Evenna Privacy Policy
Effective date: 2026-11-07
Who we are: Evenna is made by Doruk Dumlu, Istanbul, Türkiye. Contact: dorukdumlu+evenna@gmail.com.
The short version
- Everything you log stays on your phone, in an encrypted database. That means your periods, check-ins (mood, energy, notes), symptoms, habits and settings.
- There is no Evenna account, and we keep no server copy of your health data.
- We never sell your data, and we never use it for advertising. There are no advertising or tracking SDKs in the app.
- Delete all data in Settings removes everything from your phone at once.
1. What stays on your phone
| What | Examples |
|---|---|
| Cycle | Period days and your cycle history |
| Check-ins | Mood, energy and notes you write |
| Symptoms | Which symptoms you logged and how strong they were |
| Habits | Habits you chose and the days you did them |
| Setup | Your onboarding answers (goals, diagnosis status, cycle pattern), app settings, and how you found Evenna (for example an ad or a search) |
This data is stored in an encrypted database on your device. The key that unlocks it is kept in your phone's secure storage and never leaves the device, so phone backups can't read it. We (Evenna) cannot see this data.
Doctor report: if you create a PDF report, it is made on your phone and only leaves it if you choose to share it. Old report files are deleted from the app's temporary storage.
2. What leaves your phone, and why
Nothing you log is ever sent. That includes your cycles, check-ins, symptoms, habits and notes. The only things that leave the device are:
| Recipient | What is sent | Why | When |
|---|---|---|---|
| Expo (EAS Update) | App version, platform and device details needed to check for an update | To deliver fixes and new versions of the app's code | Each time the app checks for updates |
| RevenueCat, Apple, Google | A random purchase ID generated by RevenueCat, the product you bought, and purchase and renewal status | To process subscriptions and restore purchases | Only if you start a trial or subscribe, or tap Restore |
| Apple (AdServices) | A one-time attribution token generated by Apple | To learn whether the install came from an Apple Ads search ad, so we know which ads work | Once, on iPhone, on the first launches |
| Evenna server | Daily anonymous counts, for example "3 people finished setup", "5 opened Patterns". There is no ID, no device identifier and nothing you logged. | To understand which parts of the app are used, and whether our ads and onboarding work | Only if you choose "Share anonymous counts" (asked once at the end of setup; change it in Settings › Privacy & data). Then once a day, for days that are complete. If you say no, what was counted during setup is deleted from your phone |
| Evenna server, USDA FoodData Central | The words you type into food search (for example "greek yogurt"). No ID, no device identifier and nothing you logged; our server does not store or log them, and passes only the words to USDA's public food database | To find the food and its values | Only when you search for a food. Foods you open are then saved on your phone, so opening them again sends nothing |
On Android, the app reads the Google Play install referrer on your phone. This tells us whether the install came from an ad link. It is read locally and stored with your setup data. It is not sent to us.
We do not use your health data for advertising, and we do not share it with data brokers or advertising platforms.
3. Notifications
Reminders (the daily check-in and the trial reminder) are scheduled locally on your phone. Lock-screen text never mentions health details.
4. Your choices and rights
- Delete all data: Settings › Privacy & data › Delete all data removes everything from this phone. We hold no copy of your health data, so there is nothing to delete on our side. Anonymous daily counts can't be linked to you.
- Subscriptions: manage or cancel in your Apple ID or Google Play subscription settings.
- Contact: write to dorukdumlu+evenna@gmail.com with any question or request. We answer within 30 days.
- US state rights (for example Washington, Nevada, California, Virginia): see our Consumer Health Data Privacy Policy.
5. Children
Evenna is meant for adults (18+) and is not directed to children under 13. If you believe a child has used Evenna, contact us. Note that we hold no data to delete.
6. Security
Your data is encrypted on the device (SQLCipher). We send as little as possible off the device, and nothing identifies you or describes your health.
7. Changes
If what leaves your phone ever changes, this policy and the in-app "Privacy & data" screen change first. For anything that involves your health data, we will ask you before it happens.
8. Not medical advice
Evenna helps you keep a record and understand your own patterns. It does not diagnose, treat or prevent any condition.