Privacy
What we hold, and where.
A reviewer can finish this page in five minutes. The formal policy is underneath, for the people who have to file it.
For a reviewer
Four questions come up in every privacy roundup of period trackers. The answers, before the policy:
| Question | Answer |
|---|---|
| Revenue model | Paid once on the App Store. No ads, no sale of data, no “free” tier that has to be paid for some other way. |
| Does cycle data leave the device? | No. There is no account and no iWoman server that could receive it. |
| Third-party SDKs | None. The three PrivacyInfo.xcprivacy manifests in the app list no collected data types and no tracking domains. |
| Export without an account | Yes. Export on the device, optionally encrypted with a password we do not have. |
What we store, and where
Every category the app can record. Each one lives on your iPhone or iPad.
| Category | Where |
|---|---|
| Period start and end, flow intensity | On your device |
| Predicted fertile window and ovulation day | On your device |
| Basal temperature | On your device |
| Mood, energy, pain, cervix mucus | On your device |
| Intercourse and protection | On your device |
| Hygiene, pills, tests, weight | On your device |
| Notes and photos you attach to a day | On your device |
| Life-stage setting, units, language, lock | On your device |
What we send
| Destination | Payload |
|---|---|
| iWoman | Nothing. There is no endpoint. |
What Apple sees
Purchases go through the App Store. Apple may send us aggregated sales figures and crash reports that cannot identify you. We do not receive your cycle. Apple's handling of that information is under Apple's privacy policy, not ours. Naming the one channel we do not control is what makes the rest of this page credible.
This website
No cookies, no local storage, no analytics, no consent banner. The Content-Security-Policy
is default-src 'self' and is printed in the page source. You can open the
network panel and check, or open the network receipt — it is the
same measurement, listed in public.
If we are bought or shut down
Nothing happens to your cycle. We do not hold it, so there is nothing to hand to a buyer and nothing to leak from a shutdown. The copy on your phone stays on your phone. An encrypted export you already made stays a file you hold.
Formal policy
Last updated 14 August 2026. Applies to iWoman 3.8 and to www.iwoman.app.
Controller
CRAFT & VALUE e.U.
Anzengruberstraße 1/4
2540 Bad Vöslau
Austria
Inhaber: Mag. Stefan Eipeltauer
Firmenbuch: FN 369896 s, Landesgericht Wiener Neustadt
UID: ATU65036515
hello@iwoman.app
See also the imprint.
What we collect
Nothing about your cycle. We do not operate user accounts, we do not require registration, and the app does not transmit health or cycle data to us or to any third party.
Where your data lives
- All entries are saved in the app's storage on your iPhone or iPad.
- If you have iCloud Backup enabled in iOS, your device backup — including the iWoman database — is stored in your own iCloud account under Apple's terms. We have no access to it.
- Deleting the app removes its local data from that device.
- An export you create is a file you keep. If you encrypt it, only the password you chose can open it. We cannot recover that password.
Analytics and advertising
iWoman contains no analytics SDKs, no advertising SDKs, and no tracking identifiers. We do not build profiles, and we do not track you across apps or websites. The App Store privacy label reads “Data Not Collected”. That is Apple's wording, applied to this app since labels existed.
Hosting of this website
The site is hosted in Germany by ALL-INKL.COM — Neue Medien Münnich, Hauptstraße 68, 02742 Friedersdorf, Germany. The host is a processor under Art. 28 GDPR and is established in the European Union. Nothing from this site is transferred outside the EU.
The host writes ordinary web-server access logs (IP address, requested path, user agent, time) so the server can be operated and secured. Those logs are not analysed for marketing and are not joined to anything about your cycle, because we do not have anything about your cycle. They are deleted automatically after 190 days — ALL-INKL's default window for customer accounts.
Legal bases
Cycle data never reaches us, so there is no legal basis to name for it. Access logs for this website are processed under Art. 6(1)(f) GDPR — our legitimate interest in operating and securing the site. Email you send to hello@iwoman.app is processed under Art. 6(1)(b) when it concerns the app you bought, and otherwise under Art. 6(1)(f) — our legitimate interest in answering you.
If you contact us
When you email hello@iwoman.app, we process your address and the message solely to answer you. We delete the correspondence once the conversation is finished, unless Austrian tax or commercial law requires us to keep it (generally seven years).
Automated decisions
We do not make automated decisions that produce legal or similarly significant effects. Predictions in the app are computed on your device from the record you keep there.
Your rights under the GDPR
Because your cycle data never reaches us, we cannot access, export, correct or delete it — you control it in the app. For personal data you have sent us by email you have the rights of access, rectification, erasure, restriction, portability and objection, and the right to lodge a complaint with the Austrian Data Protection Authority (Österreichische Datenschutzbehörde, Barichgasse 40-42, 1030 Vienna, dsb.gv.at).
Children
iWoman is not directed at children under 13, and we knowingly collect no data from anyone.
Changes
If this policy changes, we will update the date at the top of the formal section and, where the change is significant, note it in the app's release notes.