Privacy Policy
Last updated: 17 October 2026
Who We Are
Phasa is published by Muhammad Saad Javaid, an individual developer ("we"). Questions about this policy go to dr.saad.javaid.95@gmail.com.
What Phasa Collects
We collect nothing. Phasa has no user accounts, no sign-up, no server and no third-party analytics, advertising or tracking code, and the app makes no network requests of its own. Everything you log — periods, flow, symptoms, moods, temperatures, notes and photos — is written to a database inside Phasa's container on your device, protected by iOS file encryption.
Apple Health
If you connect Apple Health, Phasa reads menstrual flow, basal body temperature, weight, resting heart rate, wrist temperature and sleep, and writes back only the flow, temperature and weight you log in Phasa. Health data is never used for advertising or marketing, never sold, never shared with third parties, and never leaves your device through Phasa. You can revoke access at any time in iOS Settings → Health → Data Access & Devices.
Face Id, Photos And Notifications
The optional app lock uses Face ID, Touch ID or your passcode through iOS; Phasa never receives biometric data. Photos you attach to a log stay on your device. Reminders are scheduled locally on your device and use discreet wording by default.
Sharing
Data leaves your device only when you choose to — for example by exporting a file or sharing a PDF report through the iOS share sheet. Where it goes then is up to you.
Purchases
Subscriptions are processed by Apple. Phasa receives only an entitlement from StoreKit and never sees or stores payment details.
Children
Phasa is not directed at children under 13, and we knowingly collect no information from anyone, of any age.
Your Control
From the Privacy Dashboard you can export everything as a JSON file or delete everything permanently. Because we hold no copy, deleting it on your device deletes it everywhere. Deleting the app does the same.
Changes
If this policy changes, the new version will be posted at https://phasa-app.web.app/privacy.html with a new date.