Menopause Tracker - MenoLog is designed to keep your personal health information private. Your app records are stored locally on your device, without an online account or uploads to developer-operated servers. Apple Health access, generated summaries, notifications, exports, and sharing are optional features that you control.
1. Information stored by the app
MenoLog stores information that you choose to enter or save, including:
- Your optional first name, menopause stage, goals, selected symptoms, and onboarding preferences
- Symptom check-ins, mood entries, hot-flash logs, bleeding and cycle records, and menopause-state records
- Journal entries, tags, weekly reflections, and consultation-preparation notes
- HRT and other medication details, doses, schedules, changes, and treatment reviews
- Dose completion, skipped and missed records, application sites, irritation flags, and notes
- Medication supply quantities, adjustments, refill dates, and refill history
- Appointments and pinned questions for healthcare professionals
- Reminder schedules and preferences for notifications, widgets, shortcuts, and privacy controls
- Local save receipts, including record identifiers and save dates, for records you explicitly save to Apple Health
This information supports tracking, personalization, reminders, descriptive insights, and reports. Local Health save receipts are not copies of raw Apple Health samples.
2. Local storage and device backups
Your manually entered records are stored locally using iOS data protection. MenoLog's app, widgets, and supported shortcuts share an on-device App Group container so they can use consistent records and preferences. This shared container is not a cloud service.
MenoLog does not create an online account, upload health records to developer-operated servers, or provide automatic iCloud synchronization. Local recovery backups may be kept on your device to help restore app records.
Apple's device backups, restores, and any Apple Health synchronization are separate system services governed by your settings and Apple's privacy practices. App data may be included in device backups according to those settings.
3. Optional Apple Health access
If you choose to connect Apple Health and grant read access, MenoLog can read menstrual flow, spotting, sleep, steps, and Apple exercise time. On supported iOS 27 devices, you can separately authorize reading menopausal state and bleeding after menopause. Authorized data is used for source-labelled history, summaries, and descriptive comparisons alongside your manual records.
On supported iOS 27 devices, MenoLog can save a selected menopause state or a bleeding-after-menopause event to Apple Health only when you explicitly choose the action and Apple grants the corresponding write permission. It does not automatically mirror your app records to Health or write HRT doses or symptom check-ins to Health.
Raw Health samples are queried for the relevant features and are not copied into MenoLog's primary app records or portable backups. The app keeps local save receipts for its explicitly requested Health writes. Reports or summaries you deliberately export may include selected Health-derived summaries.
MenoLog does not upload Health data to developer-operated servers, sell it, or use it for advertising or marketing. You can change or revoke access in Apple Health or iOS Settings. Manual tracking remains available without Health access.
Apple may not disclose which read permissions you denied. Missing or limited Health records are never interpreted as proof that no symptom, bleeding, or activity occurred.
4. Optional on-device summaries
On supported devices, operating systems, and languages, optional generated pattern summaries and appointment briefs use Apple's on-device Foundation Models. Selected recorded facts and descriptive summaries, which may include authorized Health-derived associations, are processed locally. MenoLog does not send these inputs to a developer-operated server or an external AI service.
Availability depends on your device, language, and system settings. Generated text may be incomplete or inaccurate. Review it before using or sharing it. These summaries are not diagnoses, predictions of treatment effectiveness, or medical advice.
5. Information we do not collect
MenoLog does not:
- Use third-party advertising, analytics, or cross-app tracking SDKs
- Collect your precise location
- Request access to your contacts, photo library, camera, or microphone
- Sell or rent your personal information
- Use health information for advertising, marketing, or data brokerage
Apple may make crash reports, diagnostics, or aggregate App Store information available to the developer according to Apple's services and your system sharing settings. This is separate from app-operated analytics and does not require uploading your journal or health records to us.
6. Notifications, widgets, and shortcuts
Notification permission is optional. If enabled, local reminder schedules and notification text are provided to iOS to deliver the reminders you request. You can disable reminders in the app or change notification permission in iOS Settings. The app remains usable without notifications.
Widgets can display tracking or medication information on surfaces outside the app. Supported shortcuts and App Intents can read or update local records when you invoke them. Be mindful of who can see your screen or hear spoken shortcut requests.
The app's sensitive-detail setting can replace medication details with neutral text in supported notifications and widgets. You can also remove widgets and manage notification previews in iOS Settings. Privacy Lock protects access inside the app; it does not secure files you export or every system surface outside the app.
7. App Store purchases
Premium purchases and subscriptions are processed by Apple through the App Store. The developer does not receive your full payment-card details or Apple Account credentials.
MenoLog reads verified purchase and subscription-entitlement information needed to unlock premium features. Apple processes purchase information under Apple's Privacy Policy .
8. Exports, portable backups, and sharing
You control whether to export or share your records. PDFs, CSV files, text summaries, and consultation reports can contain sensitive health information, including selected Health-derived summaries. Reports and CSV exports are not protected by the portable-backup passphrase.
Encrypted portable backups contain app records, including local Health save receipts, but not raw Apple Health samples. Backup payloads use AES-256-GCM encryption and can be unlocked with your passphrase or recovery key. Keep exported files and recovery credentials secure. The developer cannot recover a lost passphrase or recovery key.
Saving a file to a cloud destination or sharing it with another app, service, or clinician transfers it to the destination you choose. That destination's privacy practices apply. MenoLog does not automatically upload these files. Revoking permissions or deleting app records does not recall files you previously exported or shared.
9. Data retention and deletion
Your local records remain until you edit or delete them or use Profile → Delete all app data. This action clears tracked app records and local recovery backups. Files saved outside the app, shared copies, and older device backups must be managed separately.
Deleting MenoLog records, revoking Health access, or uninstalling the app does not delete records already saved in Apple Health. Manage those records separately in Apple Health. Other apps with Health access may be able to read records you save there, according to your permissions.
Uninstalling the app is not a substitute for managing exported files or device backups. Cancel subscriptions separately through your Apple Account subscription settings; deleting data or uninstalling MenoLog does not cancel a subscription.
10. Security
MenoLog uses protections provided by iOS for local storage. Optional Privacy Lock uses system authentication, such as Face ID, Touch ID, or your device passcode. The app receives the authentication result, not your biometric templates or device passcode.
No storage method or electronic system is completely secure. Protect access to your device and take care when displaying, exporting, or sharing sensitive records. Encrypted portable backups are distinct from ordinary reports and on-device recovery backups.
11. Medical information
MenoLog is a personal tracking, reflection, and organization tool. It does not diagnose, treat, prevent, or cure a medical condition and does not prescribe or recommend medication doses, routes, application locations, or treatment changes.
Charts, comparisons, supply estimates, and generated summaries describe recorded information and user-entered schedules. They do not establish causation or treatment effectiveness. Consult a qualified healthcare professional about symptoms and treatment decisions.
12. Children's privacy
The app is not directed to children under 13. We do not knowingly collect personal information from children through developer-operated services.
13. Contact and support
If you have questions about this policy or MenoLog's privacy practices, contact us through the Support Page .
If you contact support or voluntarily send a diagnostic file, we receive the information you provide and use it to respond and investigate the issue. Avoid sending sensitive health records unless necessary. Support correspondence is retained only as needed to handle your request and meet applicable obligations. You can ask about access or deletion through the same support channel, subject to applicable requirements.
External support, educational, and policy pages are websites rather than part of MenoLog's local record storage. Visiting them may disclose normal connection information to their hosting providers under those providers' privacy practices.
14. Changes to this policy
This Privacy Policy may change when app features or privacy practices change. The effective date at the top will be updated when changes are published.