Consumer Health Data Privacy Policy
This policy explains how Vyne handles consumer health data, as defined by Washington's My Health My Data Act (RCW 19.373) and Nevada's consumer health data law (SB 370). Vyne is made and run by one independent developer, Hasan Kalkan; "I" and "me" below mean him.
It covers your cycle tracking log, described in the "Cycle tracking" section of the Vyne Privacy Policy, and anything health-related you log or type elsewhere in Vyne. The Privacy Policy applies too.
In short
- Cycle data stays on your phone, or goes to the cloud only end-to-end encrypted.
- I can't read the encrypted cloud copy.
- Cycle data: never sold, never shared, no third parties.
- You can see, export and delete all of it in the app.
Contents 8
What consumer health data Vyne handles
Two kinds. First, your cycle tracking log, if you turn cycle tracking on (it is off until you do): what you enter or import, listed below. Second, anything health-related you choose to log or type elsewhere in Vyne, such as a water habit, a habit like "take medication", or a note or journal entry about your health. Vyne does not ask for that, but it may be consumer health data, and this policy covers it too.
- temperatures
- period and bleeding
- cervical mucus and cervix observations
- LH and pregnancy test results
- symptoms and how you feel
- sex
- things that may have affected a reading
- your own marks on the chart, and your notes
The cycle log is kept apart from the rest of Vyne, as described below. Everything in the second kind is handled like the rest of your Vyne data.
If you allow it, Vyne reads your daily step count and your sleep times from Apple Health or Android Health Connect on your phone, as described in the "Apple Health and Health Connect" section of the Privacy Policy. Those readings are only shown and never stored or sent. The days your Steps habit reached its goal and the sleep nights you save are kept like the rest of your habits.
Why it is used
Only to show your own log back to you: your chart, your days, and the files you ask for (an export, or a PDF for a clinician). It is not used for advertising, analytics, research or to train any model.
Health-related things you log or type elsewhere in Vyne are used only to keep them, sync them between your phones and show them to you, and to the other member of a profile you share.
Optional rule helpers, off until you turn them on, show what one named, published rule says about the days you logged, for example where Sensiplan's coverline falls. They are not a fertile-window calculation and must not be used to avoid or plan a pregnancy.
Where it comes from
Only from you:
- what you enter or type in the app;
- files you choose to import: a CSV file exported from another tracking app, or a Vyne cycle file. The file is read on your phone, and the copy the file picker made is deleted right away.
- Apple Health or Android Health Connect, only if you allow it: your daily step count and sleep times, read on your phone (see above).
Where it is kept
On your phone, in Vyne's own storage.
Vyne's cloud: only if you have turned on end-to-end encryption for your account. Your data is then encrypted on your phone, like the rest of your Cloud Backup, with a key that only your devices hold, before it leaves the phone, so I cannot read it and cannot hand it to anyone in readable form. Without end-to-end encryption, cycle data never leaves your phone through Vyne. If you turn end-to-end encryption off, the encrypted copies are deleted from Vyne's cloud and your data stays on your phones.
It is never placed in a shared profile. Health-related things outside cycle tracking are kept like the rest of your Vyne data: on your phone; in Vyne's cloud (Google Firebase, which stores it for me) if you turn on Cloud Backup, end-to-end encrypted if you turn that on, otherwise encrypted in transit and at rest; and, if they are in a profile you share, in that shared space, where the other member can see them (end-to-end encrypted if that shared profile is).
Your phone's own backup (iCloud Backup on iPhone, Google backup on Android) may include the app's local files, cycle data among them, depending on your device settings. Apple or Google run those backups under their own terms; Vyne does not control them.
Sharing
- I do not sell consumer health data. I do not share cycle data with anyone.
- Other health-related things you put into a profile you share are seen by the other member, because you chose to share that profile with them. Google stores Cloud Backup for me and does not use it for its own purposes. No one else receives your consumer health data, and no third party collects consumer health data through Vyne over time or across other apps and websites. Vyne has no advertising or analytics tools.
- Crash reports (Sentry) are filtered to exclude it: while a cycle screen is open no activity trail is recorded, cycle terms are removed from every report, and a crash inside a cycle screen is reported as one fixed message without content.
- An export or a PDF goes only where you send it yourself, through your phone's share sheet.
Your rights
- See it: everything you logged is in the app.
- Correct it: you can edit or delete any day, habit entry, note or journal line in the app.
- Get a copy: Export (Vyne file or spreadsheet), or the PDF for a clinician.
- Delete it: Settings → Cycle tracking → Delete all cycle data removes every day from your phone and from the encrypted cloud copy.
- Delete the rest: delete the entry, habit, note or journal day in the app, or delete your account to remove your cloud copy.
- Delete your account: this deletes your cloud data and offers to delete cycle data from your phone too.
- Stop: turning cycle tracking off stops it and keeps what you logged; delete it as above if you want it gone.
- Anything else, or a question about your data: email vyneapp.help@gmail.com.
I answer requests within 45 days. If I need more time, I can extend this once by up to 45 more days, and I will tell you.
How to appeal
If I turn down your request, or you disagree with my answer, reply to the same email at vyneapp.help@gmail.com and say you are appealing. I will look at it again and write back with what I decided and why.
If your appeal is denied, you can contact your state Attorney General: people in Washington, the Washington State Attorney General; people in Nevada, the Nevada Attorney General.
Changes to this policy
This policy takes effect on the date at the top. When it changes, that date changes too, and if a change is significant, for example a new kind of health data or anyone new receiving it, I will tell you in the app before it takes effect and ask for your consent again where the law requires it.