SheSync — Privacy Policy
Last updated: 2026-08-15
SheSync is an app for tracking your menstrual cycle. That means we handle some of the most personal information there is, and we have tried to build the app so that most of it never leaves your phone.
This policy explains, in plain language, what we collect, where it is stored, who else can see it, and what you can do about it. It covers the SheSync mobile app for iOS and Android.
SheSync is operated by Digital Sauce (ABN 35 675 111 449, ACN 675 111 449). "We", "us" and "our" mean Digital Sauce. "You" and "your" mean you, the person using the app.
The short version
If you read nothing else, read this.
- Your symptom logs stay on your phone unless you subscribe. On the free plan, nothing you log is uploaded to our servers at all. A SheSync Pro subscription turns on encrypted cloud backup so your history survives changing phones.
- Your AI conversations never leave your phone. They are stored only in the app's local database. We do not have a copy, and we cannot read them.
- We run our own AI. Your messages are not sent to OpenAI, Anthropic, Google or any other AI company. The model runs on servers we control.
- We do not train AI on your conversations. Nothing you type is stored on our servers after your answer arrives, so there is nothing to train on.
- Nobody sees your cycle unless you invite them. Sharing is off by default, requires the other person to accept, and you can revoke it at any time.
- We do not sell your data. Not to advertisers, not to data brokers, not to anyone.
- There is no advertising or tracking in SheSync. We do not use advertising networks, and we do not track you across other apps or websites.
1. Information we collect
a. Account information
When you sign in with Apple or Google, we receive your email address and a unique account identifier from them. We never see your Apple or Google password.
If you choose to hide your email when signing in with Apple, we only ever see Apple's private relay address.
Where it is stored: our cloud database.
b. Your cycle and symptom information
This is the information you enter yourself, and it can include:
- Period start dates, cycle length and period length
- Flow intensity and clot size
- Physical symptoms, emotional symptoms, cravings, discharge and sexual activity
- Basal body temperature
- Free-text journal entries
Journal entries are free text, so they contain whatever you choose to write. Please keep in mind that anything you type there is treated the same as any other note you save in the app.
Where it is stored: on your device first, always. It is then copied to our cloud database only if you have an active SheSync Pro subscription. See section 3.
c. Your AI assistant conversations
The messages you send to the SheSync AI assistant, and the replies it gives you.
Where it is stored: on your device only. See section 4, which explains this in full.
d. Device and diagnostic information
- Device type, model and operating system version
- App version
- A device identifier, used to send notifications to the right phone
- Crash reports and error diagnostics
We use crash reports to find and fix bugs. Our systems are built to strip out cycle and symptom details before an error report is sent, so those reports should tell us that something broke without telling us anything about your health.
Where it is stored: our cloud database (device identifiers) and Google Firebase Crashlytics (crash reports).
e. Information used to connect invite links
When you install SheSync after tapping someone's invite link, we need to work out which invitation you were responding to, because app stores do not pass that information along.
To do this:
- On iPhone and iPad, the app looks up your device's public IP address using a third-party lookup service, and reads some general details about your device — the platform, operating system version, model, screen size, time zone and language — to match your new install against a recent invite. If that does not find a match, the app checks your clipboard for an invite code. This clipboard check is why iOS may show you an "Allow Paste" prompt shortly after you first open SheSync. The app clears the invite code from your clipboard once it has been read.
- On Android, the app reads the install referrer that Google Play provides, which contains the invite code.
This information is used to connect you to the correct invitation and nothing else. It is not used for advertising, profiling or tracking you across other apps or websites.
f. Subscription information
If you subscribe to SheSync Pro, our payments partner RevenueCat tells us whether your subscription is active. We give RevenueCat your SheSync account identifier so it knows which account a purchase belongs to.
Your card details are handled entirely by Apple or Google. We never see them.
We do not send your health or cycle information to RevenueCat.
2. How we use your information
We use your information to:
- Show you your cycle, predictions and insights
- Save your symptom logs and, on Pro, back them up
- Answer your questions through the AI assistant
- Send you the reminders and notifications you have turned on
- Show your cycle to partners you have chosen to share with
- Connect invite links to the right invitation
- Manage your subscription
- Fix crashes and bugs, and keep the app secure
- Reply to you when you contact support
We do not use your information to build advertising profiles, and we do not sell it.
