Who we are
Her Rhythm (the “App”) and this website, bloom.mlabs.ng, are made by MLabs Technologies Ltd (“MLabs”, “we”, “us”), a company registered in Nigeria (RC9939212), with its head office at 10 Harrison Cmonyei Street, ULO, Ibusa Road, Asaba, Delta State, Nigeria. We process personal data in line with the Nigeria Data Protection Act 2023 and, where it applies, the GDPR.
The summary
- No account and no Her Rhythm server. Your periods, daily logs, moods, symptoms, sexual health and contraception entries, test results, notes and settings are stored only on your device.
- Encrypted on the device. The App’s database is encrypted with a key held in your phone’s secure keystore (Android Keystore or iOS Keychain).
- We never receive your health data. We cannot read, sell or share what you log, because it never reaches us.
- No ads and no analytics. The App contains no advertising or analytics SDKs, and does not use your advertising ID.
- Optional features (backups, purchases and crash reports) are explained below, with what each involves.
Data stored on your device
Everything you enter stays on your phone, encrypted. Your phone’s own cloud backup is switched off for the App, so the database is not copied to your device backups. Your data is deleted when you use Delete all data in the App or uninstall it.
Backups (optional)
Backups are off until you turn them on. Before a backup leaves your phone, it is encrypted with AES-256 using a passphrase that only you know. You can save the encrypted file yourself, or send it to your own Google Drive.
For Google Drive, you sign in with your Google account and the App asks for permission to use only Drive’s hidden app data folder (drive.appdata), which it cannot use to see your other files. Your email address is used on the device to show which account holds the backup. The encrypted file goes directly from your phone to your own Google Drive. We never receive it, your passphrase or your Google sign-in details, and we cannot decrypt your backup. If you forget your passphrase, nobody can recover the backup. Her Rhythm’s use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Google’s handling of your account is covered by the Google Privacy Policy.
The doctor report
The report is made on your phone. It is only shared when you choose to share or save it, and it never includes intimacy entries.
Crash reports
To fix bugs, the App may send crash and error reports to Sentry, our error-monitoring provider. A report contains technical details such as the error, your device model, operating-system and app version. We configure it not to send personal information or store your IP address, and reports never include your health entries or notes.
Purchases
Her Rhythm Plus is bought through Google Play (and, when it launches, the App Store). The store processes your payment; we only receive confirmation that a purchase was made so the App can unlock Plus. We never see your card details.
Notifications, sensors and biometrics
Reminders are scheduled locally on your phone. If you turn on a feature that uses your fingerprint, face or a device sensor, the check is handled on your phone and nothing leaves it; the App only learns the result. The App does not access your camera, microphone, location, contacts or photos.
This website
This website doesn’t use cookies or analytics. Our hosting provider keeps standard server logs (IP address, page requested, time and browser) for security, for a short period.
Children
Her Rhythm is made for adults and older teens. It is not directed at children under 13, and we do not knowingly collect personal data from anyone, of any age.
Your rights
Because your data is on your device, you are always in control: you can view, correct and delete it in the App at any time. For anything else, including your rights to access, object or complain, email us at herrhythm@mlabs.ng. You can also complain to the Nigeria Data Protection Commission or your local data protection authority. See how to delete your data.
Changes
If we change this policy, we will update the date above and, for significant changes, tell you in the App.
Contact
MLabs Technologies Ltd, 10 Harrison Cmonyei Street, ULO, Ibusa Road, Asaba, Delta State, Nigeria. Email herrhythm@mlabs.ng.