Privacy Policy — Maré
Last updated: October 14, 2026
Maré is a menstrual cycle tracking app for iOS and Android. This policy explains what data we process and how. Our principle is simple: your data is yours and stays on your device by default.
1. Data we process
Without an account (default): all your entries — period dates, flow, symptoms, mood and intimacy logs — stay only on your device. Those entries are not sent to servers and we have no access to them.
With an account (optional, to sync across devices):
- Account identifier: when you sign in with Apple or Google, we receive an account identifier and, when the provider sends them, your email and your name. We never store your password.
- Synced cycle data and settings: the same entries above, copied to the cloud so they are available on your devices, and also your settings: last period date, cycle and period length, birth control method (with its renewal date and reminders), goal, the life stage you declared (perimenopause or postmenopause) and the hormone therapy start date, if you enter them, the reminders you created and, if you filled them in, your name and the day and month of your birthday (no year). All of this is encrypted on your device before it reaches the cloud (see section 5).
- Support (optional): if you write to support from the app, we keep what you write and our replies, along with technical details that help us answer: OS, app version, language and, depending on how you got there, your plan, the sync error or what you searched for in the app’s help. These conversations are not encrypted like your entries: our team reads what you write there. We never attach cycle entries. How long we keep them is in section 4.
- Subscription (if you subscribe to Maré Plus): the purchase is made and charged by the App Store or Google Play. We never receive or store your card number, billing address or any other payment detail — those stay with the store. What the store tells us, and what we keep tied to your account identifier, is: the plan, how long the subscription is valid, whether auto-renewal is on, whether a charge has failed and, for each charge, the date, the amount, the currency, the store’s transaction identifier and whether it was refunded. We use this to unlock Maré Plus on your devices (including one on the other platform), to show your billing history inside the app, and so support knows the status of your subscription when you ask for help. These are account data — not health data.
-
Referral program (optional): if you use “Invite a friend”, we process a referral code and invite records (who invited whom, status and dates) tied to your account identifier. These are account metadata — not health data — used only to grant the reward and prevent fraud.
- Maré Together (optional): if you link someone to follow your cycle, we store an encrypted derived summary of your cycle that only that person can open. The summary contains: cycle day, phase, whether you’re on your period today, the next period prediction, the estimated fertile window, the day’s chance of conception (low, medium or high), how reliable the prediction is, and up to three recent period starts. If the birth control method you use suppresses the cycle, the summary carries no prediction, fertile window or chance of conception, only a flag saying the prediction is paused: the method itself is not sent, but that flag lets the person know you use a method of that kind. If you declared perimenopause or postmenopause, the summary only carries that stage if you turn on the option to share it; it is off by default. It does not contain symptoms, moods, intimacy entries, flow intensity, which birth control method you use, whether you are on hormone therapy, goal, reminders or your full history — those stay with you. The sharing is one-way and read-only: the person following along cannot edit anything. You can end it at any time, and when you do the summary is deleted; the other person can also end it from their side.
Crash reports (always): when the app crashes or hits an error, we send a technical report to Firebase Crashlytics — device model, OS and app version, device language and region, the error’s stack trace, a technical log of the app’s latest operations (for example, “sync started”), a random installation identifier and, if you have an account, your internal account identifier — never your email or your name. No cycle entry, symptom or date is included in those reports.
App usage data (always): we use Google Analytics for Firebase to understand how the app is used and to improve it — which screens are opened, when setup is completed, when the subscription screen appears, invites sent, notifications opened and purchases completed in the store. Sent along are a random installation identifier, your account identifier (when signed in), device model, OS and app version, language and approximate city and country, derived from the IP address. No cycle entry, symptom, mood, flow, birth control method, goal or date is included in these events — we know you logged a day, never what you logged. We do not use the device advertising identifier and this data is not used for personalized advertising.
Campaign measurement: we promote Maré with ads on Google and need to know how many installs each campaign brought. To do that, Google Analytics tells Google Ads that the app was opened for the first time. On iPhone this attribution is done in two ways, both in aggregate and without identifying you or your device: by Apple (SKAdNetwork) and by a Google measurement that runs on the device itself, checks whether the install came from an ad and sends Google only that result. On Android, it is done by the install source information Google Play hands to the app. We do not use the advertising identifier, we do not build a profile of people who use the app, and we show no ads inside it.
We do not collect precise location or contacts, and we use no advertising trackers.
2. How we use it
To run the app, to measure and improve the product (usage data) and, if you choose, to sync your data across your devices and to show the Maré Together summary to the person you choose to link.
We do not sell your data and do not share it with third parties for personalized advertising. Google Ads receives only the install notice described above, to measure the reach of our campaigns. The only sharing with another person is Maré Together, which you start, is limited to the summary described above, and can be ended whenever you want.
