Privacy Policy
Effective and last updated: 30 September 2026
Onda is a period and cycle tracker for iPhone. It is built so that what you log stays on your iPhone. This page explains exactly what that means, and it includes our Consumer Health Data Privacy Policy.
The short version
- We collect nothing. No account, no server, no analytics, no advertising, no third-party SDKs. Onda’s App Store privacy label reads “Data Not Collected”.
- Your journal lives on your iPhone. We can’t see it, so we can’t sell it, share it or hand it over.
- It leaves your iPhone only when you send it — through Apple Health sync you turn on, a backup file, a doctor report or a message to a partner.
Who we are
Onda is published by apphunt (“we”, “us”). Privacy questions and requests: support@apphunt.app.
What we collect: nothing
- Onda does not send what you log to us or to anyone else. We receive no health or cycle data, no name, e-mail address or account, no contacts, no location, no device or advertising identifiers, no usage statistics and no crash reports from the app.
- The app makes no network connections of its own. The only online service it uses is Apple’s App Store (StoreKit): to show prices, handle purchases and check whether you have Onda Pro. Apple processes the payment; we never see your payment details or your Apple Account.
- Apple gives developers aggregated App Store statistics such as downloads and sales, and — only if you allowed sharing with app developers in iOS Settings › Privacy & Security › Analytics & Improvements — crash reports. These come from Apple under Apple’s privacy policy and contain nothing you logged in Onda.
What stays on your iPhone
Onda keeps the following only on your iPhone, in the app’s private storage:
- Your journal — everything you log: period days and flow, spotting, symptoms, moods, discharge, sexual activity and sex drive, ovulation and pregnancy tests, basal body temperature, weight, pills, Apple Watch wrist temperature (if you sync with Health), your own tags and notes.
- Your cycle settings — your goal (tracking, trying to conceive, pregnancy or perimenopause), usual cycle and period length, contraception, luteal phase, pregnancy dates, and your year of birth if you enter it (it adjusts normal ranges for teens and after 40).
- What Onda works out from them — predicted periods, fertile-window and ovulation estimates, patterns, cycle-regularity checks and “worth discussing with a doctor” notes. They are calculated on your iPhone and never sent anywhere.
- App settings — reminders, units, privacy options and how many free assistant questions you have used.
Protection. The journal is one file, plus a copy of its previous version in case the file is ever damaged, encrypted by iOS Data Protection. You can add a Face ID or passcode lock (Me › Privacy), and Onda covers its screen in the app switcher.
Widgets get dates only. The app writes the few dates its widgets show (cycle start, next period, estimated fertile window and ovulation, pregnancy dates) to a container shared with the Onda widget on the same iPhone. The widget never sees your logs or notes. With discreet mode on, widgets and notifications leave out words like “period” and “ovulation”.
Reminders are local notifications scheduled on your iPhone. Depending on your iOS notification settings they can appear on the Lock Screen.
Your iPhone backup. Like other app data, Onda’s journal is part of your iPhone backup (iCloud Backup or a backup on your computer) — that is how it moves to a new iPhone. iOS makes these backups under your Apple Account; Onda uploads nothing. iCloud Backup is end-to-end encrypted if you turn on Advanced Data Protection.
Deleting. Me › Your data › Delete all data erases the journal, settings and predictions on your iPhone; deleting the app does the same. Copies you made yourself — backup files, older iPhone backups and data synced to Apple Health — stay until you delete them (how).
Apple Health (optional)
- Off until you turn it on (Me › Apple Health, or during setup). iOS asks your permission for each type of data, and you can change it at any time in the Health app (your profile picture › Apps › Onda).
- Import history reads up to three years of periods, spotting, ovulation tests, cervical mucus, sexual activity, pregnancy tests and basal body temperature from Health into your journal on your iPhone.
- Apple Watch temperature: while sync is on, Onda reads the nightly sleeping wrist temperature your Apple Watch saved in Health, each time you open the app, to recognise the temperature rise after ovulation. It only reads it and never writes it.
- Sync writes what you log in Onda to Health: periods, spotting, cycle symptoms, cervical mucus, sexual activity, ovulation and pregnancy tests, basal body temperature and weight. When you turn it on, Onda also copies your earlier history, except days Health already has from another app, so nothing is doubled.
- The permission screen lists every type Onda may read or write: menstrual flow, spotting (intermenstrual bleeding), cervical mucus quality, ovulation test result, pregnancy test result, sexual activity, basal body temperature, weight, sleeping wrist temperature, and these symptoms — abdominal cramps, acne, appetite changes, bloating, breast pain, constipation, diarrhea, dizziness, fatigue, generalized body ache, hair loss, headache, hot flashes, lower back pain, memory lapse, nausea, night sweats, pelvic pain, sleep changes and vaginal dryness.
- Health data is used only to show you your own cycle in Onda. It is never used for advertising, marketing or data mining, never sent to us and never shared.
- Apple Health keeps this data on your devices, encrypted while your iPhone is locked; if you sync Health with iCloud, Apple encrypts it end to end. Onda has no iCloud sync of its own.
- Turning sync off stops new writes. What is already in Health stays there until you delete it in the Health app (your profile picture › Apps › Onda › Delete All Data from “Onda”).
The on-device assistant
- “Ask about your cycle” runs entirely on your iPhone with Apple’s on-device language model (Apple Intelligence, on supported iPhones with iOS 26 or later).
