We keep almost nothing.

When you create an account, the things you enter — your partner's name, cycle dates, logged symptoms, your streak, your chat history with Coach, and any notes you give Coach — are saved to your private account so they sync across your devices and with the partner you link. A copy is also cached on your device for speed.

Your data is protected by database row-level security: only you, and the partner you explicitly link, can read it — never other users. We don't sell it, we don't share it with advertisers, and the “Wipe it” button in Settings deletes it from your device and your account, instantly and permanently.

The daily brief, Coach chat, and toolkit are generated by Anthropic's Claude API. Requests include only what's needed to answer: the current cycle phase, day number, any symptoms you logged today, any notes you saved about what helped or didn't in this phase, the question you typed, and (for chat) any Coach-memory notes you chose to write. Your partner's name is never sent — by design, the app strips it before any request leaves your device.

We do not log or store these requests or responses on our servers. Anthropic processes them under their API terms — API inputs are not used to train their models. Replies are cached on your device, not ours.

Reproductive health data is being subpoenaed and sold across the industry. Your account data is stored with row-level security, so only you and the partner you link can ever read it — not other users, not the public. Your partner's name is never sent to the AI. We don't sell data, we don't share it with advertisers, and we run no third-party analytics or ad SDKs in the app. You can permanently delete everything in one tap, any time, and we honor deletion requests at hello@voreli.ai.

If you sign up for the waitlist, we store the email address you provided plus a timestamp. We use it only to email you when Four Phases opens up. You can request deletion any time at hello@voreli.ai.

Live sync is off by default. If you and your partner both turn it on, we store exactly three values on our server so her updates reach your app: her last period start date, cycle length, and period length — tied to a random link token, not to a name, email, or account. Symptoms, chat history, notes, and names are never synced. Either partner can delete the stored values instantly (Settings → Her side → Turn off, or the “Stop syncing” button on her page), and deletion is immediate and permanent.

If you subscribe to Four Phases Pro, the purchase is handled entirely by Apple through the App Store using your Apple ID. We use Apple's own StoreKit — there is no third-party billing or analytics SDK in the app. We never see or store your card details, and we receive only Apple's confirmation that a subscription is active. Manage or cancel anytime in iOS Settings.

To know which features are worth improving, the app sends us anonymous usage events — a random install identifier, the name of the feature used (for example “daily brief generated”), and a timestamp. That's the entire payload. These events never include cycle dates, symptoms, names, notes, or anything you or Coach wrote. The random identifier is not tied to your identity unless you redeem a beta invite code we gave you personally.

Four Phases does not use third-party tracking cookies. We do not run Google Analytics, Meta Pixel, or similar. Vercel (our host) may collect basic request logs for security and abuse prevention.

Four Phases is not directed at children under 16. Don't use it if you're under 16.

If we change this policy, we'll update the date at the top. Material changes will be flagged on the homepage.

Questions, deletion requests, or anything privacy-related: hello@voreli.ai.