3. Where your data lives
This is the most important thing to understand about SheSync, so it gets its own section.
On the free plan, your health data stays on your device
Everything you log — symptoms, flow, temperature, journal entries — is written to a private database inside the app on your phone. On the free plan, none of it is uploaded to us. We cannot see it, restore it, or produce a copy of it, because we do not have one.
The trade-off is real and worth stating plainly: if you lose your phone, delete the app, or switch devices, that history is gone permanently. There is no backup for us to restore.
On SheSync Pro, your health data is also backed up to our cloud
Subscribing turns on encrypted cloud backup. Your logs are copied to our database so that your history follows you to a new phone. It is transmitted over an encrypted connection and stored encrypted, and access rules mean only your own account can read it.
Some things are always stored in our cloud
Regardless of plan, a small amount of information has to live on our servers for the app to work at all: your account identifier and email, your display name, your basic cycle setup from onboarding, your list of sharing partners, and the device identifiers used to deliver notifications.
Your AI conversations are never in our cloud, on any plan
Paid or free, chat history is stored only on your device. Section 4 explains why.
4. The SheSync AI assistant
The AI assistant answers questions about periods, symptoms and cycle health. Because you may tell it things you would not tell anyone else, here is exactly how it works.
We run the AI ourselves
The model runs on servers we operate. Your messages are not sent to OpenAI, Anthropic, Google, or any other AI provider. No outside AI company receives anything you type.
Your conversations are stored only on your device
Every conversation, and every message in it, is saved to the app's private database on your phone. They are not uploaded to our servers or backed up to our cloud — this is true on the free plan and on SheSync Pro alike.
What is sent when you send a message
To answer you, we have to transmit your message. At the moment you hit send, we send:
- The message you just typed
- Recent messages from that same conversation, so the assistant remembers what you were discussing
- A short summary of your recent cycle and symptoms — only if you have left the cycle-data setting turned on, see below
The connection carrying this is encrypted, and it is verified twice: once to confirm you are signed in, and once to confirm the request is coming from a genuine copy of the SheSync app.
What happens to it afterwards: nothing
Your message is held in memory only long enough to generate a reply. Once the answer has been streamed to your phone, it is discarded. It is never written to a database, a file, or a backup on our side.
Our servers keep operational logs so we can keep the service running, but those logs record only technical facts — that an account made a request, when, and how long the reply was. The content of your messages is never written to our logs.
We do not train AI models on your conversations
We do not use your conversations to train, fine-tune or improve any AI model. Because nothing is kept after your answer is delivered, there is no archive of conversations that could be used for this.
You control whether the AI sees your health data
By default, the assistant is given a short summary of your recent cycle and symptoms so its answers relate to your actual situation rather than being generic.
You can turn this off. In the AI chat screen there is a "Use my cycle data" toggle. Switch it off and no symptom or cycle information is sent with your messages — you will get general information instead of personalised answers. Your choice is remembered.
Your conversations are private to you
AI conversations are not shared with partners you share your cycle with. Sharing a cycle never shares chats.
Deleting a conversation deletes it permanently
Because there is no cloud copy, deleting a conversation in the app removes it for good. The same applies if you delete the app or lose your phone: that chat history cannot be recovered by you or by us.
The assistant gives general information, not medical advice
The AI assistant provides general information about cycles and wellbeing. It is not a doctor and it is not a diagnosis. It can be wrong. For anything concerning your health, please speak to a qualified healthcare professional. If you think you may have a medical emergency, contact your local emergency service.
5. Sharing your cycle with a partner
SheSync lets you share your cycle with someone else — a partner, a friend, a family member.
- It is off unless you turn it on. Nothing is shared until you create an invite and the other person accepts it.
- They see your cycle, not your notes. A partner can see where you are in your cycle, your predicted dates and phases, and symptoms you have logged. They cannot see your AI conversations.
- It goes one way per invite. Someone seeing your cycle does not let you see theirs, unless they separately invite you.
