Menocle is a perimenopause tracking app. Your symptom history is encrypted on your phone before it is backed up, which means we cannot read it — not to improve the app, not to sell, not on request.
| Data | Why it exists | Readable by us |
|---|---|---|
| Symptom check-ins | The app's core function; kept on your phone and, if you have an account, backed up as ciphertext | No |
| Cycle records | Your Transition Map — period start dates, flow, unusual bleeding | No |
| Appointment notes | What changed at a visit, and the questions you want to ask | No |
| Your name | Optional; used to address you in the app and on your doctor summary | No |
| Email address | Sending the one-time code you sign in with | Yes |
| Marketing opt-in | Only if you tick the box: your email and name on a separate mailing list | Yes |
| Analytics, ads, trackers | We do not use any. There is no third-party analytics or advertising code in the app. | None |
Menocle is operated by Business Credit Cloud LLC, 745 Lafayette Avenue #3A, Brooklyn, NY 11221. For anything in this policy, write to info@menocle.com.
You can use Menocle without signing in. In that case everything you log stays on your device, nothing is transmitted to us, and we hold no record that you exist. Deleting the app deletes the data with it.
An account exists so your history survives a lost or replaced phone. Creating one collects your email address, and your name if you choose to give one.
There is no password. You enter your email, we send a six-digit code, and entering that code signs you in. We store your email address so we can send that code.
Before any check-in, cycle record or appointment note leaves your phone, it is encrypted on the device using XChaCha20-Poly1305 with a key generated on your phone and stored in its secure hardware-backed keychain. We receive and store only the encrypted result.
The trade-off is real and we would rather state it than bury it: if the key is gone from all of your devices and your iCloud Keychain, and you have not saved a recovery key, nobody — including us — can restore your encrypted history. You can always start fresh.
Encrypted records, your email address, and your wrapped key are held in our database hosted by Supabase, on infrastructure located in the United States. Access rules on that database restrict every record to the account that created it.
Each time you open the app, it asks Expo, the service we use to deliver app updates (EAS Update), whether a newer version of the app's code is available. That request carries your phone's operating system, Menocle's project ID and a random installation token created by the update service; like any server, Expo also sees the request's IP address. It does not carry your account, your email address or any health data, and Expo uses it only to deliver the right update. It is not analytics or advertising.
The opt-in checkbox during sign-up is unticked by default and is separate from creating an account — declining it does not limit the app in any way. If you tick it, your email address and name go onto a mailing list that is deliberately kept apart from your health data. Because your check-ins are stored as ciphertext, it is not technically possible for us to use symptom or health information to decide what to send you. You can unsubscribe from any message.
menocle.com is a static site hosted by Vercel. It sets no cookies and runs no analytics. Vercel, like any host, briefly records the IP address and browser details of each request in its server logs for security and capacity purposes; we do not use those logs to identify visitors.
If you join the waitlist, we store your email address, the date, and the word "site" so we know where it came from — nothing else. It goes into a table that has no link of any kind to app accounts or health data, and that nobody outside the company can read. We use it for exactly one thing: to email you when Menocle is available. Write to info@menocle.com and we will remove it.
If you send feedback — from menocle.com/feedback or from inside the app — we store the words you type, the type of feedback you chose, the date, whether it came from the site or the app, and, from the app, the app version and the platform ("ios" or "android"). If you choose to give an email address for a reply, we store that too. Nothing else is sent: not your check-ins, not your account, not a device identifier. Feedback goes into a table with no link of any kind to app accounts or health data, which nobody outside the company can read. We use it to improve Menocle and, if you left an address, to reply. We never publish what you write; the "You asked, we built it" list on the feedback page is our own summary. Write to info@menocle.com and we will delete a message you sent.
On iPhone you can choose to import history from Apple Health. Menocle asks to read period (menstrual flow) data and a list of symptoms — hot flashes, night sweats, sleep and mood changes, memory lapse, fatigue, headache, palpitations, vaginal dryness, bladder leaks, bloating and dry skin. It reads only when you tap Import, shows you what it found before saving anything, and never writes to Apple Health. Imported entries are stored with the rest of your history on your phone and, if you back up, are encrypted the same way. Data from Apple Health is never used for advertising, never shared with anyone, and never leaves your phone except inside that encrypted backup. You can turn access off at any time in Settings → Health → Data Access & Devices → Menocle.
Menocle on Android does not read from Health Connect or any other health data store.
These features send information outward, each only when you tap it:
Depending on where you live, you may also have rights to access, correct, restrict or port your personal information, to object to certain processing, and to complain to a data protection authority. Write to us and we will act on any such request. Note that for encrypted health records our practical ability is limited to deleting them or returning them in the form we hold them — we cannot read or correct their contents.
Encrypted records and account details are kept until you delete your account, at which point they are removed from our live database. Copies can remain in our database provider’s automatic daily backups for up to 7 days before those backups are overwritten; we do not restore deleted accounts from them. Mailing-list entries are kept until you unsubscribe or delete your account. Uninstalling the app removes local data from that device but does not by itself delete an account.
Menocle is not directed at children and is not intended for anyone under 18. We do not knowingly collect information from children.
Menocle reports associations found in your own logged data and summarises published clinical guidance. It does not diagnose, treat or prescribe, and it is not a substitute for a qualified clinician. Every pattern the app shows is labelled as an association rather than a cause, because that is what it is.
If we change how any of this works we will update this page and the date at the top, and for a material change affecting existing users we will say so in the app or by email before it takes effect.
Questions, requests or complaints: info@menocle.com. We aim to answer within 30 days.