This Privacy Policy explains how SparkScale Innovations LLC (“SparkScale”, “we”, “us” or “our”) collects, uses, shares and protects information when you use the Wombly app for iPhone and Apple Watch (the “App”). The App helps you track your menstrual cycle, symptoms, fertility, pregnancy and postpartum health, so much of the information you give us is sensitive health information. We treat it that way.
This policy applies only to the Wombly App.
- We never sell your personal or health data, and we never share it with data brokers.
- There is no advertising in the App, no advertising identifier and no tracking across other companies’ apps or websites.
- We read Apple Health data only with your permission. We use it only for App features and never for advertising or AI.
- AI answers are optional. Nothing is sent to our AI provider (Claude, made by Anthropic) until you agree, and we never send your name, email or account details.
- We use no analytics, crash-reporting or advertising SDK (see 3.10).
- You can export your data, and you can delete all of it from inside the App at any time.
1. Who we are
The App is published by SparkScale Innovations LLC, Wapda Town, Lahore, Punjab, Pakistan. For data protection laws such as the EU and UK General Data Protection Regulation (GDPR), we are the “controller” of the personal information described in this policy. You can reach us at info@sparkscaleinnovationsllc.com.
2. Not medical advice
The App gives general information and estimates, such as period, fertile-window, ovulation and due-date predictions, PCOS self-check results and AI-written answers. These are not medical advice, a diagnosis or a treatment, and the App is not a method of birth control. AI answers can be wrong. Always talk to a qualified healthcare professional about your health. In an emergency, call your local emergency number.
3. Information we collect
We collect only what the App needs to work. Most information comes directly from you.
3.1 Your private account (created automatically)
When you first open the App, we automatically create a private, anonymous account for you. It has a random account ID and no name, email address or phone number. Your entries are stored on your iPhone and backed up to our secure servers under this account, so the App can keep your data safe. If you also sign in with Apple (section 3.4), you can restore the backup on a new phone. Without signing in, the backup can’t be restored on another device.
3.2 Cycle and health information you enter
Depending on what you choose to log, this may include:
- Cycle data: period start and end dates, flow intensity, cycle length, period length, luteal-phase length, cycle regularity and typical flow.
- Daily logs: symptoms, moods, wellbeing habits, intimacy (such as intercourse) and libido, ovulation and pregnancy test results, cervical fluid, basal body temperature, weight, water intake and your free-text notes.
- Profile information: your birth year (year only), height, measurement units, birth control method, health conditions you choose to record (for example PCOS or endometriosis) and your usual symptoms.
- Pregnancy and postpartum data: last menstrual period, due date, pregnancy start and end, pregnancy outcome (including loss or birth), number of babies, pre-pregnancy weight, checkups and appointments (date, time, type, title, location, provider name and notes), blood pressure and pulse, contraction timings, hospital bag, baby bag and baby shopping checklists, and your birth plan (which may include your name and your partner’s name).
- Reminders you set up (type, time and message).
3.3 Apple Health (HealthKit) data
If you choose to connect Apple Health, the App reads these data types: basal body temperature, body weight, resting heart rate, heart rate variability, respiratory rate, blood oxygen saturation, step count and sleep analysis (including sleep stages and bed and wake times). The App does not write any data to Apple Health.
We use HealthKit data only to show how your body changes across your cycle and pregnancy inside the App. Imported values are saved with your daily logs and backed up to your private account like your other entries. In line with Apple’s rules, HealthKit data is never used for advertising or marketing, never sold, never shared with data brokers or advertisers, never sent to our AI provider, and never stored in iCloud by us. You can stop access at any time in your iPhone’s Health settings (Data Access & Devices) or in Settings › Privacy & Security › Health. You can also disconnect Apple Health inside the App (Settings › Devices & health): the App then stops reading from Apple Health, and you can choose to keep or delete the readings it already imported. Deleting removes only imported values; anything you entered yourself is kept. Only Apple’s settings can remove the permission itself.
3.4 Sign in with Apple (optional)
You can link your account to Sign in with Apple. This keeps your data when you change phones, and it is needed to post in the community, to invite a partner and to use AI features. We do not ask Apple for your name or email address. We receive a unique Apple identifier for your account. We also keep basic account records, such as the sign-in method, when the account was linked and when the App was last used.
