FloCount Privacy Policy

Last updated: 10 October 2026

FloCount ("the app") is made by HomiLabs ("we", "us"). It helps you track your menstrual cycle and fertility signs. Because this is health information, privacy is the core of the product, not an afterthought. This policy explains in plain language what we collect, why, where it is stored, who can see it, and what you can do about it.

The short version

• Your cycle and health data is stored in your own account and can be read only by you. We do not sell it, rent it, or use it for advertising.
• FloCount has no ads and no analytics or advertising trackers.
• You can export or permanently delete everything inside the app at any time.
• FloCount is for people aged 16 and over. It is not a medical device and does not diagnose anything.

What we collect

Account information

• Your name and email address, taken from your email sign-up or your Google account, and which sign-in method you used.
• Your age, and — only if you choose to give it — your marital status. Neither is used for predictions or for advertising.

Health and cycle information you enter

• Period start and end dates, flow level, symptoms, mood, basal body temperature and free-text notes.
• Your chosen tracking mode (cycle tracking, or trying to conceive) and your typical cycle and period length.
• Predictions (next period, estimated ovulation, fertile window) are calculated on your device from the information above. They are not stored separately.

Settings

• Your language, appearance and reminder preferences, and the time you accepted this policy (our record of your consent).

Technical data

• To keep your account secure and the service working, Google Firebase processes technical data such as IP address, device and app-version information and security tokens (including App Check / Play Integrity checks that the app is genuine).

What we do not collect

• No location, contacts, photos, camera or microphone.
• No advertising ID. No analytics or crash-reporting service.
• No data from other health apps or wearables (this version of FloCount does not connect to them).

Why we use it

• To run the app: sign you in, keep your data in sync across your devices, and work offline.
• To calculate your predictions, show your charts, and create the reports you ask for.
• To send the reminders you turn on (these are scheduled on your phone — see below).
• To keep the service secure and to meet legal obligations.

For health information we rely on your explicit consent, which you give during sign-up. You can withdraw it at any time by deleting your account.

Where it is stored and who processes it

• FloCount uses Google Firebase (Authentication, Cloud Firestore and App Check) as our data processor. Your data is stored in Google Cloud's Mumbai (India) region, asia-south1, encrypted in transit (TLS) and at rest.
• Access rules enforced by the server mean each account can read and write only its own data. We do not browse your entries. Administrative access to the project is limited to the app's owner and used only for security, maintenance or a request you make.
• Google keeps automatic backups of the database for up to 28 days. When you delete your account, copies in those backups disappear within that time.
• We do not sell or share your data with advertisers or data brokers. We may disclose information only if the law requires it.
• Google may process data in other countries; it applies its own safeguards for such transfers.

On your phone

• Reminders are scheduled locally on your phone. FloCount has no push-notification server and no push token.
• App lock: if you set a PIN, it is stored only on your phone as a salted hash in Android's secure storage. It is never sent to us.
• Screen privacy: you can hide FloCount from the recent-apps view and block screenshots (on by default in the released app).
• Offline copy: FloCount keeps a copy of your data on the phone so it works without a connection. It stays in the app's private storage and is removed when you delete your account or uninstall the app.
• FloCount is excluded from Android's automatic cloud backups on purpose.

How long we keep it

We keep your data until you delete it. Deleting your account inside the app removes your profile, cycles, daily logs and settings straight away and removes your sign-in. Backups expire within 28 days, as described above.

Your rights and choices

• Access / export: Settings → Export my data gives you a file with everything we hold.
• Correct: edit or delete any entry in the Calendar or Daily log.
• Delete: Settings → Delete my account. If you can no longer use the app, you can ask us to delete your data by email — see the Delete your account page at https://flo.homilabs.org/delete-account.html.
• Withdraw consent / stop reminders / lock the app: all available in Settings.
• Depending on where you live (for example under the EU/UK GDPR or local data-protection law), you may have further rights, including the right to complain to your data-protection authority.

Children

FloCount is not for anyone under 16 and we do not knowingly collect data from children. If you believe a child has used the app, tell us and we will delete the account.

Not medical advice

Predictions and alerts are statistical estimates based on what you log. They are not a diagnosis, cannot confirm or rule out pregnancy and must not be used as contraception. A late period should be confirmed with a home test or a doctor. If you are worried about your health, speak to a qualified clinician.

Security

We protect your data with encryption in transit and at rest, server-enforced per-account access rules, Firebase App Check, optional PIN/biometric app lock, no device cloud-backup, and minimal data collection. No system is perfectly secure; if a breach affecting you occurs, we will tell you and the authorities as the law requires.

Changes to this policy

If we make a material change we will tell you in the app before it applies. The "last updated" date above always shows the current version.

Contact

HomiLabs — support@homilabs.org — https://flo.homilabs.org