PeriLogPrivacy policy
We do not sell your data, we do not use your health entries to target advertising, and we hold no readable copy of them. Without a cloud backup account, your cycle and symptom history exists only on your phone, and we have nothing on a server to read, export or delete. There is no social feature, no clinical register and no sharing with anyone.
Who we are
This policy covers the PeriLog Android app, package
com.luckytools.perimenopause_tracker, as published on Google Play by Cloudy NI
(sole trader), together with the cloudyni.com pages that support it: this policy, the terms of use and the data deletion
page.
It describes the build that is on Google Play now. Where a feature is optional this policy says so, and where the app keeps nothing on our servers it says that too. We do not sell personal data.
What stays on your device
The following is written into the app's own private storage on your phone and is never sent to us:
- Your cycle, symptom, mood, sleep, medication and goal entries.
- Photo journal entries, including the app's own copy of each picture.
- Reminder schedule, theme, text size and the optional app lock.
- Any JSON backup or PDF report you export, until you delete the file.
- The locally cached Premium entitlement for this install.
Clearing the app's storage or uninstalling the app deletes all of it at once, without contacting us. The data deletion page lists the steps.
What the app can access
The app asks Android for as little as it can. This is the complete list for the published build:
- Notifications and scheduled reminders, only if you switch a reminder on
- Run at start-up, so a reminder you set still fires after a restart
- Vibration, for reminder alerts
- Internet access, for free-tier advertising, Google Play purchases and the optional cloud backup
- None for your body or your photos — the app requests no location, camera, microphone, contacts, phone or storage permission
An item above is used only while the feature that needs it is running, and nothing beyond this list is accessed by the app.
Information the app handles
This is the full picture for the published build: everything the app records, processes or transmits, and where it goes.
- Cycle and symptom entries you record. Periods, flow, symptoms, mood, sleep, energy, medication and the rest are written to the app's private database on your device. They are not sent to us and we cannot see them unless you deliberately create an account and leave cloud backup switched on.
- Photo journal entries. A journal entry stores the path of a photo already on your device, which the screen copies into the app's own private folder, plus any caption and tags you add. The app asks for no camera or gallery permission, and the picture itself is not uploaded.
- Goals and notes. Anything you type into a goal or note stays in the same local database.
- Settings and reminders. Theme, cycle-length defaults, reminder times, text size and the optional app lock.
- An optional account email, only if you choose to create a cloud backup account.
- Advertising data processed by Google AdMob on the free tier (see the advertising section).
- Correspondence you send to support.
Optional encrypted cloud backup
Cloud backup is optional and off by default. PeriLog is complete without an account — every feature works with your data on the phone. If you choose Settings → Cloud backup & sync and create an account, your logs are encrypted on your device with AES-256-GCM using a key derived from your password (PBKDF2-HMAC-SHA256, 120,000 iterations). Only that ciphertext leaves the phone: your account holds one encrypted backup record, and the key stays in this device's secure storage. Authentication and storage are provided by Supabase, our processor, with the project hosted in the United Kingdom (London, eu-west-2).
Because your password is what decrypts the backup, we cannot read it, we cannot recover it for you, and a password reset cannot unlock an older backup. Signing in on another device with the same email and password restores the same encrypted data. Signing out removes the local key. One encrypted row per account is all that exists server-side — there is no readable copy, no analytics copy and no second database.
If you choose to use that optional feature, these rules apply:
- Your logs are encrypted on your device before upload. The server stores ciphertext it cannot read, and so can we.
- A forgotten backup password cannot be recovered by us and the backup cannot be decrypted without it. There is no master key and no reset. Do not treat cloud backup as your only copy of anything you cannot afford to lose.
- The backup is a convenience, not a medical record. Do not rely on it for clinical purposes, and keep your own exports (the app can write a JSON backup file or a PDF report) if the data matters to you.
- You may delete the account and its encrypted backup at any time — from inside the app or by asking us. We complete verified deletions within 30 days.
Deleting the account deletes the stored backup with it. Both routes — the in-app one and the email one — are set out on the data deletion page.
Sensitive information
PeriLog exists to record information about your body and your health, so nearly everything in it is the most sensitive category of personal data. We treat it that way: it is written to your device's private storage, it is excluded from analytics, and it is not used to build a profile of you, to target advertising or to train anything.
We do not sell it and we do not share it with advertisers, insurers, employers or data brokers. It reaches a server only if you deliberately create a cloud backup account, and even then only as a blob encrypted with your password that we cannot read. You can erase it at any time from inside the app.
