Privacy Policy

Who we are

Menopause Companion ("we", "us") provides a personal menopause tracking and education app. We are the controller of the personal information described in this policy. For any privacy question, or to exercise your rights, contact us at privacy@menopausecompanion.com.au or through the Help section in the app.

Information we collect

• Account information — your email address, password (stored only as a secure hash) and first name.
• Health information you enter — menopause stage, goals, symptoms, sleep, energy, mood, stress, hot flushes, lifestyle factors and your own notes.
• Sharing choices — partner invitations you send and the specific categories you choose to share.
• Billing information — subscription status and plan. Card details are handled by our payment processor and never reach our servers.
• Technical information — limited logs needed to keep the service secure and working.

How we use your information

We use your information to provide your account, show your own history, generate insights from the data you recorded, produce reports you choose to create, deliver the partner features you turn on, process subscriptions, send service emails, and keep the app secure.

We do not sell your personal information, and we do not use your health information for advertising.

Cookies and analytics

We may use analytics tools to understand how the service is used and improve user experience. These tools collect limited technical information and do not access the health information you record unless specifically stated.

What is shared, and only with your consent

Nothing about your health is shared with anyone unless you invite them and choose what they can see. You can change or withdraw that sharing at any time, and access ends immediately.

Service providers

We use trusted providers to run the service. They act on our instructions and may only process your data to provide those services:

• Lovable Cloud — application hosting, deployment, preview infrastructure, and the managed email delivery service that sends transactional emails on our behalf.
• Supabase — cloud PostgreSQL database, authentication, session management, and Row Level Security enforcement.
• Stripe — payment processing, subscription management, billing, and invoices. Stripe API calls are routed through Lovable's connector gateway.
• React Email — email template rendering used before emails are sent via Lovable's email service.
• jsPDF — client-side PDF generation so health reports are built directly in your browser and never uploaded to our servers.
• Google Fonts — Sora and Manrope web fonts served from fonts.googleapis.com.

Security

Your records are protected by database-level access rules so that each account can only read its own data. Data is encrypted in transit and at rest, passwords are hashed and checked against known breach lists, and privileged operations run server-side. Access to personal information is restricted to authorised personnel and systems that require it to operate the service. No system can be guaranteed perfectly secure, so please use a strong, unique password.

How long we keep your data

We keep your information while your account exists. If you ask to delete your account, deletion is scheduled with a 30 day window in which you can restore it; after that your personal and health records are permanently removed. Limited billing records may be kept where the law requires it.

Your rights

Depending on where you live, you may have the right to access, correct, export, restrict or delete your personal information, to object to certain processing, and to complain to your local data protection authority. You can update your details and request deletion directly in the app under Profile.

If you believe we have breached the Australian Privacy Principles, you may contact us so we can investigate and resolve your complaint.

Children

The service is not intended for anyone under 18, and we do not knowingly collect information from children.

International transfers

Your information may be processed in countries other than your own. Where that happens, we rely on appropriate safeguards for the transfer.

Changes to this policy

If we make material changes we will update the version and effective date at the top of this page and, where appropriate, notify you in the app or by email.