Privacy Policy

1. On-Device Data Storage

All health records and physiological observations entered into the application are stored exclusively on local device storage (via sandboxed client-side storage mechanisms). This includes:

• Cycle start dates, intervals, and historical cycle durations
• Menstrual flow and spotting records
• Basal Body Temperature (BBT) and cervical fluid observations
• Logged symptoms, moods, medications, and user notes
• Locally computed cycle projections and baseline calibration data

No external servers or remote cloud databases receive, process, or maintain copies of your health data.

2. Tracking & Telemetry Policy

Celeste does not collect or transmit usage telemetries. Specifically:

• No third-party analytics SDKs are incorporated into the application.
• No advertising networks, tracking pixels, or marketing brokers are present.
• No behavioral tracking or device profiling mechanisms are deployed.

3. Subscription Architecture & Identity Management

Financial transactions and subscription entitlements are handled with minimal data retention:

• Anonymous Store Entitlements: Subscriptions are validated through anonymous receipt verification tokens managed by the Apple App Store and Google Play. Standard app usage and restoration of purchases require no user account or email registration.
• Promotional Access: Partner and promotional access codes are evaluated locally without registering personal identifiers.
• Optional Cross-Platform Credential: If you elect to synchronize entitlements across platforms, authentication stores solely an anonymous entitlement token indicating subscription status (e.g., active membership). Menstrual and biological data are never linked to or transmitted alongside this credential.
• Account Erasure: Users who establish an optional cross-platform account may permanently purge their credentials at any time in accordance with GDPR Article 17 and platform data guidelines.

4. Local Device Security & Biometrics

Protection of data on the physical device is provided through native system capabilities:

• Users may configure a 4-digit PIN code to restrict application access.
• Integration with platform biometric authentication (Face ID, Touch ID, and Android Biometrics) is supported via native OS APIs.
• Authentication checks are processed entirely on-device; biometric signatures and passcode hashes are never transmitted.

5. Data Export, Portability & Deletion

Users retain full control and custody over their recorded data:

• Data Export & Backup: You can generate a complete export of your recorded data in standard JSON format at any time using the system share sheet (e.g., to local storage, iCloud Drive, or Google Drive) without passing through external intermediary servers.
• Permanent Data Erasure: A comprehensive data wipe function is accessible in Settings, enabling instantaneous, irreversible deletion of all local database entries, logs, and user preferences.

6. Security Inquiries & Vulnerability Disclosure

The security and integrity of the application are maintained through ongoing evaluation. If you identify a potential security or privacy issue:

1. Please submit a detailed disclosure report directly to the maintenance team prior to any public release.
2. Include technical reproduction steps, software versions, and relevant device specifications.
3. Reports are reviewed promptly with acknowledgement provided within 48 business hours.