Privacy Policy

The short version

• Texts you paste into Decoder or Text Back are not saved to your account. They are sent to our AI provider (Anthropic) to write a reply and are not kept by us.
• Oh Sh*t Button and Apology Engine save your context and the AI's response so you can review your crisis history and improve over time. You can delete individual entries anytime.
• Your cycle data, logs, and wins are stored on secure servers (Supabase) and are visible only to you, and to your partner if you link accounts through Partner Sync.
• We don't sell your data. We don't share it with advertisers. Ever.
• You can delete your account and all associated data anytime.

What we collect

• Account basics: email, display name, the name you use for her, city (if you add it), sign-in method (email, Apple or Google), and subscription status
• Cycle tracking: period dates, phase calculations, daily logs, mood/symptom check-ins
• Your inputs: wins you log, crisis contexts from Oh Sh*t Button, apology playbooks you save
• Usage: counts of how often you use the AI features each day (to apply fair-use limits) and a record of notifications we send. The app contains no analytics or advertising SDKs.
• Partner link status: if you've connected with a partner and what data she's chosen to share with you
• Device and notification data: a push notification token so we can send the reminders you turn on
• Onboarding answers: relationship details, goals, and preferences you choose to give

What we don't store

The texts or context you paste into Decoder or Text Back. These are sent to our AI provider to generate a reply and are not saved to your account.

Voice notes or audio (we don't have voice features yet).

Payment card details. Subscriptions are handled by Apple through the App Store, by Google through Google Play, and by Stripe on the website. We only receive whether your subscription is active.

What we do store (so you can learn from it):

• Oh Sh*t Button crisis logs: the situation you described and the AI's guidance, so you can review patterns.
• Apology Engine playbooks: the context and the 5-part plan, so you can refine your approach over time.

You can delete any saved response or crisis log individually from your dashboard.

Partner sync

If you link with a partner, you see her period dates and cycle phase, plus any of her daily check-ins she leaves shared (energy, mood, cramps, libido, symptoms, notes). She can turn each of those off, or unlink, at any time.

Third-party services we use

• Supabase: database hosting and sign-in (data encrypted at rest, row-level security)
• Cloudflare: hosts our website and the servers the app talks to
• Anthropic (Claude): writes the AI replies. Receives what you type into an AI feature plus the context it needs, such as names, cycle phase and day, and city. Anthropic does not use this data to train its models and keeps it only for a limited period under its commercial terms.
• Apple: Sign in with Apple, in-app subscriptions, push notification delivery
• Google: Sign in with Google (if you use it), Google Play subscriptions on Android, and Android push notifications (Firebase Cloud Messaging)
• Expo: delivers push notifications to your phone
• Stripe: payments on the website only
• Lovable Analytics: anonymous page analytics on this website only. The app has no analytics.

We share data with these providers only to run the app. We do not sell your data, and we do not use Google Analytics, Facebook Pixel, or any advertising networks.

Your rights

Export, correct, or delete your data anytime by emailing privacy@menztraining.com. To delete your account, see Delete your account.

Menstrual health data protection

Your partner's cycle data (period dates, phase tracking, mood logs, symptoms) is classified as sensitive health information under state and federal law. We store this data encrypted on secure servers (Supabase with row-level security) and will never sell, share, or use it for advertising, insurance underwriting, or any purpose beyond what's described in this policy. In the event of a data breach affecting cycle or health data, both partners will be notified via email within 72 hours.

AI provider safeguards

AI features (Decoder, Text Back, the Coach, Oh Sh*t Button, Apology Engine, Date Night) send your input and the context needed to answer it to Anthropic's Claude models. Before your first AI answer, the app asks for your consent. Decoder and Text Back inputs are not saved to your account. Oh Sh*t and Apology Engine entries are saved so you can review them, and you can delete them. Anthropic does not use this data to train its models.

California & EU user rights

If you're in California or the European Union, you have additional rights:

• Right to know exactly what data we've collected about you
• Right to access a full copy in a portable format
• Right to delete your account and all associated data
• Right to opt out of any sale of your data (which we don't do)

To exercise these rights, email privacy@menztraining.com with "Data Request" in the subject line. We'll respond within 30 days.

What happens in a breach

If our servers are compromised and your account data is accessed by an unauthorized party, we will notify you via email within 72 hours. The notification will include what data was affected, what we're doing about it, and steps you can take to protect yourself. Supabase (our hosting provider) maintains SOC 2 Type II compliance and regular third-party security audits.