Merelle stores your cycle, symptom, mood, and other health data you log so it can give you predictions and insights. It's tied to your account, not your email address — you're known in the app by a display name you choose, which never has to be your real name.
We never sell your data, and we don't track you across other apps or websites for advertising.
Your data is only visible to you, unless you explicitly invite a partner to see a limited, read-only summary of your cycle.
You can export or permanently delete your data at any time, right from the app's Settings screen.
Apple Health, Calendar, and notification access are all optional — the app works fully without them, and each one asks your permission separately.
1Who we are
Merelle ("we," "us," "our") is a menstrual and reproductive health tracking app developed by Erik Westin, based in Spain. This policy explains what information Merelle collects when you use the app, why, and what control you have over it.
This policy applies to the Merelle iOS app and its associated backend services. It does not apply to third-party websites or services you may reach through links in the app.
2Information we collect
We only collect what the app needs to work. Here's everything, in full:
Account information
Email address and password — used to create and secure your account. Your password is never stored in readable form; it's handled by our authentication provider using industry-standard hashing.
If you use Sign in with Apple, we receive a unique identifier from Apple instead of handling your password directly.
Profile information
A display name you choose during setup — this can be any name or nickname you like, and you can change it anytime in Settings. It doesn't have to be your real name.
Birth date, your selected tracking mode (cycle, trying to conceive, pregnancy, or perimenopause), average cycle and period length, contraception method, and the health topics you tell us matter most to you.
Health and cycle data you log
This is the core of what Merelle does, and the most sensitive category of data we handle:
Period flow, symptoms, mood, basal body temperature, weight, medications, and free-text notes you write.
Ovulation test results, if you use the fertility-tracking features.
Pregnancy-related dates (last period date, estimated conception and due dates), if you use pregnancy mode.
All of this is entered by you, voluntarily, and is never required to create an account — only to get predictions and insights from it.
Optional data, only if you turn it on
Feature
What happens
Apple Health
If enabled, Merelle writes the period days you log to Apple Health. This is write-only — Merelle never reads your Health data. Off by default.
Calendar sync
If enabled, Merelle adds your predicted period and fertile window as calendar events. This is write-only — Merelle never reads your existing calendar events.
Notifications
If enabled, used to send you local reminders (a short note at the start of each cycle phase, a heads-up before your expected period, an evening nudge to log your day, and, if you choose, a contraception reminder). These are generated on your device, not sent from our servers. Signing out or deleting your account removes them, along with the home-screen widget data stored on your device.
What we do not collect
We do not collect your precise location.
We do not access your contacts.
We do not use advertising identifiers, and we do not track you across other apps or websites.
We do not sell your personal information to anyone, under any circumstances.
3How we use your information
To predict your cycle phase, period, and fertile window, and generate the insights and content you see in the app.
To let you track trends over time (weight, symptoms, ovulation tests) in the Insights screen.
To send you the reminders and notifications you've turned on.
To operate account features like sign-in, data export, and account deletion.
To maintain the security and reliability of the app and investigate misuse if it occurs.
We do not use your health data for advertising, and we do not use it to train third-party AI models.
4Our legal basis for processing
If you're located in the European Economic Area, the UK, or another jurisdiction with similar law, here is the legal basis we rely on for each type of processing:
Health and cycle data (a "special category" of data under Article 9 GDPR): processed on the basis of your explicit consent, which you give by creating an account and choosing to log this information. You can withdraw this consent at any time by deleting your account (see Section 9).
Account data (email, authentication): processed as necessary to perform our contract with you — i.e., to provide the app you signed up to use.
Security and fraud prevention: processed under our legitimate interest in keeping the service safe and reliable.
5Who we share information with
We do not sell your data. We share it only with the following:
Supabase (our backend and database provider) — stores and processes your account and health data on our behalf, under a data processing agreement.
Apple — for Sign in with Apple, push notifications, Apple Health integration (only if you enable it), and processing any in-app purchases.
Your linked partner — only if you explicitly create and share an invite code with them. See Section 6.
Law enforcement or regulators, only where we are legally required to disclose information, and only to the extent required.
6Partner sharing
Merelle lets you optionally invite one partner to see a limited, read-only view of your cycle. If you choose to do this:
Your partner can see your current cycle phase and day, predicted next period, a general supportive insight, and moods you've logged.
Your partner cannot see your symptom details, notes, weight, medications, or any other data you log.
This sharing is entirely opt-in: it only happens after you generate an invite code and someone redeems it, and you can revoke access at any time from Settings.
7Where your data is stored and how it's protected
Your data is stored in a Postgres database managed by Supabase, our backend provider.
All data is encrypted in transit between the app and our servers (HTTPS/TLS).
Access to your data is restricted at the database level (Row Level Security) so that only you — and, for the limited fields described in Section 6, your linked partner — can read it. Even we, as the app developer, access it only when necessary for support or legal reasons.
Your password is never visible to us in plain text; authentication is handled securely by our backend provider.
8How long we keep your data
We keep your data for as long as your account is active, so the app can keep working for you. When you delete your account (Settings → "Delete my account and data"), your account and all the data linked to it — profile, cycles, daily logs, ovulation tests, pregnancy information and any partner link — are permanently deleted from our database straight away. Encrypted backups kept by our infrastructure provider may hold copies for up to 30 days before they are overwritten, and we keep nothing longer unless we are legally required to.
9Your rights
You have the right to:
Access your data — you can view everything you've logged directly in the app at any time.
Export your data — use "Export my data" in Settings.
Correct inaccurate data — edit it directly in the app.
Delete your data — use "Delete my account and data" in Settings. This is immediate, permanent and cannot be undone.
Withdraw consent at any time, which you can do by deleting your account.
Object to or restrict certain processing, and to data portability, where applicable law gives you these rights.
If you're in the EU/EEA and believe we haven't handled your data properly, you also have the right to lodge a complaint with your local data protection authority — in Sweden, this is the Swedish Authority for Privacy Protection (IMY).
10Children's privacy
Merelle is not directed at children under 16 and we do not knowingly collect data from them. If you believe a child has created an account, please contact us and we will delete it.
11International data transfers
Our service providers, including Supabase and Apple, may process data outside the EEA/UK, for example in the United States. Where your data is transferred outside the EEA/UK, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses approved by the European Commission.
12Changes to this policy
We may update this policy from time to time, for example as we add new features. If we make material changes, we'll let you know in the app before they take effect. The "Effective date" at the top of this page always reflects the latest version.