Privacy Policy

Last updated: 25 June 2026

PcodPal (“we”, “us”, the “app”) helps you track your menstrual cycle, seed cycling, symptoms, weight, lab results and prescriptions, and offers PCOD/PCOS-friendly recipes and information. Your privacy — especially your health data — matters deeply to us. This policy explains what we collect, how we use it, and the choices you have.

In one line: your health data stays on your device by default. If you turn on Cloud Backup, it is stored privately under your own account on Google Firebase servers in the United States, encrypted in transit and at rest, so only you can restore it. We never sell your data and we never use your health data for advertising.

1. What data we handle

a) Health & wellness data you enter

Period dates, cycle and seed-cycle logs, symptoms, weight entries, lab/bloodwork results, and prescription details (doctor name, doctor phone, dates, medicine names, notes), plus any prescription or lab-report photos you scan or upload.

Stored locally on your device in the app’s private storage.
Sent to the cloud only if you turn on Cloud Backup (a paid feature), and only after you give explicit consent and choose what to include.

b) Account data (only if you sign in for Cloud Backup)

Your email address and a unique account ID (UID) from Google Firebase Authentication, or the Google/Apple account you choose to sign in with.

c) Purchase data

Whether you own a paid unlock. Payments are handled entirely by Google Play / the Apple App Store; we never see your card details.

d) Basic technical/diagnostic data

Standard app/crash diagnostics that may be processed by Google Firebase to keep the app working and secure.

We do not collect your contacts, precise location, or browsing history.

2. How we use your data

To provide the app’s features (tracking, insights, reminders, recipes, backup/restore).
To back up and restore your data when you choose to.
To keep the app secure and working (diagnostics, abuse protection).

We do not sell or rent your data, use your health data for advertising, or share your health data with other users or third parties for marketing.

3. Where your data is stored and who can access it

On your device: your tracker, weight, lab and prescription data lives in the app’s private, sandboxed storage. Uninstalling the app deletes it.
In the cloud (only with Cloud Backup on): stored under your own account (your unique UID) using Google Firebase (Firestore + Cloud Storage), on servers located in the United States.
Encrypted and private to you: your backup is encrypted in transit (TLS) and at rest, and stored under your own account so only you can restore it by signing in.
Optional passphrase (zero-knowledge): you may add a passphrase that scrambles the backup on your device (AES-256) so not even we can read it. If you set one and lose it, that backup cannot be recovered.
Access is restricted to you: server-side security rules allow only the signed-in owner to read or write their data.
You choose what to back up (periods, seed cycling, labs, prescriptions, weight, and photos) before your first backup.

4. Third-party services

Google Firebase (Authentication, Firestore, Cloud Storage, App Check, diagnostics) — to sign you in and store your encrypted backup, under Google’s data-protection terms.
Google Play / Apple App Store — to process payments.

5. Medical disclaimer

PcodPal provides general wellness information, tracking, insights and recipes. It is not medical advice and not a substitute for a doctor or dietitian. Reference ranges, cycle predictions and insights are for your information only. Always consult a qualified healthcare professional for medical decisions.

6. Your choices and rights

Use the app without an account — tracking, insights and recipe browsing work fully offline.
Withdraw consent / turn off backup at any time; future data will not be uploaded.
Delete your cloud backup any time in the app (Cloud Backup → Delete cloud backup).
Delete your account and all data, or request a copy of your data — see our Delete Account page or contact us.
Depending on where you live (e.g. EU, UK, India, California), you may have rights to access, correct, export or delete your personal data, and to lodge a complaint with your data-protection authority.

7. Children

PcodPal is intended for users aged 16 and over (or the minimum digital- consent age in your country). We do not knowingly collect data from children below that age. If you believe a child has provided us data, contact us and we will delete it.

8. Changes to this policy

We may update this policy. We will revise the “Last updated” date and, for significant changes, notify you in the app.

9. Contact

Questions or requests about your data: support@pcodpal.com