Privacy Policy
The short version
- There is no account and no sign-up. We never ask for your name, email, phone number or photo.
- The details you log (dates, flow amounts, pain levels, moods, symptoms, notes) stay on your phone and are never sent to us, to Google or to advertisers. The app only counts that a feature was used, for example "a period start was logged".
- The app sends anonymous app-usage and crash data to Google Firebase. You can turn this off in Me › Share anonymous app usage.
- Free users see non-personalized ads from Google AdMob. The app never asks to track you and never reads the advertising ID (IDFA).
1. What stays on your phone
- Your diary: period start and end dates, flow, pain level, moods, symptoms and notes. Stored in the app's private folder with iOS file protection.
- Your profile: the first name or nickname you type (optional), your birth year, whether your periods have started, theme and reminder settings.
- Your PIN: if you turn on the lock, the 4-digit PIN is kept in the iOS Keychain on this device only. Face ID or Touch ID is checked by iOS; the app never sees your face or fingerprint.
- Reminders: scheduled as local notifications on your phone. With Secret wording on, the text does not use the word "period".
- Backups: only when you tap Save a backup file does the app create a file. You choose where it goes (for example Files or iCloud Drive). We never receive it. Send a summary to a parent works the same way: you pick who gets the message in the iOS share sheet.
We cannot see, recover or delete this data because we never have it. To erase it, open Me › Delete everything or delete the app. iCloud or iTunes device backups made by iOS may include it, as with any app.
2. What the app sends, and why
| Who | What | Why |
|---|---|---|
| Google Firebase Analytics | Names of screens and buttons used (for example "onboarding finished", "a period start was logged", "flow was logged", "paywall opened"), the age group picked from your birth year (under 13, 13–15, 16–17, 18+), whether periods have started, install month, Plus status, app version, device model, iOS version, approximate country or region from the IP address, which guides you open, which settings you switch on or off (reminders, secret wording, this usage switch), first-period kit checks, Plus-feature taps, when an ad is shown (ad type, ad network name and the estimated earnings for that ad, not who saw it), whether the app came from the App Store or TestFlight, a random ID for this app install and your device's vendor ID (a random ID for this developer's apps, not the advertising ID). | To see which features help and which screens confuse people. |
| Google Firebase Crashlytics | Crash reports: the code location that crashed, device model, iOS version, app version and a random installation ID. | To fix crashes. |
| Google Firebase Remote Config | A random installation ID and app version. | To switch small settings (for example how often a banner shows) without an app update. |
Never sent: dates, flow amounts, pain levels, moods, symptoms, notes, your name or nickname, your exact birth year, your PIN, contacts, location from GPS, photos or the advertising ID.
Analytics storage is granted, but advertising storage, ad user data and ad personalization are always set to "denied" for Firebase, so this data is not used for advertising. Google keeps analytics event data for up to 14 months and crash reports for 90 days.
Turn it off: open Me › Share anonymous app usage and switch it off. Analytics and crash reports stop on that device (at the latest the next time you open the app).
3. Ads (free version)
Free users see banner ads, may sometimes see a full-screen ad after closing a guide, and can choose to watch a rewarded ad to unlock one report. There are no ads on the Today screen. Ads come from Google AdMob. Every ad request is set to:
- Non-personalized: ads are picked from the screen context, not from a profile of you.
- Content rating G (general audiences).
- Child-directed if the birth year shows you are under 13 (or no birth year is known), and treated as under 16 if you are under 16.
Users aged 16 and over in some regions (for example the EU and UK) may see a Google consent form for ads, and can change their answer later in Me › Ad privacy choices. Ads stay non-personalized either way. The app does not show the App Tracking Transparency prompt and does not read the advertising ID (IDFA). To show, count and protect ads from fraud, Google receives the ad request, IP address, device and app information and a random identifier for this app. See How Google uses information from sites or apps that use its services and Google's Privacy Policy. Poppy Plus removes ads.
4. Purchases
Poppy Plus is sold through Apple's App Store. Apple handles payment; we never see your name, Apple ID or card. The app checks your Plus status with Apple on the device. When a purchase happens, analytics records the product, price, currency and Apple's transaction number (not who bought it), unless analytics is turned off.
5. Children and parents
Poppy is made for tweens and teens, including children under 13, and we built it to collect as little as possible from them:
- No account, no name, email, photo, contacts or precise location is collected or shared.
- The diary never leaves the device.
- The only data the app sends is the random IDs, device and app information and approximate region described above. The IDs are used only to run the app, not to identify a child: understanding feature use, fixing crashes and showing contextual (non-personalized, child-directed) ads. They are not used to build profiles, for personalized advertising or for tracking across other companies' apps or websites.
- There are no chats, public profiles, social features or links to sign up for anything.
Parents and guardians can switch off Share anonymous app usage in Me, buy Plus to remove ads, erase everything on the phone with Me › Delete everything, and ask to review or delete information about their child, or to stop any further collection, by emailing support@indiehack.kr. Purchases are made by the Apple account on the phone; with Family Sharing, Ask to Buy lets a parent approve them.
6. Where data is processed
Google LLC processes the data in section 2 and 3 on servers that may be outside your country, including the United States, over encrypted connections.
7. Your choices and rights
You can stop analytics at any time in the app. Depending on where you live (for example the EU, UK, Korea or California), you may have rights to access, correct, delete or object. Because we hold no name, email or account, we usually cannot link analytics data to you, but email support@indiehack.kr and we will explain what can be done. There is no fee. Your email is used only to reply, kept only as long as needed to answer you, then deleted. To erase your diary yourself, open Me › Delete everything.
8. Changes
We will post changes on this page with a new date. If the app starts collecting new kinds of data, this page is updated before that version is released.