When you sign in with Apple, our server also stores a token from Apple in a protected table that neither the App nor any user can read. We use it only to revoke the App’s Sign in with Apple access when you delete your account. It is deleted together with your account.
3.5 Community
Anyone can read the community. Posting, replying, voting in polls, liking, saving and following require Sign in with Apple. If you take part, we collect the posts, replies, polls, poll votes, photos, likes, saved posts, follows and topic choices you make, and your community nickname and avatar. You appear under a garden nickname and plant avatar (for example “Dewy Fern”) instead of a photo or your real name. The App picks them for you. You can change the nickname or pick another plant, but you can’t upload a profile photo. Please don’t use your real name as your nickname. Please note:
- Community content is public. Other App users can see posts, replies and photos, and anyone who has the link to a photo can open it. Don’t post anything that could identify you or anyone else.
- Photos are cleaned on your iPhone first. Before a photo is uploaded, the App resizes it and saves it as a new image. This removes all photo metadata, including GPS location, the date and time it was taken and camera details. The original photo never leaves your iPhone. The App sees only the photo you pick.
- Community guidelines. Before you post or reply, you agree to our community guidelines. Your agreement is remembered on your iPhone, and the time you agreed is saved on your account.
- Reports. When you report a post or reply, we store your account ID, which post or reply you reported, the reason you picked and the time. Only our moderator sees reports. The person you reported is never told who reported them. What you report is hidden from you straight away. When three different signed-in members report the same item, it is hidden from everyone until a moderator reviews it. A person reviews every report within 24 hours and may keep the content, remove it, or stop a member from posting.
- Blocks. When you block someone, we store your account ID, their account ID and the time. You won’t see their posts or replies, and yours are hidden from their account. The community is public, so anyone can still read posts without signing in. We don’t tell them. You can unblock at any time.
- Word filter. Our server checks posts, replies, polls and the nicknames members choose against a short list of slurs and abusive phrases, and refuses matching text. Health, anatomy and sexual-health words are never filtered. No community text is sent to any outside moderation service or AI.
3.6 Partner program (optional)
You can invite a partner to see some of your information in their own copy of the App. You share a one-time pairing code yourself. Inviting a partner needs Sign in with Apple and Premium. Your partner’s app is free, and they don’t need to sign in. If your Premium ends, sharing pauses until it is active again.
- Always shared once you pair: your cycle, period and luteal lengths and your recent period dates (in pregnancy mode, your last menstrual period and due date).
- Never shared with a partner: the intimacy (including intercourse) and libido entries and the ovulation or pregnancy test results you log.
- Shared only if you turn it on (off by default): today’s moods, symptoms and flow; sleep total and bed and wake times; upcoming checkups (date, type and title); recent weight and blood-pressure readings; recent contractions; and hospital and baby bag progress.
- Never shared with your partner: your notes, temperature, journal or pregnancy outcome.
- Your partner can send you short support messages, which we deliver as notifications.
- Partners can optionally give a display name, and they enter their birth year (year only) to confirm they are 18 or older. Both are kept on the partner’s own account and are not shown to you.
Either of you can unlink at any time, and sharing stops straight away. Your partner is not our service provider. Once they have seen information you chose to share, it is outside our control.
3.7 AI answers (optional)
Some features use artificial intelligence to give you short, general answers. All of them use one provider: Claude, made by Anthropic. AI features need Sign in with Apple and have a daily limit.
Your permission comes first. The first time you use an AI feature, the App shows a short screen called “AI answers by Claude”. It explains what is sent. Nothing is sent unless you tap Allow AI answers. Your choice is saved on your iPhone, and you can change it at any time in Settings › Privacy & data › Privacy settings › AI features › “AI answers by Claude”.
What is sent, and only when you use the feature:
- Messages (guided health topics such as cramps, mood, sleep, bloating or the intimacy check-in): the topic, and the questions and the answers you chose in that chat.
- Add Symptom › AI insight: your current cycle phase (or, in pregnancy mode, your pregnancy week), the symptoms you selected, and up to three symptoms you often log at this point in your cycle.
