Privacy Policy
Your data, your device.
Phase is built so we cannot see your health data, even if we wanted to. This page explains how that works in plain English.
The short version
Everything stays on your iPhone. Your daily check-ins, voice notes, and Room messages are stored only in the Phase app on your device. Nothing is uploaded to a server we operate. We do not sell, rent, share, or analyse your health data. We do not run trackers. We do not know who you are unless you choose to email us.
1. What Phase stores on your device
| Data | Where it lives | Why |
|---|---|---|
| Daily check-in values (8 sliders 0–10) | App sandbox · file-protected JSON | So you can see your own history |
| Optional voice notes | App sandbox · audio files | So you can play them back later |
| The Room messages you send and receive | App sandbox · encrypted (ChaChaPoly + Keychain key) | So conversations are readable only on your device |
| Subscription status, premium flags, quota counters | iOS UserDefaults | So we know what features to unlock |
| Generated PDF exports | App caches · disposable | So you can share them with your own doctor |
2. What Phase reads from Apple Health
If you tap Connect Apple Health in Settings, Phase asks iOS for permission to read these data types. You choose, per type, whether to allow it. We never receive raw data: HealthKit returns it directly to the app on your device.
- Sleep analysis
- Heart-rate variability (SDNN)
- Resting heart rate
- Menstrual flow
Phase can write your menstrual flow to Apple Health if you ask, so your cycle stays in one place. Phase never writes anything else to Health.
3. What Phase sends over the network
The Phase app makes network requests only in these specific cases, all of which are operated by Apple, not by us:
- Sign in with Apple — when you choose to sign in. We receive a stable, opaque user identifier provided by Apple. We do not receive your real name or email unless you grant them.
- StoreKit — when you view, purchase, or restore a subscription. Apple processes payment; we never see your payment information.
- Apple Push Notification Service — only if you enable reminders. We send no marketing pushes.
Phase does not call any other server. It does not call analytics services, advertising networks, error reporters, or "AI" providers. The Pattern Report you see is computed on your device by an algorithm shipped inside the app.
4. What Phase does not collect
- Your name, email, phone number, or address — unless you write to us.
- Your location, contacts, calendar, or photos.
- Your IP address (we have no server to log it on).
- Cross-app or cross-website tracking identifiers (IDFA, IDFV, fingerprinting).
- Anything that identifies you to advertisers.
5. The Room — anonymous, encrypted, on-device
The Room shows up to 12 anonymous moon-shaped avatars. Names, ages, and identifiers of other members are never shown. Messages are encrypted on your device using ChaChaPoly with a symmetric key stored in the iOS Keychain (kSecAttrAccessibleAfterFirstUnlockThisDeviceOnly). No one outside your device — including us — can decrypt or read them.
6. Children
Phase is intended for adults experiencing perimenopause or menopause. It is not directed at children under 13 (or 16 in the EEA). We do not knowingly collect data from children.
7. Your rights
Because we do not hold a copy of your data, GDPR / CCPA "data portability" and "right to erasure" requests are fulfilled by you, on your device:
- Export: Patterns → Generate PDF.
- Delete: Settings → Sign out & reset, or delete the Phase app from your iPhone. All check-ins, voice notes, Room messages, and Keychain keys are removed.
- Withdraw HealthKit permission: iOS Settings → Health → Data Access & Devices → Phase.
- Cancel subscription: iOS Settings → Apple ID → Subscriptions.
For a step-by-step path, see Delete your account.
8. Sub-processors
Because Phase does not transmit your health data off-device, we use no health-data sub-processors. The only third parties involved at all are:
- Apple — operates Sign in with Apple, the App Store, StoreKit, HealthKit, Keychain, and APNs. Apple's privacy policy applies to these services.
- GitHub — hosts this static legal site. GitHub may log your IP address when you visit this page; see GitHub's privacy statement.
9. International transfers
Your health data does not leave your iPhone, so it is not transferred internationally by us. Subscription processing happens on Apple's infrastructure in your country's App Store storefront.
10. Changes to this policy
If we make material changes, we will update the date at the bottom of this page and, if the change affects how data is handled, prompt you in-app on next launch.
11. Contact
Questions, concerns, or just a hello: jasperabundant@gmail.com. See Support for more channels.
Last updated: 1 May 2026 · Version 1.0