- You can revoke it whenever you like. Settings → Shared Cycle, remove the person. Their access stops.
- It requires an active subscription. If your SheSync Pro subscription lapses, sharing is switched off automatically and your partners stop being able to see your cycle.
6. Who else is involved
We use a small number of established service providers. They act on our instructions and are not permitted to use your information for their own purposes.
| Provider | What they do | What they receive |
|---|---|---|
| Google Firebase | Sign-in, cloud database, push notifications | Account details; cycle and symptom data for Pro subscribers |
| Google Firebase Crashlytics | Crash and error reporting | Crash diagnostics and device details |
| RevenueCat | Subscription management | Your account identifier and subscription status |
| Apple / Google | Sign-in and payment processing | Sign-in details and payment information |
Two things we want to be explicit about:
- No AI provider appears on this list. Because we host the assistant ourselves, no third-party AI company receives anything you write.
- We do not sell your personal information, and we do not share it with advertisers or data brokers.
We may disclose information if the law requires it, or where it is necessary to protect the safety of a person. If that happens we will limit what is disclosed to what is genuinely required.
7. How we protect your information
- Information sent between the app and our servers travels over encrypted connections.
- Information stored in our cloud database is encrypted at rest.
- Access rules on our database mean your records can only be read by your own account, and by partners you have specifically approved.
- Connections to the AI assistant are verified twice: that you are signed in, and that the request comes from a genuine copy of the app.
- Our systems are built to strip cycle and symptom details out of error reports before they are sent to us.
- Keeping free-plan health data on your device by default means there is simply less of it in one place to be at risk.
No system is perfectly secure, and we cannot promise absolute security. What we can tell you is that we have deliberately designed the app to hold as little of your health information as possible.
8. Your choices and your rights
You can:
| What you want to do | How |
|---|---|
| See your information | It is all visible in the app — your logs, insights and history |
| Correct something | Edit or delete any entry from the calendar or log screens |
| Stop the AI seeing your health data | AI chat screen → turn off "Use my cycle data" |
| Delete a conversation | Long-press or swipe the conversation in the chat list |
| Stop sharing with a partner | Settings → Shared Cycle → remove the person |
| Turn off notifications | Settings → Notifications, or your device settings |
| Delete your account and data | Settings → Delete Account |
Depending on where you live, you may also have rights to request a copy of the information we hold, to ask us to correct or delete it, or to withdraw your consent. To make a request, email us at development@digitalsauce.io. We may need to verify your identity before we act, so that nobody else can make a request about your account.
If you are unhappy with how we have handled your information, please contact us first so we can try to put it right. You also have the right to complain to your local privacy or data protection regulator.
9. How long we keep your information
We keep your information for as long as your account exists.
When you delete your account, an automated process removes your account record from our database, together with everything stored underneath it — including your entire cycle and symptom history. This runs on our servers, so it completes whether or not the app stays open.
At the same time, the app clears the data held on your phone. Anything that was only ever on your device — your free-plan symptom logs, and all of your AI conversations — goes with it, and cannot be recovered afterwards by you or by us.
Two things to be aware of:
- If you have shared your cycle with someone, your display name may remain in that person's sharing list until they remove it. The cycle information it referred to is already gone, and they can no longer see anything about your cycle.
- Backup copies of our systems, and records we are required by law to keep, may persist for a limited period before being overwritten in the ordinary course.
Deleting the app on its own does not delete your account. Use Settings → Delete Account if that is what you want.
10. Children
SheSync is not intended for anyone under 13, and we do not knowingly collect information from children under 13. If you believe a child has provided us with information, please contact us at development@digitalsauce.io and we will delete it.
11. International transfers
We use cloud infrastructure that may store and process information in countries other than the one you live in. Wherever it is processed, your information remains protected by this policy and by our agreements with our providers.
12. Changes to this policy
We may update this policy as the app changes. When we make a significant change, we will let you know in the app or by email, and we will update the "last updated" date at the top.
13. Contact us
Questions, requests or complaints about privacy:
Digital Sauce Email: development@digitalsauce.io ABN 35 675 111 449 ACN 675 111 449