Daisy Privacy Policy

Daisy tracks something that should never have to be explained to anyone. The app is built so that it does not have to be: there is no Daisy account, we operate no servers that hold your cycle, and everything you record stays on your phone. This policy sets out exactly what that means, and — just as importantly — what limited data does leave the device.

Your cycle, your logs and your notes stay on this device — Daisy never sends any of them to a server. That covers your cycles, bleeding days, flow, discharge, symptoms, mood, energy, intimacy, notes, medication records and appointments, all held in local storage on your phone. We never receive them, we cannot read them, and there is nothing about your cycle for us to hand over, sell or lose. Deleting an entry removes it from the device; deleting the app removes all of it.

Daisy has no sign-up, no login and no server-side profile. There is no automatic cloud sync of your health data. Your data leaves the phone only when you make it: a backup file you create, the appointment PDF you choose to share, an image of your flower you save, or the one-line status message you send — which reports only where you are in your cycle and includes nothing you logged.

Daisy can write a backup file containing your cycles, logs and settings, saved wherever you choose to put it. Backups are made only when you ask for one, and they are never uploaded to us.

• You can protect a backup with a passphrase, which encrypts the file.
• The passphrase is not stored anywhere. If you forget it, the backup cannot be opened — not by you, and not by us.
• Saving without a passphrase writes the file as plain text that anyone holding it can read; the app warns you before it does so.
• Restoring a backup replaces everything currently on the phone.

Daisy can produce a PDF summary for an appointment — cycle lengths, bleeding days, how often each symptom was recorded, and the observations drawn from those records. The free plan covers the last three months and Premium extends it to the full year. Either way it is generated on your device and goes nowhere until you share it, and your personal notes are deliberately excluded from it, as is anything you logged about intimacy.

With your permission, Daisy schedules local reminders for your period, fertile window, daily check-in, medication and appointments. They are generated on your device and never pass through a server. Permission is requested when you switch a reminder on, never at launch, and refusing it simply leaves the reminder off.

• Discreet reminders are on by default: the notification is titled "daisy" and its body says only that something is waiting for you.
• Medication reminders can be left unnamed, so nothing on your phone names what you take.
• The Home Screen widget, available on iPhone, carries only a day count, today's position and colours — never a symptom, a note or a prediction.

You can lock Daisy with a PIN or with Face ID, Touch ID or your device's fingerprint. The PIN is stored in your device's secure storage and cannot be recovered by us — if you forget it, the only way back in is resetting the app's data. The lock protects the app on an unlocked phone; it is not full-disk encryption, and the app's settings screen says so plainly.

Daisy uses a small number of third-party services for purchases, diagnostics and advertising measurement. None of them receives your cycle, your logs or your notes. Each processes limited technical or anonymous data under its own privacy policy, which you should review separately.

• Adapty — manages in-app purchases and subscriptions and reports whether this device has premium access. The purchase layer is never told anything about your cycle, your logs or your notes.
• Firebase (Google) — app diagnostics and anonymous usage analytics.
• Amplitude — anonymous, aggregate usage analytics such as which screens are reached.
• Meta SDK — advertising measurement, so we can tell which adverts brought people to the app.

Analytics events describe how the app is used in an anonymous, aggregate form — that a screen was opened or an onboarding step completed. They never contain your cycle dates, symptoms, moods or notes. There are no adverts inside Daisy. On iOS, the app asks for tracking permission through Apple's App Tracking Transparency prompt; that permission is used only to measure which adverts brought people to the app, and declining it does not change anything about how Daisy works.

Daisy is not directed to children under the age required for consent in your jurisdiction and does not knowingly collect personal information from them.

Because your data lives on your device, you are always in control of it. You can delete any entry, reset all data from within the app, export an encrypted backup, or remove the app entirely. There is no server-side record to request, correct or erase, because we never held one.

Daisy is a tracking app. It is not a medical device, not a diagnosis and not a form of contraception. Predictions, phases, fertile windows and the observations drawn from your records are estimates counted from what you entered by hand — the fertile window and ovulation day are derived from your cycle history alone, not from a basal body temperature reading, an LH test or a wearable. They never name a condition and should not replace advice from a healthcare professional.

We may update this policy as the app evolves. Material changes will be reflected here with a revised “last updated” date. Continued use of Daisy after an update constitutes acceptance of the revised policy.

If you have questions about this Privacy Policy or how Daisy handles data, contact us at trackit.tr@gmail.com.