3. Where data is stored
Optional sync uses Firebase (Google) — Authentication for login and Cloud Firestore to store your entries, under your account. Google acts as an infrastructure processor. Login uses Sign in with Apple and Google. Usage data is stored in Google Analytics, also run by Google.
4. How long we keep it
| What | For how long |
|---|---|
| Entries on your device (no account) | As long as the app is installed. “Delete everything” removes them at once, and uninstalling takes them with it. We hold no copy. |
| Entries synced to the cloud | As long as your account exists. “Delete everything” also erases the cloud copy, immediately. |
| Account identifier (Apple/Google) | As long as your account exists. |
| Encryption material (salt, protected key, hint) | As long as your account exists. The hint is erased as soon as you remove the secret passphrase. |
| Recovery copy of the key | Only while support recovery is turned on. Turning it off, or removing the passphrase, erases the copy at once. |
| Device notification token | Erased when you sign out and when the account is deleted. |
| Subscription and billing history | As long as your account exists. After the account is deleted, the record is kept, unlinked from it (see below). |
| Referral program (code, invite records) | As long as your account exists. After the account is deleted, the code is deactivated and the invite record is kept, tied only to an internal identifier (see below). |
| Support conversations (what you write and our replies) | Up to 90 days after the conversation is closed, or sooner if you delete your account. They are not end-to-end encrypted: our team reads what you write there — and only that. We never attach cycle entries, symptoms or notes. |
| Support unlock or recovery requests | Up to 12 months, or sooner if you delete your account — a daily job removes expired and orphaned requests. |
| Crash reports | Up to 90 days, the Firebase Crashlytics retention period. |
| App usage data | Up to 14 months, the retention period set in Google Analytics. |
Deleting your account (Settings › Account › Delete account) immediately erases, in our systems, the account itself and what is stored in it: entries, settings, encryption material, support conversations and unlock or recovery requests. The Maré Together link and the shared summary are erased too; if you were the one following someone, you leave the link and the other person only sees that it ended. On your device, it erases history, settings, reminders and the Maré Together link, and the app goes back to a fresh install — only the dates of first use and of the free trial start stay on the device, so the trial does not start over. If you want to keep your history, export it first under “Privacy and data”.
Some information is still kept after deletion, with no automatic removal date:
- The record of the subscription bought on the App Store or Google Play, with its charges (date, amount and whether there was a refund), unlinked from your account — to reconcile with the store and handle refunds.
- The log of any actions support took on your account and, if you used “Invite a friend”, the invite record — for support auditing and fraud prevention. They are tied only to an internal identifier that no longer matches any account.
- Your referral code, if you had one, deactivated: no one can use it anymore.
None of this contains cycle entries or any other health data. Crash reports and usage data already sent follow the periods in the table above.
Apart from what this section describes, we do not keep your data beyond these periods and we keep no copy of what you delete.
5. Security
- Your entries and settings are always encrypted on your device before reaching the cloud, and the dates on which you logged something are not visible to the server.
- Secret passphrase (optional): without one, the key that decrypts your data is kept in your account — that is what lets a new device sync with just a login, but it also means we could technically access your content. Setting a passphrase in Settings → Account → Security puts that key behind it.
- Support recovery (your choice): when you create the passphrase, you decide whether you
want to be able to turn to support if you forget it.
- Recovery on (the default): we keep a copy of your key, protected by a key of ours held in a Google Cloud key vault (KMS). That is what lets us give your history back if you forget the phrase — and it means we could technically decrypt your data. Every use of that key is logged, the request goes through a 24-hour wait, and you are notified in the app.
- Recovery off: the encryption is end-to-end — no one but you can read it, not even us. If you forget your passphrase, cloud data cannot be recovered; support can only unlock the account by erasing what is stored.
- Cloud access is restricted by per-account rules — only you can access your data.
- Backend abuse protection via Firebase App Check.
- In the referral program, we use device attestation (Apple DeviceCheck and Google Play Integrity) to prevent fraud. This does not identify you or access your health data — it only confirms the request comes from a legitimate device/app.
- Encrypted transport (TLS/HTTPS).
The Maré Together key
The shared summary is encrypted with a key specific to the link, different from the one protecting your entries. That key travels only inside the invite link — in the part browsers do not send to the server — and is stored on both devices. We do not hold that key, so we cannot read the summary you share.
6. Your rights
At any time, within the app, you can:
- Export all your data (portability).
- Delete everything — removes data from the device and, if you have an account, from the cloud too.
- Delete your account — removes your account and the associated cloud data, with the exceptions described in section 4.
7. Health and purpose
Maré predictions are estimates based on your history. The app is not a contraceptive method and does not confirm ovulation or pregnancy.
8. Minors
Maré is not directed to children under 13 and we do not knowingly collect their data.
9. Changes
We may update this policy. Significant changes will be announced in the app or here, with a new update date.
10. Contact
Questions or requests: ccs.gaming.factory@gmail.com.