Linnea

Privacy Policy

Effective date: 7 July 2026 · Contact: [email protected]

The short version: your health data stays on your phone. We don't collect it, we can't read it, and we never sell anything about you. There are no accounts, no ads, and no analytics.

What the app stores, and where

Everything you log — symptoms, pain scores, cycle and flow, medications, food triggers, sleep, stress, check-ins, notes, and the reports you generate — is stored only on your device, in an encrypted database (SQLCipher). The encryption key is kept in your device's secure hardware store (iOS Keychain / Android Keystore).

The database is excluded from operating-system cloud backups (iCloud Backup / Google Auto Backup) and from device-to-device transfer.
Nothing you log is transmitted off your device. The app makes no network requests in normal use.

What we collect

Nothing. We have no servers, no accounts, and no analytics or advertising SDKs. We cannot see your data, and neither can anyone else through us.

Sharing

The only way data leaves your device is when you choose to share it — for example sharing a report PDF, a CSV, or a data export through your phone's share sheet. Where it goes then (email, messaging app, printer) is your choice, governed by that service.

Your controls

Export all data (Settings → Privacy & data) creates a complete JSON copy of everything, delivered through the share sheet.
Delete all data permanently erases the database and its encryption key from your device. There is no server copy; deletion is immediate and final.
App lock (optional) protects the app behind your device's biometrics or passcode.

Purchases (when available)

Subscriptions and one-time purchases are processed by Apple's App Store or Google Play. If purchases are enabled in your version, the app uses RevenueCat (a purchase-infrastructure provider) to validate receipts: RevenueCat receives purchase tokens and a randomly generated anonymous identifier — never your name, email, or any health data. We never link purchases to your identity, and your health data plays no part in any purchase flow.

Children

The app is not directed at children under 13 and does not knowingly collect information from them (it collects no personal information from anyone).

Health disclaimer

Linnea is a general-wellness app — not a medical device, and not medical advice. It helps you notice and share patterns; your clinician interprets them.

Changes

If a future version adds optional features that transmit data (for example end-to-end-encrypted sync), this policy and the store privacy labels will be updated before those features ship, and any such feature will be opt-in with its own clear consent screen.

Contact

Questions about privacy: [email protected]