Privacy Policy

1. Who We Are

PeriClue ("we," "us," or "our") is a perimenopause wellness tracking application. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use the PeriClue mobile application and website (collectively, the "Service").

For questions about this policy, contact us at support@periclue.app.

2. Information We Collect

2a. Information You Provide

• Account information: name, email address, and password when you create an account
• Profile information: age, perimenopause stage, focus areas, and preferences set during onboarding
• Health tracking data: symptoms, mood, energy levels, nutrition, medications, supplements, and doctor notes you enter, plus lab reports you upload. Uploaded lab reports and documents are processed by Anthropic's Claude API to extract your results (see Data Sharing).
• AI conversations: messages you send to Ask Peri (our AI assistant)
• Website forms: email address and optional details submitted through the waitlist or beta application forms

2b. Information from Apple Health (HealthKit)

With your explicit permission, the PeriClue app reads health data from Apple Health, including:

• Sleep analysis (duration, stages, efficiency)
• Heart rate, resting heart rate, and heart rate variability (HRV)
• Respiratory rate, blood oxygen, and sleeping breathing disturbances
• Steps, active and basal energy, exercise time, distance, and workouts
• Body, basal, and wrist temperature
• Menstrual cycle data
• Body measurements (weight, body fat, lean mass, waist), blood glucose, and mindful minutes

PeriClue writes back to Apple Health only data you create in the app — workouts you record (and their heart-rate and energy samples), period entries, and body measurements you enter — so the Health app stays in sync. It writes nothing else. HealthKit data is used to calculate your PeriClue scores (Sleep, Restoration, Activity) and generate personalized insights. We never sell, share, or use HealthKit data for advertising or marketing purposes.

2c. Information Collected Automatically

• Device information: device model, operating system version, app version
• Usage data: features used, screens viewed, timestamps (collected via privacy-focused analytics with no health data)
• Network information: IP address (used for rate limiting and security, not tracking)

3. How We Use Your Information

• Provide the Service: calculate health scores, generate insights, personalize recommendations
• AI-powered features: Ask Peri conversations, lab-report extraction, and document/doctor-note extraction are sent to Anthropic's Claude API for processing. Anthropic does not use this data to train its models. Anthropic may retain API inputs and outputs under its standard commercial retention policy unless PeriClue has a separate zero-retention agreement (we do not currently have one).
• Improve the Service: understand usage patterns, fix bugs, improve algorithms
• Communications: send password reset emails, important service updates, waitlist and beta updates, and (with your consent) wellness reminders via push notifications
• Security: rate limiting, fraud prevention, and protecting against unauthorized access

4. How We Store and Protect Your Data

• Database: your data is stored in encrypted PostgreSQL databases hosted by Neon (neon.tech) and Vercel KV (Redis)
• Encryption: all data is encrypted in transit (TLS/HTTPS) and at rest
• Passwords: stored using bcrypt hashing. We cannot read your password
• Access: only the app's backend services access your data programmatically. No human reads your health data

5. Data Sharing

We do not sell your personal information. We share data only with:

• Anthropic (Claude API): AI processing for Ask Peri conversations, lab-report extraction, document/doctor-note extraction, and other AI features. Your data is not used to train Anthropic's models; it may be retained under Anthropic's standard commercial retention policy (no zero-retention agreement is in place).
• Vercel: hosting and infrastructure provider
• Neon: database hosting provider
• Resend: transactional email delivery (password resets, waitlist and beta communications)
• Apple: push notification delivery via APNs, and weather data via WeatherKit (we send only a coarse location; no precise GPS coordinates are stored)
• PostHog: privacy-focused product analytics (behavioral events only — never your health data)

All service providers are bound by their own privacy policies and data processing agreements. We do not share HealthKit data with any third party for advertising, marketing, or data brokerage.

6. Your Rights

• Access: you can view all your data within the app at any time
• Export: download a full copy of your data anytime from Settings → Account → Export My Data, or contact us to request one
• Deletion: you can delete your entire account and all associated data from Settings within the app. Deletion is permanent — your data is erased from our active systems immediately, and any residual copies in encrypted backups are purged within 30 days
• Correction: you can edit your profile and health entries at any time

California residents: we do not sell or share your personal information, and we do not use sensitive personal information beyond providing the Service — so there is no sale or sharing to opt out of, and the right to limit the use of sensitive personal information does not change how we handle your data. You retain the access, deletion, and correction rights described above.

7. Data Retention

We retain your data for as long as your account is active. When you delete your account, all personal data, health records, AI conversation history, and cached scores are permanently deleted from our active systems immediately, with any residual backup copies purged within 30 days. Behavioral analytics events (which never include your health data) are not tied to your health records and may be retained by our analytics provider.

8. Children's Privacy

PeriClue is designed for adults experiencing perimenopause (typically ages 35-58). We do not knowingly collect information from anyone under 18. If we learn we have collected data from a minor, we will delete it promptly.

9. Consumer Health Data (Washington My Health My Data Act)

This section applies to "consumer health data" under the Washington My Health My Data Act (RCW 19.373) and similar consumer-health-data laws. It supplements the rest of this policy.

Categories of consumer health data we collect: data you provide (symptoms, mood, energy, cycle and reproductive information, medications and supplements, lab results, and doctor notes), and health data you authorize from Apple Health (sleep, heart rate and HRV, activity and energy, temperature, menstrual data, blood glucose, body measurements). We also derive health-related scores and insights from this data.

Sources: you (direct entry and uploads), and Apple Health (with your permission, from your Apple Watch and connected devices).

Why we collect it: solely to provide the Service to you — to calculate your scores, generate personalized insights, and answer your questions. We never use consumer health data for advertising, and we never sell it.

Who we share it with: we do not sell consumer health data and do not share it for anyone else's purposes. We share it only with service providers acting on our behalf, under contract, solely to operate the Service: Anthropic (AI processing of conversations, lab reports, and documents), Neon and Vercel (encrypted storage and hosting), and Apple (push notifications). We do not share consumer health data with advertisers, data brokers, or affiliates for their own use.

Your rights: Washington consumers have the right to (1) confirm whether we collect, share, or sell your consumer health data and access it; (2) withdraw consent to our collection and sharing; and (3) have your consumer health data deleted. You can delete all your data in the app (Settings → Account → Delete Account) or by emailing support@periclue.app; we honor verified requests as required by law. Because we do not sell consumer health data, there is no sale to opt out of. To exercise a right or ask a question, contact support@periclue.app; if we deny a request, you may appeal by replying to our response.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes via email or in-app notification. Your continued use of the Service after changes constitutes acceptance of the updated policy.

11. Contact Us

If you have questions about this Privacy Policy or how your data is handled:

• Email: support@periclue.app
• Website: periclue.com