Privacy Policy for FeminaFlow

Last Updated: August 6, 2026

FeminaFlow keeps everything on your device and nowhere else. There is no account to create, no server to sync with, and no analytics or advertising code in the app. It does not even request the Internet permission, so your cycle and symptom logs physically cannot be transmitted anywhere. Health data is among the most sensitive information you have, and this app is built so that only you can read it.

1. Information We Collect

None. FeminaFlow does not collect names, email addresses, phone numbers, device identifiers, or any other information about you. There is no sign-in, no account, and no server that we operate.

What you record stays on your device. Cycles, periods, symptoms, moods, medications and notes you enter are written to an encrypted database in the app's private storage and are read only by the app itself.

2. No Network Access

No Internet permission. FeminaFlow does not declare the Android INTERNET permission and contains no networking code. The app is therefore technically incapable of transmitting your data anywhere, whether by accident, by a future bug, or by any third-party library.

Verify it yourself. Open Android Settings → Apps → FeminaFlow → Permissions. You do not have to take our word for this claim.

3. Data Stored on Your Device

This data is excluded from Android's automatic cloud backup, so it is never copied to Google Drive.

4. Encryption

Database encryption. Your entries are stored in a SQLCipher-encrypted database using a 256-bit key generated uniquely on your device. The key is held in the Android Keystore, never leaves your phone, and is not known to us. Other apps on your device cannot read the database.

PIN storage. If you set a PIN, it is stored only as a PBKDF2 salted hash and is never recoverable in readable form. Repeated incorrect attempts trigger an increasing lockout delay.

5. App Lock and Biometrics

You can protect the app with an optional PIN, and with fingerprint or face unlock if your device supports it. Biometric authentication is handled entirely by Android; the app receives only a success or failure result and never sees your fingerprint or face data.

When a PIN is set, the app re-locks after it has been in the background, and its contents are hidden from screenshots and from the Android app-switcher preview.

6. Backups and Exports You Create

FeminaFlow can export your data at your request — as a CSV or PDF report, or as a JSON backup file. These are written only to a location you choose, and only when you ask for it.

Exported files are not encrypted. Once a file leaves the app it is outside the app's protection, so store it somewhere private. Restoring a backup replaces everything currently in the app.

7. Permissions

The app also uses Android's standard background-scheduling permissions (wake lock, restart-after-reboot and background task) solely to deliver the reminders listed above. FeminaFlow does not request the Internet, storage, contacts, location, camera, or microphone permissions.

8. Third-Party Services

The app contains no tracking, analytics, advertising or crash-reporting software, and no advertising identifier is collected or used. It is built on Google's standard AndroidX libraries, which run entirely on your device and transmit nothing. Your data is never shared or sold to insurers, advertisers, or anyone else — there is no mechanism in the app by which it could be.

9. Medical Disclaimer

FeminaFlow provides informational insights and is not a medical device. It does not diagnose, treat or prevent any condition.

Predictions are estimates calculated from the data you enter and from general cycle averages. They vary between individuals and must not be relied upon as contraception, as a fertility treatment, or as a substitute for professional advice. Always consult a qualified healthcare provider about medical concerns.

10. Additional Notes on Security

No method of storage is completely secure. Because nothing is transmitted or stored off-device, the realistic risks are limited to physical access to an unlocked phone and to backup files you have exported yourself.

11. Your Rights (DPDP Act, 2023)

Because FeminaFlow collects no personal data, we hold nothing about you to access, correct, or erase. Your information remains entirely under your control on your own device, and you can view, edit or delete any entry — or clear everything — at any time from within the app, without contacting anyone.

12. Children's Privacy

FeminaFlow is not directed at children under the age of 13, and we do not knowingly collect information from children — consistent with the fact that we collect no information from anyone.

13. Changes to This Policy

Revisions are published on this page with an updated date. If a future version of the app ever introduces network access, advertising, or any form of data collection, this policy will be updated before that version is released, and the change will be described plainly here rather than buried.

14. Contact

Questions about this policy or the app can be sent to contact@asadigital.co.in.