This is the Consumer Health Data Privacy Policy for Ferrabelle, made by Chris Ayers, an independent developer in Washington State ("Ferrabelle," "we," "us"). It covers consumer health data as defined by the Washington My Health My Data Act ("MHMDA"). It is separate from our general Privacy Policy and controls if the two conflict. We give these protections to everyone, wherever they live. Ferrabelle is only for people 18 and older.
The Android app: your health data is processed only by the app on your own phone. We do not receive it, store it, access it or sell it. It leaves your phone only when you send it, to services you pick. The rest of this policy explains the details, including the older web app, which has its own page.
1. The Ferrabelle Android app
Everything you log or import stays in the app's private storage on your phone. We run no server for the app, and the app has no account and no analytics or advertising code of our own. That means we never receive or sell consumer health data from the Android app.
On your phone, the app processes the health data you choose to give it: period dates and flow, symptoms, mood, energy, libido and sexual activity entries, cervical mucus, ovulation tests, temperatures, resting heart rate, heart rate variability, sleep, weight and body measurements, workouts, cycle predictions, and, if you turn on astrology, your birth details. It comes from you and, if you allow it, from Health Connect. It is used only to show your cycle, predictions, readiness score, training forecast, insights and reports.
Data leaves your phone only when you choose it:
- AI assistant (off by default): when you send a question, the text you preview, made of your cycle status and your own hand-entered logs, goes to the AI service you picked. Raw Health Connect values are never included; your cycle predictions, which Health Connect data can influence, can be. While the AI assistant is on, Google's on-phone AI library can also send Google usage and error statistics, never your question or your data.
- Partner messages (off by default): short notes sent through the route you picked (your own text message, Discord or Telegram). By default they say only whether your period started, could start any day now, or is about a week or more away. If you set a partner to Detailed, that partner also gets the details you tick and confirm: your phase, cycle day, days until your period, common symptoms of your phase, symptoms you logged today, your energy and mood in a word, and ways to help. They never mention fertile days, ovulation, cervical mucus, temperature, sexual activity, weight, body measurements, lab values or any Health Connect value. With the AI assistant writing them, the AI service you picked receives the same details.
- Daily Cosmic + Cycle report (Pro, off by default): the first time you open Ferrabelle after your morning time, your phase, cycle day, next period estimate, symptoms you logged in the last few days, the moon phase, your sun sign if astrology is on and today's pressure if you track it go to the AI service you picked, which writes the report. Never your name or fertile days. The report shows what was sent.
- Barometric pressure (off by default): only your picked city's position, rounded to about 11 km, goes to MET Norway for the weather forecast. No health data is sent, and the app never reads your phone's location.
- Backups: files encrypted on your phone with your passphrase, saved where you choose. No one, including us, can read them without that passphrase.
- Android backup: if backup is on in your phone's settings, Android can back up the app's main database to your Google account under Google's terms.
- Moving to a new phone: all your data goes straight from your old phone to your new one over your own Wi-Fi, encrypted with a one-time passphrase. It never goes to us or anyone else.
- Monthly recap card (Pro): an image of your month's training numbers only, never cycle, symptom, weight or lab data, made on your phone and shared only where you choose.
- Sharing with a coach (Pro): a text summary of your recent training that you send where you choose. It never includes cycle, symptom, weight or daily-log data, and workouts that came only from Health Connect are included only if you tick them.
- Exports and reports: a data export file, or the printable report (Pro), that you create and share yourself.
These transfers happen only when you turn a feature on, go only to the service you pick or the one named for that feature, and never to us. You can turn each one off at any time in the app's Settings.
2. The older web app
The older Ferrabelle web app at ferrabelle.app is closed to new accounts. For existing accounts, which do store data on our servers, the complete Consumer Health Data Privacy Policy (categories, purposes, sources, sharing and rights) is on the web app page.
3. This website
This website collects no consumer health data. What the tester sign-up form collects is described in our Privacy Policy.
4. What we never do
We do not sell consumer health data. We do not share it with advertisers, data brokers, analytics companies or social networks. We do not geofence health care facilities to locate, track or message anyone.
"Sell" has its legal meaning here: exchanging consumer health data for money or anything else of value. If that ever changed, we would first need your separate, signed authorization as required by RCW 19.373.070, and you would never have to give it to use Ferrabelle.
5. Your rights
You can, at any time and at no cost:
- Access your consumer health data and get a list of every third party we shared it with;
- Withdraw consent to collection or sharing;
- Delete your consumer health data, including from backups; and
- Appeal if we turn down a request.
Android app: your data is on your phone and in the copies you make, so you exercise these rights there. Export it or use Settings → Your data → Delete all data. Backup files you saved, and Android's backup of the app, stay where they are kept until you delete them there. We hold nothing to hand over or delete.
Web app accounts: see the web app page. We respond to any request within 45 days, extended once by 45 more days only if reasonably necessary, and we tell you if so.
Appeals: if we turn down a request, we explain why and how to appeal. Reply to our decision or email ferrabelle@proton.me, and we answer in writing within 45 days. If we deny the appeal, you can contact the Washington State Attorney General at atg.wa.gov/file-complaint.
6. Consent
Beyond what a feature you asked for strictly needs, we collect or share consumer health data only with your clear, opt-in consent, asked separately from our terms and never through misleading design. Consent to collect and consent to share are asked separately. Saying no does not stop you from using Ferrabelle's core features. To withdraw consent in the Android app, turn the feature off or delete your data in Settings.
7. Security
The Android app keeps data in private app storage and encrypts backup files with your passphrase.
8. How long we keep it
Android app: on your phone, and in any backup you make, until you delete it.
9. Changes
We will post changes here with a new effective date. For material changes, the app asks for your consent again before you continue.
Questions about this policy: ferrabelle@proton.me.