Phasly ("Phasly", "we", "us" or "our") provides a cycle-aware fitness and wellbeing application that personalises training to your menstrual cycle and to how you feel each day. This Privacy Policy explains what personal information we collect, how we use and protect it, and the choices you have. It applies to our website, our mobile apps and any related services (together, the "Service").
For the purposes of data protection law, Phasly is the data controller of the personal information described here.
We do not use your health or intimate data for advertising, and we do not allow advertisers to target you based on it.
Where the GDPR or similar laws apply, we rely on the following legal bases: your consent (especially for health and intimate data, which are special-category data), performance of a contract (to provide the Service you sign up for), legitimate interests (to secure and improve the Service, balanced against your rights), and legal obligation where required.
You can withdraw your consent at any time by editing or deleting the relevant data or your account. Withdrawing consent doesn't affect processing that already happened.
We do not sell your personal information. We share it only with service providers ("processors") who help us run the app, under contracts that require them to protect it and use it only on our instructions. These currently include:
We may also disclose data if required by law, to protect our rights or users' safety, or in connection with a merger or acquisition (in which case we'll notify you).
We use industry-standard safeguards, including encryption in transit (HTTPS/TLS), access controls and database row-level security so each user can only reach their own data, and secure storage of authentication tokens on your device. No system is perfectly secure, but we work hard to protect your information and to limit who can access it internally.
We keep your personal data for as long as your account is active or as needed to provide the Service. If you delete specific entries, they are removed from your account. If you delete your account, we delete or anonymise your personal data within a reasonable period, except where we must keep limited records to meet legal obligations.
Depending on where you live, you may have the right to:
You can exercise most of these rights directly in the app, or by emailing us at privacy@phasly.com. We won't discriminate against you for exercising your rights.
Phasly is not directed to children. You must be at least 16 years old (or the age of digital consent in your country, whichever is higher) to use the Service. We do not knowingly collect data from children below that age; if you believe a child has provided us data, contact us and we will delete it.
Your data may be processed in countries other than your own, including where our service providers operate. Where required, we use appropriate safeguards (such as Standard Contractual Clauses) to protect your data when it is transferred internationally.
We may update this Privacy Policy as the Service evolves. If we make material changes, we'll update the "Last updated" date and, where appropriate, notify you in the app or by email. Continued use of the Service after changes take effect means you accept the updated policy.
Questions, requests or concerns about your privacy? Email us at privacy@phasly.com. We read every message.