We keep almost nothing.

Four Phases is local-first. Everything you enter — your partner's name, cycle dates, logged symptoms, your streak, your chat history with Coach, and any notes you give Coach — lives on your device. None of it is stored on our servers. We cannot read it, we have no database of it, and we cannot recover it if you delete it. The “Wipe it” button in Settings erases everything, instantly and permanently.

The daily brief, Coach chat, and toolkit are generated by Anthropic's Claude API. Requests include only what's needed to answer: the current cycle phase, day number, any symptoms you logged today, the question you typed, and (for chat) any Coach-memory notes you chose to write. Your partner's name is never sent — by design, the app strips it before any request leaves your device.

We do not log or store these requests or responses on our servers. Anthropic processes them under their API terms — API inputs are not used to train their models. Replies are cached on your device, not ours.

Reproductive health data is being subpoenaed and sold across the industry. Our answer is structural, not promissory: unless you both opt in to live sync (see above), Four Phases keeps no server-side record of your partner's cycle, symptoms, or your conversations. If we were ever compelled to produce user health data, there would be nothing to produce — and even with live sync on, the most that exists is three cycle numbers tied to a random token with no name attached. We don't sell data, we don't share it with advertisers, and we run no third-party analytics or ad SDKs in the app.

If you sign up for the waitlist, we store the email address you provided plus a timestamp. We use it only to email you when Four Phases opens up. You can request deletion any time at hello@voreli.ai.

Live sync is off by default. If you and your partner both turn it on, we store exactly three values on our server so her updates reach your app: her last period start date, cycle length, and period length — tied to a random link token, not to a name, email, or account. Symptoms, chat history, notes, and names are never synced. Either partner can delete the stored values instantly (Settings → Her side → Turn off, or the “Stop syncing” button on her page), and deletion is immediate and permanent.

If you subscribe to Four Phases Pro, the purchase is handled entirely by Apple through the App Store using your Apple ID. We use Apple's own StoreKit — there is no third-party billing or analytics SDK in the app. We never see or store your card details, and we receive only Apple's confirmation that a subscription is active. Manage or cancel anytime in iOS Settings.

To know which features are worth improving, the app sends us anonymous usage events — a random install identifier, the name of the feature used (for example “daily brief generated”), and a timestamp. That's the entire payload. These events never include cycle dates, symptoms, names, notes, or anything you or Coach wrote. The random identifier is not tied to your identity unless you redeem a beta invite code we gave you personally.

Four Phases does not use third-party tracking cookies. We do not run Google Analytics, Meta Pixel, or similar. Vercel (our host) may collect basic request logs for security and abuse prevention.

Four Phases is not directed at children under 16. Don't use it if you're under 16.

If we change this policy, we'll update the date at the top. Material changes will be flagged on the homepage.

Questions, deletion requests, or anything privacy-related: hello@voreli.ai.