Your data belongs to you

Privacy policy

Effective 30 September 2026 · GetPregnant by Hayat

GetPregnant is a period and fertility tracking app. This policy covers our iPhone app (App Store), our Android app (Google Play) and this website.

What the app stores

The app stores the period start dates and daily check-ins you enter, including flow, ovulation (LH) test results, cervical mucus, basal body temperature, intimacy (the days you log sex and whether it was protected), symptoms, and mood, plus your onboarding answers. Every check-in field is optional. If you enable AI chat, your conversations are also stored on your device, up to 100 conversations with 500 messages each. It calculates cycle estimates from those entries. You do not need to create an account.

Where your cycle data goes

Your cycle data is saved in the app’s private storage on your device. Tracking does not upload these entries. Optional AI chat shares relevant records only after you enable it, as described below. We do not send your cycle records to advertisers or advertising analytics providers. The app has no ads, tracking SDKs, or cloud sync, and it does not track you across other companies’ apps or websites. It does not read or write Apple Health data. You can export your records as a CSV file from Settings; the file is sent only where you choose in your device’s share sheet, and the app keeps just the latest export in its temporary cache.

On Android, app backup is disabled and app data is excluded from the backup and transfer rules we control. On iPhone, app data is included in device backups you make yourself, such as iCloud Backup or a backup to your computer, as with other apps; we cannot access those backups. Device manufacturers or backups you make outside the app may behave differently.

Optional AI chat

Enabling AI chat gives consent to send your questions, recent conversation, and relevant saved period dates, flow, ovulation (LH) test results, cervical mucus, intimacy entries (days you logged sex and whether it was protected), symptoms, moods, onboarding answers, and calculated estimates through our API to our AI routing service (OpenRouter) and Google’s Gemini model. If you prefer not to share intimacy entries with these AI providers, leave them unlogged. Basal body temperature is not sent to AI chat. When AI chat starts reading a new kind of record, the app asks for your consent again before your next question. The agent can request all your saved cycle history when relevant, in small pages. It can read records but cannot edit them. You can use the tracker without enabling AI.

We process this information to generate the replies you request. Our API does not save questions, answers, or cycle records, except an answer you choose to report (below). It keeps daily usage counts under a daily-changing, keyed hash of your network address to limit abuse and costs; these counters are replaced on the first request of the next UTC day. Hosting providers process network information to deliver requests. AI processing may take place outside your country.

AI requests require provider routes marked as zero data retention and exclude providers that collect data for training. Our AI routing service retains service metadata such as token counts and latency. Its prompt and response logging and use for product improvement are opt-in account settings, disabled by default. See the AI routing service’s data practices and provider privacy information. Avoid including identifying details in questions.

Use the history icon in AI chat to view and delete conversations, and the plus icon to start a new one. Deleting all local data in Settings also resets AI consent. You can stop an active reply with the stop button. Clearing local data cannot recall information already processed by an AI service. AI can make mistakes and is not medical care.

Reporting an AI answer

Every AI answer has a Report button. When you report one, the app sends our API the reported answer, the question you asked just before it, the reason you picked, any note you add, the platform and app version, and, if you have Plus, your random customer identifier. We store these in a report record to review offensive, harmful or inaccurate AI output and prevent abuse; your network address is used only for a short-lived rate limit and is not stored with the report. The rest of your conversation and your cycle records are not sent. Report records are kept for up to 12 months, then deleted. Email [email protected] to ask about or delete a report.

Subscriptions

GetPregnant Plus is sold through the store you installed the app from. We never receive your payment card details. When our server first verifies a purchase it assigns you a random customer identifier. It stores that identifier with your plan, expiry date, subscription status, auto-renewal status, whether the purchase was a test purchase, and verification dates. Device access keys are stored securely on your phone; the server retains only their hashes. Your questionnaire answers and cycle entries are not sent to Apple or Google by the app.

App Store (iPhone). Apple processes the payment using your Apple Account. The app sends the signed transaction that StoreKit provides to our server, which checks Apple’s signature and asks Apple’s App Store Server API for the current status. From Apple we receive transaction details: the transaction and original transaction identifiers, the product purchased, purchase and expiry dates, the App Store environment (production or sandbox), renewal and refund status, and an app account token. The app account token is a random identifier the app creates, or our random customer identifier; it contains no personal details. We store the original transaction identifier, encrypted, to restore access and handle renewals, refunds and cancellations. Apple also sends our server App Store Server Notifications when a subscription renews, lapses, is refunded or is revoked; we keep each notification’s identifier and type for up to 30 days to avoid processing it twice.

Google Play (Android). Google Play processes the payment using your Google account. Our server receives a purchase token to verify GetPregnant Plus, acknowledge the purchase, restore access and handle renewals, refunds and cancellations. We store the token encrypted. Google Play notification identifiers are kept for up to 30 days.

For AI allowances we keep counts, dates, random question identifiers and one-way fingerprints, not the text of your questions or answers (except answers you report, described above). Allowance records are kept for up to 65 days, cleaned on later activity. Subscription records are retained for restoration and billing support. Contact [email protected] for billing data requests. Do not email medical records or payment card details. Apple and Google separately control their own payment records.

Update checks and our API

On Android, when you tap Check for updates, the app contacts api.getpregnant.app to retrieve public release information; on iPhone, updates come from the App Store and the app does not make this check. The website also retrieves public download information from this API. These requests do not include period dates, check-ins, a user account, or an app-generated device identifier. Cycle tracking works offline, and a failed update check does not affect your saved entries.

Links, hosting, and this website

Opening a support or policy link uses your browser or email app. This website does not ask for your cycle data, set analytics cookies, or use advertising trackers. It counts page views with Umami, a cookieless analytics tool we host ourselves, which records the page, referrer, browser, device type and country without identifying you. Cloudflare serves the website and provides DNS; our API runs on a Hetzner server. Hosting and network providers process technical request information, such as IP addresses and browser or network information, to deliver and protect these services. We do not store cycle data on that server or add analytics to app requests. App stores, email services, and your browser have their own privacy practices.

Contacting us

If you email [email protected], we receive your email address and whatever you choose to include. We use it to answer your request. Please do not send sensitive cycle details unless necessary. You can ask us to delete support correspondence; any information we must retain for a legal obligation will be explained to you.

Deleting your data

In the app, open Settings → Delete all local data → Delete everything. This deletes all period starts, check-ins, onboarding answers, appearance preferences and conversations from the app’s local storage once the save completes, resets AI consent and revokes this device’s Plus session. It does not cancel your subscription or delete Apple’s or Google’s payment records: on iPhone, manage subscriptions in your Apple Account settings; on Android, in Google Play. If a save error appears, retry it before closing the app. Removing one period start deletes that start and its same-day check-in; other days remain.

You can also delete the app on iPhone, or clear the app’s storage in Android settings. We do not keep a server copy of your cycle data and cannot recover it. See Delete account and data for step-by-step help.

Your choices and policy updates

You may choose what to log, edit your entries, or erase them at any time. We will update this page if our data practices change. If you have a privacy question or wish to exercise a privacy right concerning support correspondence or billing records, contact the address above.