- PCOS check › Explain with AI: your result, your age group, the answers you chose in the check, and whether you use hormonal birth control.
We never send your name, email address, Apple ID, account ID, device identifiers, dates, your notes or your Apple Health data to the AI provider. Requests go from our server to Anthropic, so Anthropic doesn’t see your IP address. We don’t store your questions or the AI’s answers on our servers. We keep only a count of how many AI requests your account makes each day, to apply the daily limit. Answers in Messages are saved only on your iPhone; other AI answers are only shown on screen. We don’t use your data to train AI models. Anthropic processes each request to write the answer, under its commercial terms and privacy policy, which don’t allow it to train its models on this data. AI answers can be wrong and are not medical advice.
3.8 Purchases and subscriptions
You buy and pay for subscriptions through Apple. We never receive your card details. Our subscription provider, RevenueCat, receives purchase information from Apple (product, transaction ID, purchase and expiry dates, and trial status). It is linked to a random ID, or to your account ID once you sign in, so we can unlock Premium features. Once you sign in, our server also keeps your Premium status (whether it is active and when it ends) and the dates your account’s 14-day free periods started (one when you start using the App, and one when you first use pregnancy mode), so these follow your account to a new phone.
3.9 Notifications
All reminders and tips (for example period, fertile window, ovulation, pill, checkup and custom reminders, and daily tips) are scheduled on your iPhone. When your partner sends you a support message, the App shows it as a notification the next time it checks for new messages. If you use the App as a partner, the heads-ups you turn on are scheduled on your own iPhone too. We do not use push notifications and store no notification token.
3.10 No analytics or crash-reporting tools
The App contains no analytics, crash-reporting or advertising SDK. If you have chosen in iOS Settings to share analytics with app developers, Apple may give us anonymous crash logs and usage statistics for the App, as described in Apple’s privacy policy. We never receive your health, cycle, pregnancy or community data this way.
3.11 Apple Watch
Your iPhone sends a summary to your paired Apple Watch, so the watch app and complications can show it. The summary may include your cycle day, phase, predictions, logged symptoms, water intake, next checkup, and pregnancy or postpartum week. Entries you make on the watch are sent back to your iPhone. The watch app doesn’t connect to our servers. You can pause the watch from Wombly on your iPhone, for example before you lend or sell it. Pausing deletes the summary stored on the watch, and your iPhone sends it nothing more until you resume.
3.12 Information that stays on your iPhone only
The following is stored only on your iPhone and never uploaded to our servers:
- your pregnancy journal and bump photos;
- your Messages (AI chat) history;
- daily check-in answers and PCOS check results;
- baby-name lists and your custom symptom names;
- your delivery date and feeding choice after birth (postpartum mode);
- App lock, Hide app content, Pause watch and notification settings;
- your AI permission choice.
This information is lost if you delete the App or sign out. Exporting your data first keeps your PCOS check results and custom symptom names, but the export does not include your pregnancy journal or bump photos, your Messages history, check-in answers, baby names, or your settings and profile answers. (Your birth plan is backed up to your account and has its own export in Tools › Birth plan.)
3.13 Support requests
If you contact us, we receive your email address and whatever you include in your message.
3.14 Permissions the App may ask for
| Permission | Why | Required? |
|---|---|---|
| Apple Health (read) | Import temperature, weight, heart, breathing, oxygen, steps and sleep data into your charts. | No |
| Notifications | Period, fertility, pill and checkup reminders, and messages from your partner. | No |
| Face ID / Touch ID | Unlock the App if you turn on App Lock. Your face or fingerprint data stays with Apple on your device. We never receive it. | No |
| Photos (picker) | Add a photo you choose to a journal entry or community post. The App sees only the photos you pick. | No |
The App does not access your precise location, contacts, camera, microphone or advertising identifier.
4. How we use information
- To provide the App’s features: tracking, predictions, charts, reminders, pregnancy tools, the Apple Watch app, and backup and sync.
- To run optional features you choose: Apple Health import, the community, the partner program and AI answers.
- To manage subscriptions and free trials, including daily AI limits.
- To keep the App and community safe: word filtering, reports, blocking, moderation and preventing abuse and spam.
- To fix bugs and improve reliability.
