Privacy Policy
The short version. Hello Phase has no account and keeps your cycle on your phone, so your periods, check-ins, notes and patterns are never uploaded to us. The coach is the one feature that sends health details to a server, and it only does that after you agree. The app also sends a few usage counts so we can see which parts help people, and those counts carry nothing that points back to your phone.
Who we are
Hello Phase is made by an independent developer based in Malaysia, who is responsible for the data described here. You can reach us about anything in this policy at hellophase@boostmarketing.my, and we answer within 30 days.
What stays on your phone
- Period dates, cycle and period length, predictions and the estimated fertile window.
- Daily check-ins with mood, symptoms, flow and notes, and the patterns the app finds in them.
- Your coach chat history, your birth year if you add one, reminders, appearance and other settings.
- Whether Plus is active on this phone.
All of this lives in the app's private storage and is protected by your phone's own encryption and lock screen. Home screen widgets and reminders are prepared on the phone from the same data. If you delete the app, the data goes with it. In Settings, Data you can export a CSV file or a short PDF summary to keep wherever you like, and Delete all data wipes every entry without removing the app.
The coach and what it sends
The weekly note and the answers to your questions are written by Claude, an AI model from Anthropic, so they need a server. The first time you open the coach or send a question, the app explains what it will send and asks for your agreement. Until you agree, the app makes no coach request at all and shows notes that come built into the app. Once you agree, each coach request carries the details below.
- Your question, together with the earlier messages of the same conversation so the reply can follow on.
- Your cycle day and phase. If you paused predictions, the app sends a note saying so in place of the phase.
- The moods and symptoms you logged in the last seven days.
- Your birth year, only if you added one in Settings.
- Your language setting and whether you have Plus, which decides your coach limit.
- The random code for your phone, explained in the next section.
A coach request never includes your name, email, full dates, contacts, location or phone model. Our server passes it to fal, which routes it through OpenRouter to Claude to write the reply, then sends the reply back to your phone. Our server does not store your question or the reply unless you report that reply as described further down, and every request tells fal not to keep a copy in its request history. fal, OpenRouter and Anthropic handle the request as our service providers, only to write the reply.
You can withdraw your agreement at any time in Settings, Privacy, Coach data sharing. The coach then stops sending requests, your earlier chats stay on your phone, and every other part of the app keeps working.
The random code for your phone
On first launch the app creates a random code and keeps it in your phone's secure storage, the Keychain on iPhone and the Keystore on Android. It has no link to your name, email, phone number or advertising ID, and the app sends it in a hashed form. The server uses it to count coach requests for the fair-use limits. On Android the same code is attached to Google Play purchases as an account reference, so a subscription can be matched to the app on your phone.
What our server keeps, and for how long
To keep the coach affordable, our server stores a few small records, and each one is removed on a fixed schedule.
- Fair-use counters. How many coach requests the code for your phone made in the current day or week. They expire on their own within 8 days.
- A short request log. Each line holds the first 8 characters of the code, which coach feature was used, your phase or a paused note, the result code and the time. It never holds your question or the reply, and log files are deleted after 30 days.
- Daily totals. The number of coach requests and the amount of AI text used each day, with no code attached, kept for 40 days so we can watch costs.
- Reports of AI replies. Kept for 12 months, as described in the next section.
Reporting an AI reply
Every coach reply has a flag button. When you report a reply, the app sends the reason you picked, where the reply appeared, a hash of the reply, up to 500 characters of the reply text that the AI wrote, your app version and whether you have Plus. It sends nothing you wrote and no cycle data. We store the report with the first 8 characters of the random code for 12 months and use it to improve the coach. A short copy with the reason, the place, the app version and the reply text also goes to our team's private Telegram chat so that someone reads it the same day.
Usage counts
The app sends small usage events to hellophase.pages.dev, for example when onboarding is finished, when the Plus screen opens, when a purchase goes through or when the app hits a storage error. Each event holds the event name, a short label such as which offer was shown, the platform, the app version and the number of days since install. An event carries no country, no code for your phone, no cycle data and no text, and the IP address is not stored. The events are kept only as daily counts, which we use to see which parts of the app help people and to catch errors after an update.
Purchases
Hello Phase Plus is sold through the App Store and Google Play. Apple and Google take the payment and tell the app whether your subscription is active, and we never see your card details or billing address. Coach requests say whether you have Plus so the right limit applies, and on Android the random code goes along with a purchase as described above.
Service providers
- Anthropic makes Claude, the AI model that writes coach replies from the requests described above.
- fal and OpenRouter carry coach requests from our server to Claude and bring the reply back.
- Cloudflare hosts this website and passes app requests on to our server. It sees your IP address the way any web host does, and our server receives the request without it.
- Hostinger rents us the server that holds the counters, logs and reports described above.
- Telegram carries the copies of reported replies to our team chat.
- Apple and Google handle downloads, payments and subscriptions under their own privacy policies.
What we never do
- We run no advertising and no ad tracking inside the app.
- We do not sell data or share it with data brokers.
- We do not build a profile of you, and we have no way to tell who you are.
- The app does not read your contacts, location, photos or health apps.
Notifications
Reminders are scheduled on your phone and never pass through our server. You can turn each kind off in Settings or in your phone's notification settings, and you can pick discreet wording that keeps cycle details off the lock screen.
Children
Hello Phase is not meant for children under 13, and we do not knowingly collect data from them.
Your rights and choices
Most of your data never reaches us, so deleting it on your phone is enough. What sits on our server is tied only to a random code and clears itself on the schedules above. If you live somewhere with data protection laws such as the GDPR, the UK GDPR or the CCPA, you can ask us what we hold, ask us to delete it sooner or object to how it is used. Because we cannot look you up by name, email us with the rough date and time of your coach request or report, and we will search for it and reply within 30 days.
Security
Every request leaves your phone over HTTPS. The random code sits in your phone's secure storage, and only the developer can reach the server and the records it keeps.
Older versions of the app
Versions before 1.1 work a little differently, and this section stays here while people still use them. They send coach requests straight to our server without going through Cloudflare, they include pregnancy status when it was set, and they do not show the agreement step described above. They also send crash reports to Sentry, a crash reporting service, with the phone model, system version, app version, the technical error trace and the screens opened shortly before the crash, and those reports contain no cycle entries. Updating to version 1.1 or later ends all of this.
Changes
When this policy changes in a way that matters, the app shows a notice and this page carries a new date.