Where that is special category data under UK GDPR — health information, for example — the basis for using it is your explicit consent, given when you choose to record it, and withdrawn by deleting the entry. If the text above says the record stays on your device, your device is the only place it is processed.
Children and families
PeriLog is designed for adults tracking perimenopause and menstrual health, and it is not directed at children. We do not knowingly collect personal information from a child. If a child has used the app on a shared device, clearing the app's storage or uninstalling it removes everything held locally, and you can contact support@cloudyni.com about any account or support email.
Advertising
The free version shows banner and interstitial advertising served by Google AdMob, with consent collected through Google's User Messaging Platform where the law requires it. Google and its partners may process your advertising ID, IP address and device information to serve and measure ads. The app requests no location permission, and no entry you make — cycle, symptom, mood or photo — is ever passed to AdMob or to any advertiser. An active Premium subscription removes advertising entirely.
Where the law requires it, the app asks for your advertising consent through Google's User Messaging Platform before it requests an advertisement, and you can change or withdraw that choice from the app's privacy options at any time.
Advertising is served and measured by Google and its partners under Google Privacy Policy and AdMob & privacy. You can reset or delete your advertising ID, and turn personalised advertising off, in Android Settings → Privacy → Ads.
Buying a paid product removes advertising for as long as that product is active; the next section explains what we learn from Google Play.
Analytics, diagnostics and crash reports
This release contains no Google Analytics for Firebase, no Crashlytics and no third-party crash reporter, so nothing about how you use the app is reported anywhere.
This app contains no third-party analytics or crash-reporting SDK. Nobody receives a record of how you use it, there is no session recording and there is no crash telemetry, so a crash stays on your phone — which also means we cannot see it unless you tell us. The only outside software in the app is Google's: AdMob for the ads on the free tier and Play Billing for purchases. Google Play itself collects install and payment information under Google's own privacy policy.
Purchases and subscriptions
Anything you buy in PeriLog is sold through Google Play Billing. Google is the merchant of record, so your payment method, billing address and the amount you paid are held by Google and never shared with us.
To unlock a paid feature the app asks Google Play whether the product is active. The product identifiers are on the terms of page, and the price is always the amount shown on the Google Play purchase sheet when you confirm it. See Google Play Terms of Service and Google Privacy Policy.
A subscription is cancelled in Google Play, not by deleting anything here, and deleting your data does not cancel it.
How long we keep things
Your entries stay on your device until you delete them, clear the app's storage or uninstall the app. If you create an account, the encrypted backup is kept until you delete it or delete the account from inside the app, after which the record is removed from our processor's storage. Deletion requests sent by email are completed within 30 days. Support correspondence is kept only as long as needed to answer the query. Google keeps purchase records as merchant of record, and the advertising identifiers held by Google are governed by Google's retention rules, not ours.
A cloud copy is kept only for as long as the account exists; deleting the account, or asking us to delete it, erases it.
Google keeps purchase records and advertising data under its own policies, as the store and as an advertising provider rather than on our behalf.
Your rights
Under UK GDPR you can ask us for a copy of your information, ask us to correct or erase it, restrict or object to how we use it, ask for it in a portable format, and withdraw consent where consent is what we rely on.
Most of what this app holds is on your device, so you are the fastest route to erasure: delete the entries, clear the app's storage, or uninstall the app. Where an account exists, deleting it erases the copy we hold: see the data deletion page.
Email support@cloudyni.com for any of these. We answer within one month and we do not charge for a first request. You can also raise a complaint with the ICO if you are unhappy with how we have handled your information.
How we protect your data
Data kept by the app sits in its private app storage, inside Android's application sandbox, protected by your device lock and by Android's file-based encryption. Anything the app sends or receives travels over HTTPS.
Cloud data is stored on EU infrastructure by our processor, transferred over TLS, and reachable only with the credentials that belong to the account.
No system is perfect. If we learn of a breach that puts your information at risk we will tell you and the ICO as UK GDPR requires; where we hold nothing about you, there is nothing for a breach to expose.
Changes to this policy
This page was last updated on 30 September 2026, and it describes the build that was on Google Play on that date. If a change affects what the app collects or where it goes, we update this page and the date above before the change ships. If the change is significant we will say so on the app's Google Play listing.
Contact us
Cloudy NI (sole trader) is a sole trader based in Northern Ireland, registered with the ICO for data protection under reference ZC222090.
Email support@cloudyni.com for privacy questions, a purchase problem or a deletion request. We answer data-protection requests within one month and deletion requests within 30 days.
The exact steps for deleting data, and what to send us if you cannot use them, are on the data deletion page.