Privacy Policy

Last updated: 4 June 2026

Bloody Hell is a period tracking app. It handles sensitive personal health data and we take that seriously. This policy explains what we collect, how we use it, and what rights you have over it. Plain English throughout — no legal fog.

Who we are

Bloody Hell is operated as an independent app. You can contact us at hello@bloodyhellapp.com with any questions about your data.

What data we collect

We collect only what the app needs to work:

Account data: your email address and the display name you choose during setup
Cycle data: period start and end dates, cycle length, and predicted dates — only if you log them
Daily logs: mood, body states, flow, sex activity, notes — only what you choose to enter on any given day
Partner link data: an invite code if you choose to link a partner account, and the sharing permissions you set
Device data: a push notification token if you grant notification permission, so we can deliver daily updates

We do not collect your location. We do not access your contacts. We do not use any data for advertising.

How we use your data

To provide the app — cycle predictions, daily comments, and your personal dashboard
To send you daily notifications, if you have opted in
To deliver your partner's briefing, only with your explicit permission and only the data you choose to share
To improve the app — aggregated, anonymised usage patterns only, never individual health records

Who can see your data

By default, nobody except you. Your cycle data, logs, and notes are private to your account.

If you choose to link a partner account, they see only what you explicitly unlock — phase status and threat level by default, nothing else unless you switch it on. You can revoke access at any time by deactivating the link.

We do not sell your data. We do not share it with third parties for advertising, research, or any other commercial purpose.

Where your data is stored

Your data is stored securely on Supabase infrastructure hosted in the EU (eu-central-1 region). All data is encrypted in transit (HTTPS) and at rest. Row-level security ensures your records are only accessible by your own account.

How long we keep your data

We keep your data for as long as your account is active. If you delete your account, your data is permanently deleted within 30 days. You can request deletion at any time by emailing us.

Your rights (GDPR)

If you are based in the UK or EU, you have the right to:

Access the data we hold about you
Correct inaccurate data
Delete your data (the right to be forgotten)
Export your data in a portable format
Object to how we process your data
Withdraw consent at any time without affecting past processing

To exercise any of these rights, email us at hello@bloodyhellapp.com. We will respond within 30 days.

Cookies and tracking

The app does not use advertising cookies or third-party tracking. We use PostHog for anonymised usage analytics (screens visited, features used — no health data, no personal identifiers). We use Sentry for crash reporting. Neither service receives your cycle or health data.

Children

Bloody Hell is intended for users aged 16 and over. We do not knowingly collect data from anyone under 16. If you believe a child has created an account, please contact us and we will delete it promptly.

Changes to this policy

If we make material changes to this policy we will notify you via the app and update the date at the top of this page. Continued use of the app after changes are posted means you accept the updated policy.

Contact

Questions, requests, or concerns: hello@bloodyhellapp.com

Back to Bloody Hell