Before the Android app, Ferrabelle was a web app at ferrabelle.app. It is closed to new accounts and stays available to people who already have one. This page is the privacy policy, the Consumer Health Data Privacy Policy under Washington's My Health My Data Act, and the deletion page for those accounts. Ferrabelle is made by Chris Ayers, an independent developer in Washington State ("we," "us"). Contact: ferrabelle@proton.me.
Using the Android app? It keeps everything on your phone. Read the Privacy Policy and the Consumer Health Data Privacy Policy instead.
1. What we store, and why
- Account data: your email address, your password as a salted hash, an optional display name, and your confirmation that you are 18 or older.
- Health and training data you log, listed in the table below.
- Optional: your birth details if you turn on astrology, and an approximate location if you turn on local weather.
We use it only to run the features you use: cycle tracking and predictions, insights, training, reports, sign-in and account security.
| Consumer health data | Examples | Purpose |
|---|---|---|
| Menstrual and reproductive data | Period dates and flow, cycle length, predicted period and ovulation | To track your cycle and make predictions |
| Body signals | Basal and body temperature, resting heart rate, heart rate variability | To detect ovulation and improve predictions |
| Symptoms and day logs | Cramps, mood, stress, sleep, energy, cervical mucus, LH tests, libido and other symptoms you choose to log | To show patterns across your cycle and improve predictions |
| Body data | Weight, body measurements | To track your body over time and against your cycle |
| Training data | Workouts, lifts, personal records | To relate training to your cycle |
| Birth data (optional) | Birth date, time and place | Only if you turn on astrology |
| Location (optional) | Approximate location | Only if you turn on local weather; we round it and never use precise location |
Sources: you, when you enter data, and apps you connect (Apple Health or Health Connect), read-only and only with your consent.
2. Who we share it with
Only service providers that run the service for us, only on our instructions, and never for their own purposes:
| Type of provider | Provider | What they receive |
|---|---|---|
| App and database hosting | Vercel and Neon, United States | Your stored data, encrypted in transit and at rest, to host the service |
| Backups | The developer's own server in Washington, and Google Drive | A nightly copy of the database; the Google Drive copy is encrypted before upload |
| Weather (optional) | Open-Meteo | A rounded location only, if you turn on weather |
| Partner notes (optional) | Discord | Only the short status note an account holder chooses to send to people she picks |
The categories we share are the ones in the first table, only with these providers. We have no affiliates. We do not sell consumer health data, share it with advertisers, data brokers, analytics companies or social networks, or geofence health care facilities. "Sell" has its legal meaning: exchanging consumer health data for money or anything else of value. If that ever changed, we would first need your separate, signed authorization as required by RCW 19.373.070.
3. Your rights
You can, at any time and at no cost, access your data and get a list of every third party we shared it with, withdraw consent, delete your data including from backups, and appeal if we turn down a request. Use export or delete in the web app's account menu, the form below, or email ferrabelle@proton.me. We respond within 45 days, extended once by 45 more days only if reasonably necessary, and we tell you if so. Withdrawing consent for the web app means deleting your account.
Appeals: if we turn down a request, we explain why and how to appeal. Reply to our decision or email ferrabelle@proton.me, and we answer in writing within 45 days. If we deny the appeal, you can contact the Washington State Attorney General at atg.wa.gov/file-complaint.
4. Consent, security and retention
Beyond what a feature you asked for strictly needs, we collect or share consumer health data only with your clear, opt-in consent, asked separately from our terms. When these policies change materially, the web app asks for your consent again before you continue. We protect your data with encryption in transit and at rest, hashed passwords, access controls and per-user data isolation. We keep it until you delete it or your account, plus up to six months in rolling backups.
5. Delete your web app account
Deleting your account removes the account and everything tied to it: cycle, symptom, body, training and temperature logs, connected wearable data, predictions, insights and your profile. It cannot be undone. Data leaves the live database right away and leaves backups when they next roll over, within six months.
Delete it in the web app (fastest)
- Sign in at ferrabelle.app.
- Open the account menu (your profile button).
- Tap Delete my account and confirm. You can export your data first from the same menu.
Or ask us to delete it
If you cannot sign in, enter the email address on your web app account. We check the request, delete the account and its data within 45 days, and email you when it is done.
The general Terms of Service also apply to the web app.