The short version: Your health data stays on your device. We don't collect it, we don't store it on our servers, and we never sell it. Period.
1. Who We Are
Mosaic PCOS ("Mosaic", "we", "us", "our") is an iOS application designed to help women track and manage Polycystic Ovary Syndrome. This Privacy Policy describes how we handle information when you use the Mosaic PCOS app (the "App").
2. Information We Do NOT Collect
Mosaic PCOS is designed with a privacy-first architecture. We do not collect, transmit, or store any of the following:
- Symptom logs, cycle data, or fertility information
- Nutrition entries, meal photos, or food logs
- Medication records or lab results
- Journal entries or mood data
- Weight, height, or other body measurements
- Apple HealthKit data
- Biometric data (Face ID / Touch ID templates)
- Location data
- Contact information beyond what you voluntarily provide when contacting support
3. Where Your Data Is Stored
All health and personal data you enter into Mosaic PCOS is stored locally on your device using Apple's SwiftData framework and encrypted with AES-256-GCM. Your data is also included in your iCloud backup if you have iCloud Backup enabled on your device — this is managed by Apple, not by us.
We do not operate any servers that receive, process, or store your health data.
4. On-Device Security
Mosaic PCOS uses several layers of on-device protection:
- AES-256-GCM encryption for sensitive data at rest
- iOS Keychain for secure key storage
- Biometric authentication (Face ID / Touch ID) to lock the app
- No third-party analytics or tracking SDKs
5. Apple HealthKit
If you grant permission, Mosaic PCOS may read and write data to Apple HealthKit (e.g. steps, sleep, weight, heart rate). This data is governed by Apple's Privacy Policy and HealthKit guidelines. We do not access HealthKit data without your explicit consent, and we never transfer HealthKit data off your device or to any third party.
6. Subscriptions & Payments
Mosaic PCOS offers auto-renewable subscriptions managed entirely by Apple through the App Store. We do not collect, process, or store any payment information (credit card numbers, billing addresses, etc.). All billing is handled by Apple. For details, see Apple's terms.
7. Third-Party Services
Mosaic PCOS does not integrate any third-party analytics, advertising, or tracking services. We do not use Google Analytics, Facebook SDK, Firebase, or any similar tools. The only third-party service interaction is with the Apple App Store for subscription management.
8. Children's Privacy
Mosaic PCOS is not directed at children under the age of 13. We do not knowingly collect information from children. If you are under 13, please do not use the App.
9. Data Deletion
Since all data is stored locally on your device, you have full control:
- Delete individual entries within the App at any time
- Delete all data by deleting the App from your device
- Cancel your subscription via Settings → Apple ID → Subscriptions
We have no data on our servers to delete because we never collected it.
10. Communications
If you email us at support@mosaicpcos.com, we will use your email address solely to respond to your enquiry. We do not add support emails to marketing lists or share them with third parties.
11. Changes to This Policy
We may update this Privacy Policy from time to time. If we make material changes, we will update the "Effective date" at the top of this page and, where appropriate, notify you via the App. Continued use of the App after changes constitutes acceptance of the revised policy.
12. Contact
If you have any questions about this Privacy Policy or your data, please contact us:
Email: support@mosaicpcos.com
13. Medical Disclaimer
Mosaic PCOS is not a medical device and does not provide medical advice, diagnosis, or treatment. The App is intended for informational and self-tracking purposes only. Always seek the advice of your doctor or other qualified health provider with any questions regarding a medical condition.