Pinklet is a women's health and menstrual-cycle tracking app. We designed it to be private by default: your health data lives on your own device and is only sent off it for features you explicitly turn on. This policy explains what we collect, why, who it is shared with, and your choices.
Your tracking data is stored locally on your phone in the app's database and is not uploaded to us. This includes: menstrual cycles and period dates, symptoms, moods, basal body temperature, daily notes, intimacy logs, contraception, water and weight entries, pregnancy details, child growth & vaccination records, reminders, and health records (allergies, medications). Deleting the app removes this local data.
| Feature (opt-in) | What is processed | Where it goes |
|---|---|---|
| Google sign-in | Your Google email, name and profile photo | Google; our server (to create your account) |
| Cloud backup (Google Drive) | An encrypted-in-transit copy of your app data | Your own private Google Drive "app data" folder. Only Pinklet on your account can read it; we cannot. |
| AI assistant (chat) | Your message plus a de-identified summary of your last 12 months of tracked data (cycles, symptoms, measurements, pregnancy/child records, medications with dosages). Your name, your children's names and doctors' names are removed on your device first — the AI never receives them. | Our server, then an AI provider (Alibaba Cloud "Qwen"/DashScope) to generate the reply |
| Push notifications | A device push token | Our server + Google Firebase Cloud Messaging |
| Analytics (anonymous) | A random install ID and non-identifying usage events (screen opened, feature used). No names, no health values. | Our server + Google Firebase Analytics |
| Ads | Advertising / device identifiers handled by the ad SDK | Google AdMob |
| Purchases (when enabled) | Purchase receipt / product id | Google Play Billing + our server (to verify) |
When you use the AI assistant, a de-identified snapshot of your recent (last 12 months) tracked data is sent to our AI provider (Alibaba Cloud DashScope) to generate a reply. Before it leaves your device we remove the direct identifiers: your name, your children's names (each child is sent only as "Child 1", "Child 2"…), and your doctors' names. The clinical content (cycles, symptoms, measurements, medications, and any notes you wrote) is included so the assistant can answer you. This data is processed only to answer you; it is not used for advertising or sold. If you prefer not to use it at all, simply don't open the chat — every other part of the app works without it.
We do not sell your personal data, and we do not use your health data for advertising.
We share data only with the service providers needed to run the features above: Google (sign-in, Drive, Firebase messaging/analytics, AdMob, Play Billing) and our AI provider (Alibaba Cloud DashScope) for chat replies. Each processes data under its own terms. We may disclose data if required by law.
Pinklet is intended for adults and is not directed to children under 13 (or the minimum age in your country). The "child development" features are for a parent to track their own child and do not create an account for the child.
Network traffic uses HTTPS. PINs/biometric lock are stored using the device keystore. Drive backups go to a hidden, app-private folder. No method is 100% secure, but we take reasonable measures to protect your data.
We may update this policy; the "Last updated" date will change and, for material changes, we will notify you in the app.
Questions or data requests: info@digitalbridge.com.tr