflection text, email address, or Femy user ID. Your StoreKit transaction ID stays on your device and is used there to prevent duplicate purchase reporting.
Why we process data
- To provide the app and website, including authentication, sync, subscriptions, security, support, and service delivery.
- To understand product usage and improve usability, reliability, onboarding, and conversion.
- To detect misuse, prevent fraud, comply with legal obligations, and defend legal claims when needed.
- We do not sell personal data.
Services we use
- Firebase: authentication, database, app infrastructure, push messaging, crash reporting, and performance monitoring.
- Mixpanel: usage analytics and product measurement from app and server events, configured for EU data residency.
- Microsoft Clarity: session analytics and session replay for product optimization.
- Superwall: paywalls and StoreKit purchase flows. Superwall Performance Marketing is not enabled.
- Meta App Events: app activation and successful purchase measurement, only after you allow tracking through Apple’s prompt.
- Cloudflare: website delivery, caching, security, and network logs.
Legal bases
- We process data when it is necessary to provide the service you request, for our legitimate interests in operating and improving Femy, and to comply with legal obligations.
- Where sensitive health-related information is involved, we only process what is needed for the features you choose to use and rely on your consent or another valid legal basis available under applicable law.
- Meta App Events and access to the IDFA are based on the tracking choice you make through Apple’s App Tracking Transparency prompt.
Optional Meta measurement
- Meta App Events stays inactive until you choose Allow in Apple’s App Tracking Transparency prompt.
- If tracking is denied, restricted, or not yet authorized, Femy does not send Meta app activation events or individual purchase events, and does not enable IDFA access for the Meta SDK.
- You can change this permission at any time in iOS Settings under Privacy & Security, then Tracking.
International transfers
- Some providers may process data outside your country, including in the United States.
- Where required, we rely on provider contractual safeguards and comparable legal transfer mechanisms for these transfers.
Retention
- Local app data remains on your device until you delete it, reset the app, or remove the app.
- Account, subscription, analytics, and diagnostics data are kept only as long as needed for the purposes above, including legal, tax, fraud-prevention, and support requirements.
Your rights
- Depending on where you live, you may have rights to access, correct, delete, restrict, object to, or export your personal data, and to withdraw consent where consent is the basis for processing.
- You may also have the right to complain to your local data protection authority.
Contact and deletion
- You can request account or data deletion from the app settings where available.
- For privacy questions or rights requests, contact Femy through the support option in the app settings.
Femy provides educational wellness content and is not a substitute for medical advice, diagnosis, or treatment.