Privacy Policy — Maré
Last updated: August 26, 2026
Maré is a menstrual cycle tracking app for iOS and Android. This policy explains what data we process and how. Our principle is simple: your data is yours and stays on your device by default.
1. Data we process
Without an account (default): all your entries — period dates, flow, symptoms, mood and intimacy logs — stay only on your device. Nothing is sent to servers and we have no access to it.
With an account (optional, to sync across devices):
- Account identifier: when you sign in with Apple or Google, we receive an account identifier and, when available, your email. We never store your password.
- Synced cycle data: the same entries above, copied to the cloud so they are available on your devices.
-
Referral program (optional): if you use “Invite a friend”, we process a referral code and invite records (who invited whom, status and dates) tied to your account identifier. These are account metadata — not health data — used only to grant the reward and prevent fraud.
- Maré Together (optional): if you link someone to follow your cycle, we store an encrypted derived summary of your cycle that only that person can open. The summary contains: cycle day, phase, whether you’re on your period today, the next period prediction, the estimated fertile window, how reliable the prediction is, and up to three recent period starts. It does not contain symptoms, moods, intimacy entries, flow intensity, birth control, goal, reminders or your full history — those stay with you. The sharing is one-way and read-only: the person following along cannot edit anything. You can end it at any time, and when you do the summary is deleted; the other person can also end it from their side.
Crash reports (always): when the app crashes or hits an error, we send a technical report to Firebase Crashlytics — device model, OS version, app version, the error’s stack trace and a random installation identifier. No cycle entry, symptom or date is included in those reports.
We do not collect location or contacts, and we use no advertising trackers.
2. How we use it
To run the app and, if you choose, to sync your data across your devices and to show the Maré Together summary to the person you choose to link.
We do not sell your data and do not share it with third parties for advertising. The only sharing with another person is Maré Together, which you start, is limited to the summary described above, and can be ended whenever you want.
3. Where data is stored
Optional sync uses Firebase (Google) — Authentication for login and Cloud Firestore to store your entries, under your account. Google acts as an infrastructure processor. Login uses Sign in with Apple and Google.
4. How long we keep it
| What | For how long |
|---|---|
| Entries on your device (no account) | As long as the app is installed. “Delete everything” removes them at once, and uninstalling takes them with it. We hold no copy. |
| Entries synced to the cloud | As long as your account exists. “Delete everything” also erases the cloud copy, immediately. |
| Account identifier (Apple/Google) | As long as your account exists. |
| Encryption material (salt, protected key, hint) | As long as your account exists. The hint is erased as soon as you remove the secret passphrase. |
| Recovery copy of the key | Only while support recovery is turned on. Turning it off, or removing the passphrase, erases the copy at once. |
| Device notification token | Erased when you sign out and when the account is deleted. |
| Referral program (code, invite records) | As long as your account exists. |
| Support unlock or recovery requests | Up to 12 months, or sooner if you delete your account — a daily job removes expired and orphaned requests. |
| Crash reports | Up to 90 days, the Firebase Crashlytics retention period. |
Deleting your account (Settings › Delete account) erases, immediately and in our systems, everything held in the cloud along with the account itself. Data on your device stays there, under your control, and you can remove it with “Delete everything” or by uninstalling the app.
We do not keep your data for other purposes beyond these periods, and we keep no copy of what you delete.
5. Security
- Your entries are always encrypted on your device before reaching the cloud, and the dates on which you logged something are not visible to the server.
- Secret passphrase (optional): without one, the key that decrypts your data is kept in your account — that is what lets a new device sync with just a login, but it also means we could technically access your content. Setting a passphrase in Settings → Security puts that key behind it.
- Support recovery (your choice): when you create the passphrase, you decide whether you
want to be able to turn to support if you forget it.
- Recovery on (the default): we keep a copy of your key, protected by a key of ours held in a Google Cloud key vault (KMS). That is what lets us give your history back if you forget the phrase — and it means we could technically decrypt your data. Every use of that key is logged, the request goes through a 24-hour wait, and you are notified in the app.
- Recovery off: the encryption is end-to-end — no one but you can read it, not even us. If you forget your passphrase, cloud data cannot be recovered; support can only unlock the account by erasing what is stored.
- Cloud access is restricted by per-account rules — only you can access your data.
- Backend abuse protection via Firebase App Check.
- In the referral program, we use device attestation (Apple DeviceCheck and Google Play Integrity) to prevent fraud. This does not identify you or access your health data — it only confirms the request comes from a legitimate device/app.
- Encrypted transport (TLS/HTTPS).
The Maré Together key
The shared summary is encrypted with a key specific to the link, different from the one protecting your entries. That key travels only inside the invite link — in the part browsers do not send to the server — and is stored on both devices. We do not hold that key, so we cannot read the summary you share.
6. Your rights
At any time, within the app, you can:
- Export all your data (portability).
- Delete everything — removes data from the device and, if you have an account, from the cloud too.
- Delete your account — removes your account and all associated cloud data.
7. Health and purpose
Maré predictions are estimates based on your history. The app is not a contraceptive method and does not confirm ovulation or pregnancy.
8. Minors
Maré is not directed to children under 13 and we do not knowingly collect their data.
9. Changes
We may update this policy. Significant changes will be announced in the app or here, with a new update date.
10. Contact
Questions or requests: ccs.gaming.factory@gmail.com.