Privacy Policy

What Athena stores

Everything you log — periods, symptoms, moods, temperatures, notes and your settings — is stored only in a private database on your device. Predictions are calculated on your device from that data.

What leaves your device

By default, Athena works fully offline and needs no permissions to run, and your health data stays on your device — we never save it to a server. Nothing you log leaves it: not a period, a symptom, a mood, a note, a temperature, your life stage or your goals. The app shows no ads and carries no advertising identifiers, and we never sell your data or share it for advertising. Two things do go out: anonymous app diagnostics, described next, and anonymous purchase processing, described below. (This website uses its own privacy-respecting web analytics — see "This website".)

Anonymous app diagnostics

Athena sends anonymous diagnostics to Firebase, Google's analytics and crash-reporting service, which handles them for us. Firebase receives which features get used, crash reports, and your device model and OS version — never anything you log. No account and no advertising identifier goes with them: the app ships the ad-ID-free build of Firebase, so the only thing the diagnostics attach to is a random install identifier. They upload only when you are online; offline, Athena works as it always did.

The only network connections

Athena reaches the network for four things. The anonymous diagnostics above go to Firebase, run by Google. If you buy Athena Pro, the purchase is handled anonymously through RevenueCat and the app store — no health data is ever involved. If you redeem a promo code, the code and an anonymous purchase ID are sent to our redemption service — never any health data. Anything you share (a report, an image, a data export) leaves your device only at the moment you choose to share it. Google and RevenueCat act as our processors, and neither ever receives your cycle data.

Apple Health

If you connect Apple Health, Athena reads only your nightly Apple Watch wrist temperature — never your menstrual data — and can write back the bleeding days you log, deleting them again when you delete them in Athena. This happens entirely on your device and is never used for advertising or shared with anyone.

Health Connect (Android)

If you enable Health Connect, Athena reads only the nightly skin temperature from your wearable — never your menstrual data — and can write back the bleeding days you log, deleting them again when you delete them in Athena. This happens entirely on your device and is never used for advertising or shared with anyone.

Keeping and deleting your data

Your data stays only as long as you want it. You can erase everything at any time from Settings → Delete all data, or by deleting the app; because your health data is never stored off your device, that removes it completely and permanently. We keep no copy of your cycle data to retain. Two small records live off your device, and neither holds any health data. If you redeem a promo code, our redemption service keeps a minimal record — the code, an anonymous purchase ID, the platform and the date — so limited codes can be counted and your unlock can be restored after a reinstall. It contains nothing that identifies you personally; email us to have it deleted. The anonymous diagnostics stay with Firebase for a limited period and are then deleted; they carry no account and no advertising identifier, so nobody can pick out yours.

You can also set an auto-delete horizon in Settings → Data, so entries older than 12, 24 or 36 months are purged from your device automatically. For sensitive situations, Athena offers a panic wipe that erases everything after 10 failed unlock attempts, and a decoy PIN that opens an empty copy of the app if you are ever made to unlock it.

This website

This marketing site is separate from the app. It uses privacy-respecting web analytics — Google Analytics 4, with IP anonymization enabled — to count visits and see which pages are useful. No health or cycle data is ever involved, because none of it exists on the web at all. This tag runs only on these web pages; the app's own diagnostics are separate and are described above.

Your rights

Because Athena stores your data only on your device, you already exercise every data-protection right yourself, without asking us: you hold your data, you can view it in the app, export a full copy you control at any time, and erase it instantly and completely. There is no copy of it on our side to access, correct, port or delete.

Under the GDPR (EU/EEA and UK) you have rights of access, rectification, erasure, restriction, portability and objection. Under the CCPA/CPRA (California) you have rights to know, delete, correct, and opt out of the sale or sharing of personal information. We can honour all of them by design: we hold no account and none of your health data, and we never sell personal data or share it for advertising — there is nothing to sell. Two records exist off your device, and neither points back to you: the anonymous promo-redemption entry described above — contact us and we will find and delete it — and the anonymous diagnostics Firebase holds for us. You may also lodge a complaint with your local data-protection authority.

Children and teens

Athena is not directed to children under 13, and we do not knowingly collect their data — nothing they log reaches us at all, because it stays on the device. Where local law sets a higher age of digital consent (13 to 16 in parts of the EU/EEA under the GDPR), younger users should have a parent or guardian's involvement. Athena also offers an optional, self-selected "New to cycles" mode with gentler guidance for people in their first years of menstruating. Whatever a user's age, what they log never leaves their device.

Contact

The data controller is Must Have Apps SIA, Valguma iela 18-16, Rīga, LV-1048, Latvia. Questions about privacy? Email hello@musthaveappscorp.com.