Privacy Policy
Effective date: May 2026
Dawn Phase is built on one principle: your body data is yours. This policy explains exactly what we collect, why, and what we will never do with it. We keep this language plain on purpose.
A note on what this data is — and isn't.
The cycle, symptom, and wellness information you log in Dawn Phase is personal self-tracking data. Dawn Phase is not a medical device, is not contraception, and does not provide medical advice. See our Terms of Service for the full health disclaimer and your responsibility for health decisions.
1. What data we collect
We collect only what is necessary to provide the service:
- Account information — your email address and a hashed (non-reversible) version of your password.
- Cycle dates — period start dates and, where logged, end dates and cycle lengths.
- Daily symptom logs — flow intensity, mood, energy, sleep hours, and any symptoms you choose to record (cramps, bloating, headache, hot flashes, night sweats, brain fog, and free-text custom symptoms).
- Tracking mode — whether you use cycle tracking or perimenopause mode.
- Billing information — if you subscribe, Stripe processes your payment. We store only your Stripe customer ID and subscription status; we never see or store your card details.
- Reminder preferences — whether you have opted in to email reminders and how many days before your period you want them.
We do not collect your name, location, phone number, device identifiers, or any behavioural analytics beyond what is needed to show you your own data.
2. How we use your data
Your data is used for one purpose only: to provide you with the Dawn Phase service. Specifically:
- Calculating your current cycle day and phase (menstrual, follicular, ovulatory, or luteal).
- Showing you your symptom history and insights.
- Sending reminder emails if you have opted in.
- Providing customer support when you contact us.
- Processing payments through Stripe.
3. What we will never do
This is the part we want to be unmistakably clear about:
- We will never sell your data — to anyone, for any price.
- We will never share your data with advertisers — Dawn Phase has no advertising model and no ad-tech integrations.
- We will never use your health data to train AI models without your explicit written consent.
- We will never share your data with third parties except Stripe (payments) and Cloudflare (infrastructure), both of which process data only as needed to run the service under strict data-processing agreements.
- We will never transfer your data in a company sale without giving you 30 days' notice and the right to delete your account first.
4. Data storage and security
Your data is stored in Cloudflare D1, a SQLite-based database that is encrypted at rest and replicated across Cloudflare's global network. All data in transit is protected by TLS 1.2 or higher.
Passwords are hashed with SHA-256 and are never stored in plain text. Authentication tokens (JWTs) expire after 30 days.
We do not use third-party analytics, tracking pixels, or session recording tools on the authenticated portions of the application.
5. Your rights
You have full control over your data at any time:
- Export — download a CSV of all your daily logs from the Settings page at any time.
- Delete — permanently delete your account and all associated data from the Settings page. Deletion is immediate and irreversible.
- Correct — edit any log entry directly in the app.
- Access — request a full copy of your stored data by emailing us at [email protected].
If you are located in the European Economic Area, the UK, or California, you have additional rights under GDPR, UK GDPR, and CCPA respectively. Please contact us to exercise them.
6. Contact
Questions, concerns, or data requests: [email protected]
We aim to respond to all privacy enquiries within 5 business days.