Privacy
Privacy Policy
The short version. Your cycle dates, cycle length, first name and category choices are stored encrypted on your iPhone and are never sent to us, to analytics, or to advertisers. The app sends Apple your purchase, and it sends funnel events (which screen you were on, which plan you tapped), each carrying a random device-scoped identifier and no name, email or cycle data, to our analytics and attribution partners so we can see whether the app works and whether ads are worth running. You can delete everything on the device in one tap.
1. Who we are
Plan by Phase is made by Luis Alarcon, an individual developer based in Austin, Texas, United States ("we", "us"). Contact: hello@planbyphase.com.
2. What the app stores on your iPhone
- The first name you type during setup (optional).
- The start date of your last period, your average cycle length, and the estimated period length used by the planner.
- The planning categories you selected (workouts, work & focus, social battery, skincare).
- Whether you turned on the energy-dip reminder.
- Your onboarding progress while you are still in setup.
This information is consumer health data. It is encrypted with AES-GCM using a key kept in the iOS Keychain (accessible only after the device is first unlocked, and only on that device). It is not included in analytics events, crash reports, or advertising data. It is not backed up to our servers; we do not run servers that receive it.
If you use "Add this week to Calendar", the app writes all-day events (phase name, do / skip lines) to the calendar you chose on your iPhone using Apple's write-only calendar access. The app cannot read your existing events. Those events then live in your calendar provider (for example iCloud or Google) under that provider's privacy terms.
3. What leaves your iPhone
| Recipient | What | Why |
|---|---|---|
| Apple (App Store, StoreKit) | Your subscription purchase and receipt. | Billing. Apple handles payment; we never see card details. |
| RevenueCat (processor) | A random app-user id, purchase receipts, subscription status. | Purchases and entitlements: to confirm your subscription is active, restore purchases, and run paywall experiments. |
| PostHog (processor) | Funnel events with a random device-scoped identifier: onboarding screen numbers, quiz answered (not the answer), number of categories chosen, paywall taps, purchase success/failure, feature use (calendar export, period logged). Device model and OS version. No dates, no names, no cycle-day values. | Product analytics: to understand where people drop off and what to fix. |
| AppsFlyer (processor) | App open, onboarding step, registration completed (af_complete_registration), plan created (plan_created) and subscribe events (with price and currency), the device's advertising identifier only if you tap "Allow" on Apple's tracking prompt, and Apple's SKAdNetwork postbacks. | Install attribution: to learn which ad brought you here so we can stop running the ones that do not work. Health data is never included. |
| Meta Platforms, TikTok, Apple Search Ads | The attributed app events listed above (including registration completed, plan created and subscribe) and, when you allow tracking, the advertising identifier, via AppsFlyer and SKAdNetwork. | Ad measurement. We never send cycle data, names, or health information to any ad platform. |
Your cycle dates, cycle and period lengths and first name stay on your iPhone. They are not sent to us or to RevenueCat, AppsFlyer or PostHog, and they are removed by Settings → Delete all my data or by deleting the app.
These are the categories on our App Store privacy label:
- Used for tracking: Device ID, Product Interaction and Purchase History, for third-party advertising and analytics. Apple's advertising identifier is used for tracking only after you allow Apple's tracking prompt (section 4).
- Linked to you: Device ID, User ID (the RevenueCat app-user id), Product Interaction (screens viewed and buttons tapped) and Purchase History (purchase and subscription events), for analytics and app functionality.
We collect no other category of data. The only other system the app talks to is Apple (StoreKit for purchases, and write-only calendar access for the export described in section 2).
The website planbyphase.com is static and sets no cookies. It loads fonts from Google Fonts, which receives your IP address as part of that request. We do not run advertising pixels on the site.
4. Tracking permission (App Tracking Transparency)
The app asks for Apple's tracking permission after you have seen your sample week. If you allow it, AppsFlyer may use your device's advertising identifier to match installs to ads. If you decline, attribution falls back to Apple's privacy-preserving SKAdNetwork and nothing in the app changes. You can change your choice any time in iOS Settings → Privacy & Security → Tracking.
5. Consumer health data notice
Some states (including Washington under the My Health My Data Act, Nevada and Connecticut) give you specific rights over consumer health data. For Plan by Phase:
- Collected: the cycle inputs listed in section 2, processed only on your device to compute phases and a weekly plan.
- Shared or sold: never. We do not sell consumer health data and do not share it with third parties.
- Sources: only what you type into the app.
- Your rights: access, deletion and withdrawal of consent. Because the data lives only on your iPhone, "Delete all my data" in Settings deletes it completely. To exercise any right or appeal a decision, email hello@planbyphase.com; we respond within 45 days.
6. Your choices and rights
- Delete everything: Settings → Delete all my data removes your cycle map, answers and the encryption key from the device. Deleting the app also removes the data.
- Stop analytics: analytics events carry a random device-scoped identifier and no name, email or cycle data, and you can stop them by deleting the app. We do not currently offer an in-app toggle.
- Notifications: the energy-dip reminder is a local notification scheduled on your device. Turn it off in Settings inside the app or in iOS Settings.
- Subscription and receipts: managed by Apple in Settings → Apple ID → Subscriptions.
- California and other US state rights: you may request to know, correct or delete personal information and we will not discriminate for exercising those rights. Email us. We do not sell personal information. The app events and device identifiers described above are shared with ad platforms for ad measurement, which California law may treat as sharing for cross-context behavioral advertising. To opt out, decline or turn off Tracking in iOS Settings → Privacy & Security → Tracking, and email hello@planbyphase.com. Consumer health data is never shared.
- EEA / UK: the app is sold in the US App Store first. If you use it elsewhere, the legal basis for the processing above is contract (billing, restoring purchases) and legitimate interests (understanding funnel drop-off, ad measurement), and you have the GDPR rights of access, rectification, erasure, restriction, portability and objection. Email us to exercise them.
7. Children
Plan by Phase is not directed at children under 13 and we do not knowingly collect personal information from them. The App Store age rating is 13+ because the app discusses menstruation in a general wellness context.
8. Security
On-device data is encrypted at rest; the key never leaves the Keychain. Transport to our partners uses TLS. No system is perfectly secure, and because we do not hold copies of your cycle data we cannot restore it if you lose your device without your own iCloud backup.
9. Retention
On-device data stays until you delete it. Partner data is retained under each partner's policy: RevenueCat keeps purchase records for the life of the subscription plus accounting requirements; PostHog analytics are retained for 12 months; AppsFlyer attribution data for 24 months.
10. Changes
We will post updates here with a new effective date and, for material changes, show a notice inside the app before the change takes effect.
11. Contact
Luis Alarcon · Austin, Texas, United States · hello@planbyphase.com