- It receives your question and a short summary that Onda writes from your journal — for example your average cycle length, last period, cycle day, estimated fertile window, most-logged symptoms and moods, and patterns. It never receives your notes or tags.
- Nothing is sent to us, to Apple or to any other AI provider, and Onda does not save your conversations.
- Answers are generated automatically and can be wrong. They are not medical advice.
Things you choose to share
Onda never shares anything on its own. These features create something on your iPhone and hand it to the iOS share sheet; you choose where it goes, and from then on the app or person you chose controls it.
- Backup file (Me › Your data › Export backup): your whole journal as a file. It is not password-protected — anyone who has the file can read it, so keep it somewhere private.
- Doctor report (Onda Pro): a PDF summary of your cycles.
- Share with a partner: a message or a calendar file with your predicted period dates, plus the estimated fertile window only if you include it. Nothing updates automatically and nothing else is shared.
- Siri and Shortcuts: Siri handles your voice request under Apple’s privacy terms; Onda’s part runs on your iPhone.
Consumer Health Data Privacy Policy
This section is our consumer health data privacy policy under the Washington My Health My Data Act, Nevada’s consumer health data law (SB 370), Connecticut’s consumer health data rules and similar laws. These laws count processing — including inferring or deriving — as “collecting”, so we also describe what Onda’s software does on your iPhone.
Consumer health data we collect
None. We do not receive, keep, buy, access or otherwise obtain consumer health data about you. The only exception is anything you choose to write in an e-mail to us (see “E-mails to us” below).
What Onda processes on your iPhone, and why
The app processes the health data you enter or import: menstrual and cycle data; symptoms and moods; sexual and reproductive health data (sexual activity, contraception, ovulation and pregnancy tests, cervical mucus, pregnancy dates); body measurements (basal body temperature, Apple Watch wrist temperature, weight); your notes and tags; your year of birth; and the estimates it derives from them (predicted periods, fertile window, ovulation, patterns, cycle notes, pregnancy week). It does this only on your iPhone and only to provide the features you use — predictions, calendar, insights, reminders, widgets, the doctor report and the assistant. This data never reaches us.
Sources
You (what you log), Apple Health on your iPhone (only if you allow it), and backup files you choose to restore.
Consumer health data we share or sell
None. We do not share or sell consumer health data, and we do not use it for advertising.
Third parties and affiliates we share it with
None. Onda contains no analytics, advertising, attribution or data-broker code, and no affiliate receives data. Apple provides the system features you choose to use — Apple Health, Apple Intelligence on the device, iCloud Backup and the App Store — under your own agreement with Apple.
Location
Onda does not use your location and does not use geofencing.
E-mails to us
If you write to support@apphunt.app and mention your health, that message is the only consumer health data we hold. We use it only to answer you; our e-mail provider stores it on our behalf; we delete it once it is no longer needed to help you, or sooner if you ask.
Your rights and how to use them
You can ask us to confirm whether we collect, share or sell your consumer health data, to give you a copy and a list of third parties and affiliates we share it with, to delete it, or to withdraw your consent. Because we hold none — except e-mails you sent us — our answer will confirm that, and we will delete any such e-mails on request. Everything in the app is under your control directly:
- See or copy it: it is all in the app; Me › Your data › Export backup gives you a complete copy.
- Correct it: edit any day in the Calendar or the daily log.
- Delete it: Me › Your data › Delete all data; for Apple Health and backup copies see Support.
- Withdraw consent: turn off Onda’s access in the Health app, switch off sync in Onda, or stop using the feature.
Requests: e-mail support@apphunt.app. We answer within 45 days, free of charge, and we never treat you differently for asking. If we decline a request, you can appeal by replying with the word “Appeal”; we answer appeals within 45 days. If your appeal is denied, you can contact your state attorney general — in Washington at atg.wa.gov/file-complaint.
Changes
We will not start collecting or sharing consumer health data without first asking for your consent in the app. We announce material changes to this policy on this page and in the app’s release notes.
Effective date: 30 September 2026.
Children and teens
- Onda is rated 13+ on the App Store and is not directed at children under 13. It collects no personal information from anyone, including children and teens.
- If a birth year under 16 is entered during setup, logging of sexual activity starts switched off; it can be turned on in Me › Logging › Log sections.
- Parents can manage downloads and purchases with Apple’s Family Sharing, Screen Time and Ask to Buy.
Legal requests
We can’t hand over what we don’t have. If we receive a demand for a user’s data, there is no journal, account or health data on our side to produce — at most an e-mail someone sent us. Your iPhone, its backups and Apple Health remain under your control.
If you are in the EU, UK or Switzerland
- Data about your health and sex life is a special category of personal data under the GDPR and UK GDPR. Onda processes it only on your iPhone, under your control. We do not receive it, so we are not a controller of your journal.
- For e-mails you send us, apphunt is the controller. We use them to answer you (our legitimate interest, or our contract with you if it is about a purchase); health details you choose to include are processed with your explicit consent, which you can withdraw by asking us to delete them. If our e-mail provider processes messages outside your country, we rely on the safeguards the law requires, such as Standard Contractual Clauses.
- You can ask for access, correction, deletion, restriction or portability, object to processing, and complain to your data-protection authority.
Other US state laws
We do not sell or share personal information, use it for targeted advertising or profiling, or track you across apps and websites — so there is nothing for Do Not Track or Global Privacy Control signals to switch off.
Changes to this policy
If this policy changes, we will update this page and the date at the top. We will ask for your consent in the app before any change that would send your data off your iPhone.
Contact
apphunt · support@apphunt.app