- To answer your support requests and send important service messages.
- To comply with the law and protect our rights.
5. Legal bases for processing (EEA and UK)
- Health data (a special category of data): processed with your explicit consent. You give it when you start using the App, and separately for optional features such as Apple Health, partner sharing and AI answers. You can withdraw it at any time by turning a feature off or deleting your data.
- Providing the App and subscriptions: performance of our contract with you.
- Security, community moderation and abuse prevention: our legitimate interests in a safe, working App.
- Legal obligations: where we must keep or disclose information by law.
6. What we never do
- Sell or rent your personal or health data.
- Share your data with advertisers, ad networks or data brokers.
- Use health data, including HealthKit data, for advertising, marketing or profiling unrelated to the App.
- Track you across other companies’ apps or websites, or access your advertising identifier.
- Use your data to train AI models.
7. Who we share information with
We share information only with the service providers below. They process it on our behalf under contracts that require them to protect it and use it only to provide their services to us. We also share information with others when you choose to (your partner or the community), or as described in section 8.
| Provider | Purpose | Information | Location |
|---|---|---|---|
| Supabase | Secure database, accounts and backup; community and partner features; the server that forwards AI requests | Account records, the backed-up data, and the community and partner data described in section 3 | EU (Frankfurt, Germany) |
| Cloudflare | Storage and upload service for community photos | Community photos (with metadata removed) and technical request logs | Global network |
| RevenueCat | Subscription management | Purchase information and a random ID or your account ID | United States |
| Anthropic | AI answers (Messages, symptom insights, PCOS explanation), only after you agree | Only the items listed in section 3.7, without your name, email or any account or device ID | United States |
| Apple | App distribution, payments, Sign in with Apple and Apple Health | As governed by Apple’s privacy policy | United States and other countries |
Business transfers: if SparkScale is involved in a merger, acquisition or sale of assets, information may be transferred as part of that deal. The new owner must honour this policy, and we will tell you before your information becomes subject to a different policy.
8. Legal requests and reproductive health data
We know that menstrual, fertility and pregnancy data can be especially sensitive. We disclose personal information to authorities only when we are legally compelled to by a valid, binding legal order. When that happens, we will:
- review each request carefully and challenge requests that are unlawful, overly broad or not properly issued;
- disclose only the minimum information legally required; and
- tell you before we disclose, unless the law forbids it.
Information that exists only on your iPhone (section 3.12) is not held by us, so we cannot disclose it.
9. International data transfers
We are based in Pakistan. Our main database is in the European Union, and some service providers process data in other countries, including the United States. Data protection laws in those countries may differ from those in your country. Where the law requires it (for example for data from the EEA, UK or Switzerland), we use appropriate safeguards such as the European Commission’s Standard Contractual Clauses.
10. How long we keep information
- Your account and backed-up data: for as long as your account exists. When you delete your data or account in the App, we delete your account and all backed-up data from our database right away, then erase what is on your iPhone.
- Entries you delete one by one: they disappear from the App straight away. In your backup they are kept as “deleted” markers, so your other devices remove them too. The markers are erased when you delete your data or account.
- Anonymous accounts you stop using: if you never sign in with Apple and don’t use the App for 12 months, we automatically delete that anonymous account and its backup. The data on your iPhone stays. If you come back, the App creates a new private account and backs up what is still on your iPhone.
- Community posts, replies and profile: until you delete them or your account. A moderator may remove content sooner.
- Community photos: when you delete your post, we delete its photo right after. A daily cleanup also removes any photo that no post uses, normally within two days. When you delete your account, we delete all your community photos. Photos of posts hidden by a moderator are kept until the moderator decides.
- Partner pairing codes: codes expire after 7 days and are deleted 30 days after that. Records of attempts to enter a code are deleted after 1 day.
- Partner support messages: deleted when either of you unlinks or deletes your account.
- Daily AI usage counts: 90 days.
- Community reply notifications: 90 days.
- Community reports: kept until a moderator reviews them, then deleted 12 months after the decision.
- Subscription records: as long as needed for accounting, tax and legal purposes.
- Data on your iPhone: until you delete it, sign out or delete the App.
11. Security
- All data sent between the App and our servers is encrypted in transit (HTTPS/TLS).
