Thank you for choosing to be part of our community.
As fertility awareness users who understand first-hand the sensitive nature of menstrual cycle charting, The Body Literacy Collective CIC (“we”) are committed to ensuring the highest standards of data privacy and security within the Read Your Body mobile application (“the app”). This is a responsibility that we take extremely seriously.
In summary, it’s your data in your hands: by default no personally identifying details are collected through the app and charting data is stored only on your device for maximum privacy. We can never see, share, sell or do anything with your charting data.
Please note that this means we cannot assist with data recovery if your device is ever lost, stolen or broken. Optional encrypted backup accounts are available in the app for peace of mind. You can also include Read Your Body in your iCloud / Google backups and export a copy of your charting data for safekeeping at any time.
Please take the time to read this policy carefully so that you can make an informed decision about your use of the app. If you have any questions, don’t hesitate to email us: [email protected]
Please note that this policy relates only to the Read Your Body mobile application. To avoid any confusion, we have a separate policy for our website & email communications that you can read by switching tabs above.
1) Who we are
The app owner and data controller is The Body Literacy Collective CIC.
We are a non-profit that equips people with the information and tools they need to understand their bodies and menstrual cycles.
Registered address: Another Place, 3-9 Belfast Road, London, N16 6UN, United Kingdom
Data protection officer: Laura Robson, [email protected]
2) Data that we collect
By default we do not collect any personally identifying details through the app. Users are not required to create a user account so by default we do not collect user names, email addresses or any other personally identifying details.
Users may choose to enter personally sensitive charting data into the app including menstrual cycle start dates, cervical fluid observations, temperature readings, hormone test results, sexual activity, exercise and lifestyle habits, cyclical symptoms. By default all charting data is stored only on the user’s device so we do not have access to it.
Users may choose to register for an encrypted backup account in the app in order to avoid the risk of data loss. This is an optional app feature. If they register for this feature then they will be asked to enter their name, email address, a password and a personal encryption key of their choice. User names and email addresses are stored securely on our servers. Backups of charting data and settings are encrypted before they leave the user’s device. They are stored encrypted on our servers and only ever decrypted if the user chooses to restore them onto their device using their personal encryption key. Backups can only ever be decrypted into a readable format using this personal encryption key. With the optional encrypted backup account in use in the app we never have access to any charting data and settings in a readable format.
Our privacy promise means that if a user’s device gets lost, stolen or broken then we are unable to directly assist with data recovery. For peace of mind users may choose to enable iCloud / Google backups for the Read Your Body app alongside standard on-device storage and the optional encrypted backup account feature mentioned above. Users may also choose to export a copy of their charting data and settings from the app at any time in order to create a manual backup for safekeeping.
We have access to standard install analytics via the App Store / Google Play. This includes an overview of device types and operating systems (e.g. iPhone 7, iOS 13.6, etc). It also includes crash information if users choose to submit this. It does not include any personally identifying details such as user names or email addresses.
3) Third party services
We use RevenueCat to allow users to sync payments across mobile operating systems, for example, between an Android phone and an iPad tablet. If the user has chosen not to register for an encrypted backup account in the app, they appear with an anonymous user ID in our RevenueCat dashboard. If the user has chosen to register for an encrypted backup account in the app, their name and email address appears in our RevenueCat dashboard – this allows us to provide a higher level of support in the case of any payment-related errors or enquiries. RevenueCat records when the user last opened the app in order to determine whether they are active (defined as having opened the app in the last 28 days) or not.
We use Sentry to collect information about run-time errors within the app. This tool helps our app developers to discover, triage and troubleshoot errors in real time. It does not collect any personally identifying details about users nor does it transmit any personally sensitive charting data. Error logs may sometimes include user actions relating to data entry (e.g. when user taps to select peak day interpretation and no fluid option is selected, XYZ error occurs) however Sentry does not collect, track or transmit actual charting data.
The app does not use any other third party analysis or tracking services.
4) Data that we use / share
By default we do not have access to any charting data entered into the app. We therefore cannot and do not use this data in any way. We do not share any charting data with third parties.
If the user chooses to register for an encrypted backup account in the app then we store up to five recent backups of their charting data and settings on our servers at any time. The servers are managed by our UK-based app developers. Backups of charting data and settings are encrypted and therefore never accessible to us in a readable format. We do not use the encrypted files for any purpose nor do we share the files with any third parties.
Standard install and performance data are reviewed by The Body Literacy Collective CIC and our app developers in order to inform crash fixes and improvements to the app. Payment data in RevenueCat are used by The Body Literacy Collective CIC to provide any payment-related support to users as required.
5) Device permissions
The app may request access or permissions to certain features in the user’s device including the camera / photos (for uploading photos / saving chart images), SMS messages (for partner notifications), and storage (for data import / export). If the user wishes to change the app’s access or permissions, they may do so in their device’s settings at any time.
6) Data exported by the user
Charting data entered into the app may be exported (in the form of a data file, chart image or cycle stats image) by the user to a number of destinations via their device’s system share settings. It is the user’s responsibility to ensure that other people do not gain access to their device and these export functions within the app.
7) Data pulled from third party applications
The app includes an optional Tempdrop integration feature. This allows the user to pull basal body temperature data from the Tempdrop app associated with the Tempdrop wearable thermometer.
The app does not request data from the Tempdrop app without the user’s permission. After the user grants permission to connect their Tempdrop account via the app’s Tempdrop integration settings screen, the app requests basal body temperature data from the Tempdrop app only when instructed by the user via the app’s data or Tempdrop integration settings screen. Permission can be revoked by the user at any time by selecting the option to disconnect their Tempdrop account in the app’s Tempdrop integration settings screen.
Basal body temperature data pulled from the Tempdrop app is stored in the same way as all other data entered into the app: only on the user’s device and optionally also their encrypted backup account.
8) User communications
Users may sign up for email communications about new app features and other developments via our website or when they register for an encrypted backup account inside the app.
9) Your rights
You may exercise your rights to request information on your data that is processed by us and lodge a complaint with the relevant supervising authority if you believe that we are processing your personal data under violation of applicable data protection regulations.
10) Giving and withdrawing your consent
11) Updates to this policy
12) Young users
The app is not directed at children. We do not knowingly handle data of people under the age of 13 years. By accepting this policy and using the app you are confirming that you are at least 13 years old.
The Read Your Body mobile application is not a contraceptive device. It’s a data recording tool that allows users to track various menstrual cycle biomarkers. Users may interpret their charts however they choose in order to meet a range of goals.
Users wishing to chart their menstrual cycles in order to avoid pregnancy are strongly recommended to seek learning support from a certified educator. The app is not designed to teach or tell users how to avoid pregnancy. It must be used only as a data recording tool.
The user shall take all necessary steps to back up their charting data. The Body Literacy Collective CIC cannot be held liable for any data loss . All information contained in the app is for educational purposes only. Information provided is not medical advice and it should not be treated as such.
The user assumes sole responsibility for all risks and outcomes connected with or arising out of their use of the app, including the possibility of unintended pregnancy.