Privacy
Privacy Policy
The short version. Your cycle dates, cycle length, first name and category choices are stored encrypted on your iPhone and are never sent to us, to analytics, or to advertisers. The app sends Apple your purchase, and it sends anonymous funnel events (which screen you were on, which plan you tapped) to our analytics and attribution partners so we can see whether the app works and whether ads are worth running. You can delete everything on the device in one tap.
1. Who we are
Plan by Phase is made by Luis Alarcon, an individual developer based in Austin, Texas, United States ("we", "us"). Contact: hello@planbyphase.com.
2. What the app stores on your iPhone
- The first name you type during setup (optional).
- The start date of your last period, your average cycle length, and the estimated period length used by the planner.
- The planning categories you selected (workouts, work & focus, social battery, skincare).
- Whether you turned on the energy-dip reminder.
- Your onboarding progress while you are still in setup.
This information is consumer health data. It is encrypted with AES-GCM using a key kept in the iOS Keychain (accessible only after the device is first unlocked, and only on that device). It is not included in analytics events, crash reports, or advertising data. It is not backed up to our servers; we do not run servers that receive it.
If you use "Add this week to Calendar", the app writes all-day events (phase name, do / skip lines) to the calendar you chose on your iPhone using Apple's write-only calendar access. The app cannot read your existing events. Those events then live in your calendar provider (for example iCloud or Google) under that provider's privacy terms.
3. What leaves your iPhone
| Recipient | What | Why |
|---|---|---|
| Apple (App Store, StoreKit) | Your subscription purchase and receipt. | Billing. Apple handles payment; we never see card details. |
| RevenueCat (processor) | An anonymous app-user id, purchase receipts, subscription status. | Purchases and entitlements: to confirm your subscription is active, restore purchases, and run paywall experiments. |
| PostHog (processor) | Anonymous funnel events: onboarding screen numbers, quiz option ids, plan category selections, paywall taps, purchase success/failure, feature use (calendar export, period logged). Device model and OS version. No dates, no names, no cycle-day values. | Product analytics: to understand where people drop off and what to fix. |
| AppsFlyer (processor) | App open, onboarding step and subscribe events, the device's advertising identifier only if you tap "Allow" on Apple's tracking prompt, and Apple's SKAdNetwork postbacks. | Install attribution: to learn which ad brought you here so we can stop running the ones that do not work. Health data is never included. |
| Meta Platforms, TikTok, Apple Search Ads | Aggregated, non-identifying conversion signals via AppsFlyer and SKAdNetwork. | Ad measurement. We never send cycle data, names, or health information to any ad platform. |
Your cycle dates, cycle and period lengths and first name stay on your iPhone. They are not sent to us or to RevenueCat, AppsFlyer or PostHog, and they are removed by Settings → Delete all my data or by deleting the app.
These are the categories on our App Store privacy label:
- Identifiers (Device ID), used for tracking: third-party advertising and analytics. Apple's advertising identifier is used for tracking only after you allow Apple's tracking prompt (section 4).
- Identifiers, not linked to you: the anonymous app-user id used by RevenueCat and the analytics identifiers used by PostHog, for analytics and app functionality.
- Purchases, not linked to you: purchase and subscription events, for analytics and app functionality.
- Usage data, not linked to you: product interaction such as screens viewed and buttons tapped, for analytics.
We collect no other category of data. The only other system the app talks to is Apple (StoreKit for purchases, and write-only calendar access for the export described in section 2).
The website planbyphase.com is static and sets no cookies. It loads fonts from Google Fonts, which receives your IP address as part of that request. We do not run advertising pixels on the site.
4. Tracking permission (App Tracking Transparency)
The app asks for Apple's tracking permission after you have seen your sample week. If you allow it, AppsFlyer may use your device's advertising identifier to match installs to ads. If you decline, attribution falls back to Apple's privacy-preserving SKAdNetwork and nothing in the app changes. You can change your choice any time in iOS Settings → Privacy & Security → Tracking.
5. Consumer health data notice
Some states (including Washington under the My Health My Data Act, Nevada and Connecticut) give you specific rights over consumer health data. For Plan by Phase:
- Collected: the cycle inputs listed in section 2, processed only on your device to compute phases and a weekly plan.
- Shared or sold: never. We do not sell consumer health data and do not share it with third parties.
- Sources: only what you type into the app.
- Your rights: access, deletion and withdrawal of consent. Because the data lives only on your iPhone, "Delete all my data" in Settings deletes it completely. To exercise any right or appeal a decision, email hello@planbyphase.com; we respond within 45 days.
6. Your choices and rights
- Delete everything: Settings → Delete all my data removes your cycle map, answers and the encryption key from the device. Deleting the app also removes the data.
- Stop analytics: analytics events are anonymous, but you can stop them by deleting the app. We do not currently offer an in-app toggle.
- Notifications: the energy-dip reminder is a local notification scheduled on your device. Turn it off in Settings inside the app or in iOS Settings.
- Subscription and receipts: managed by Apple in Settings → Apple ID → Subscriptions.
- California and other US state rights: you may request to know, correct or delete personal information and we will not discriminate for exercising those rights. Email us. We do not sell or share personal information for cross-context behavioral advertising.
- EEA / UK: the app is sold in the US App Store first. If you use it elsewhere, the legal basis for the processing above is contract (billing, restoring purchases) and legitimate interests (understanding funnel drop-off, ad measurement), and you have the GDPR rights of access, rectification, erasure, restriction, portability and objection. Email us to exercise them.
7. Children
Plan by Phase is not directed at children under 13 and we do not knowingly collect personal information from them. The App Store age rating is 13+ because the app discusses menstruation in a general wellness context.
8. Security
On-device data is encrypted at rest; the key never leaves the Keychain. Transport to our partners uses TLS. No system is perfectly secure, and because we do not hold copies of your cycle data we cannot restore it if you lose your device without your own iCloud backup.
9. Retention
On-device data stays until you delete it. Partner data is retained under each partner's policy: RevenueCat keeps purchase records for the life of the subscription plus accounting requirements; PostHog analytics are retained for 12 months; AppsFlyer attribution data for 24 months.
10. Changes
We will post updates here with a new effective date and, for material changes, show a notice inside the app before the change takes effect.
11. Contact
Luis Alarcon · Austin, Texas, United States · hello@planbyphase.com