- Data on our servers is encrypted at rest. Database access rules make sure each account can read only its own backed-up data.
- Your sign-in session is kept in the iOS Keychain, and data on your iPhone is protected by iOS device encryption.
- Sign-in keys and Apple tokens are stored only on our server and never shown to the App or to any user.
- You can turn on App lock (Face ID, Touch ID or your device passcode). Hide app content, which hides the App’s preview in the app switcher, is on by default.
- Only authorised staff who need it can access our production systems.
No system is 100% secure. If a data breach affects your personal information, we will tell you and the relevant authorities as the law requires.
12. Your choices and controls
- Export your data: Settings › Privacy & data › Export your data.
- Delete all your data: Settings › Privacy & data › Privacy settings › Delete all my data. This works for everyone, whether or not you signed in. It permanently deletes your backed-up data and account from our servers, then erases the App’s data on your iPhone. If you signed in with Apple, you can also use Settings › Delete account, and we revoke the App’s Sign in with Apple access. If you use the App as a partner, go to the partner dashboard › Privacy & data.
- AI answers: turn them on or off in Settings › Privacy & data › Privacy settings › AI features › “AI answers by Claude”.
- Apple Health: turn access on or off at any time in your iPhone’s Health settings (Data Access & Devices), or disconnect it in the App and choose whether to delete imported readings.
- Apple Watch: pause the watch in the App to delete the summary stored on it.
- Partner sharing: change what you share, or unlink, at any time in the partner settings.
- Community: delete your posts at any time. Use the ••• menu on a post or reply to report or block someone. To unblock, go to Community › your profile › Safety › Blocked members.
- Notifications: manage them in the App or in your iPhone’s Settings › Notifications.
13. Your privacy rights
Depending on where you live, you may have the right to:
- access the personal information we hold about you and get a copy (portability);
- correct inaccurate information;
- delete your information;
- withdraw consent at any time (this doesn’t affect what we did before you withdrew it);
- object to or restrict certain processing;
- opt out of the “sale” or “sharing” of personal information or targeted advertising (we do none of these);
- not be discriminated against for using your rights; and
- complain to your local data protection authority (for example, in the EEA or UK).
You can do most of this yourself in the App (export and delete). For anything else, email info@sparkscaleinnovationsllc.com with the subject “Wombly privacy request”. We may need to check that the request comes from you. We reply within 30 days, or sooner if your local law requires it. If we decline your request, you can appeal by replying to our decision, and we will review it within 45 days.
14. US consumer health data notice
This section applies to residents of US states with consumer health data laws, such as Washington (My Health My Data Act), Nevada and Connecticut.
- Consumer health data we collect: the cycle, symptom, mood, intimacy and libido, intimacy check-in, ovulation and pregnancy test, fertility, pregnancy, postpartum, birth control, health-condition, body-measurement, vital-sign and Apple Health data described in section 3.
- Sources: directly from you, from Apple Health (with your permission) and from your paired Apple Watch.
- Purposes: only to provide the App features you ask for, as described in section 4.
- Sharing: only with the service providers in section 7, with your partner or the community when you choose to, and as required by law (section 8). We do not sell consumer health data.
- Consent: we collect and share consumer health data only with your consent, which you can withdraw at any time.
- Your rights: you can confirm whether we collect your consumer health data, access it, get a list of the third parties it has been shared with, delete it and withdraw consent. Use the tools in the App or email us as described in section 13.
- No geofencing: we don’t use geofences around healthcare facilities.
15. Children and teens
The App is not for children under 13, and they should not use it. In the EEA and UK, users under 16 (or the lower age set by local law) need permission from a parent or guardian. If you are a parent and think your child under 13 has given us information, email us and we will delete it. The partner program is only for people aged 18 or older.
16. Changes to this policy
We may update this policy when the App or the law changes. We will post the new version on this page and change the “Last updated” date. If a change materially affects how we use your health data, we will tell you in the App and, where the law requires it, ask for your consent again.
17. Contact us
SparkScale Innovations LLC
Wapda Town, Lahore, Punjab, Pakistan
Email: info@sparkscaleinnovationsllc.com
Website: https://sparkscaleinnovationsllc.com/