Privacy policy

1. Data controller

Femina processes your personal data, including sensitive health data. The data controller is Digitboxes LLC (Limited Liability Company, State of Wyoming, USA), whose address is 30 N Gould St 22538, Sheridan, WY 82801, USA.

Data Protection Officer (DPO), where applicable: no DPO is appointed; for any question about your data, write to contact@femina-app.com.

2. Data we process

Account: your email address (your account identifier).

Health data (via the mobile app), which you enter yourself: cycle dates, symptoms and related information. This is sensitive data.

Consents: your decisions, timestamped, for each purpose (health tracking, community participation, personalised content, couple sharing).

Community: your pseudonym and the content you post; your account identity is never exposed there.

Payment: the status of your subscription and the provider's transaction identifiers. No bank card data is processed or stored by Femina.

Administration: aggregated operational statistics, with no individual health data.

3. Purposes and legal bases

Providing the service (account management, cycle tracking): performance of the contract and, for health data, your explicit consent.

Community and personalised content: your consent, withdrawable at any time.

Payment and subscription: performance of the contract and legal obligations.

Operational statistics: legitimate interest, on aggregated data and with no health data.

No solely automated decision producing legal effects is taken on the basis of these data.

4. Consent

For sensitive data, your consent is explicit, granular (purpose by purpose), timestamped and revocable.

You may withdraw a consent at any time; withdrawal ends the corresponding collection and does not affect the lawfulness of processing already carried out.

5. Sharing and processors

Website hosting: Vercel Inc. (USA). Database and storage: Supabase (Supabase, Inc., USA; Supabase Pte. Ltd., Singapore), data hosted on AWS infrastructure (region: eu-west-1 (Ireland)).

Payment on the website: PawaPay (PawaPay UK Limited, United Kingdom). Payment in the Android app: Google Play (Google LLC, USA). No bank card data is processed or stored by Femina.

We do not sell your data. Individual health data is never used for advertising targeting.

6. Retention periods

Data is kept for as long as necessary for each purpose, then deleted or anonymised.

Periods by category: account and tracking data (cycle, health) are kept for as long as the account exists, then deleted or anonymised when the account is deleted; an inactive account is purged after 24 months of inactivity; technical logs are kept for 30 to 90 days; consent records are kept as proof, in anonymised form after account deletion.

7. Security

Encryption in transit (TLS) and at rest; access compartmentalisation through database-level security policies (RLS).

Health data never appears in logs, telemetry or error messages.

8. Your rights

You have the rights of access, rectification, erasure, portability, restriction and objection, as well as the withdrawal of consent.

To exercise them, write to contact@femina-app.com. You may also lodge a complaint with the competent supervisory authority of your country of residence.

9. Deleting your account

You can delete your account from the app (Settings → Delete my account), or via the public web page “Delete my account” at /suppression-compte (link in the site footer).

Deletion erases or anonymises your data according to the retention policy; an active Premium subscription is affected as described in the terms and conditions.

10. Minors

The service is intended for people at least 16 years old.

11. Changes

This policy is versioned and dated. Any substantial change will be notified to you in the app.