YuvixData Practices Overview
We believe in absolute transparency about where your personal information lives and how it is protected. Below is an itemized breakdown of our data handling practices.
1. Stored Exclusively on Your Physical Device
All personal cycle and lifestyle logs are encrypted on-device via SQLCipher. They are never sent to Mentarich LLC or any remote cloud analytics servers:
- Period start and end dates, flow intensity, and duration history
- Symptoms, mood check-ins, and daily reflections
- Fertility-awareness records (Basal Body Temperature, LH tests, cervical mucus)
- Movement activity logs, workout notes, and duration records (including workouts you choose to import from Android Health Connect, saved without an effort rating)
- Optional water, protein, weight, and fasting logs (stored only if you turn those trackers on)
- Opaque Health Connect record IDs, kept only so the same workout is not imported twice (stored only if you connect Health Connect)
- Care points and Moon Garden progression milestones
2. Processed by App Store & Billing Infrastructure
When a RevenueCat key is configured, Yuvix contacts RevenueCat at every launch and resume, for every user, to load subscription offerings and status. If you purchase a Yuvix Premium subscription, Apple, Google, and RevenueCat also process the commerce information needed to activate it. RevenueCat stores this in the United States. Items include:
- Anonymous customer app user identifier (random UUID)
- Product ID purchased (Monthly or Annual plan)
- Entitlement active status and subscription expiration timestamp
- Platform receipt validation token
- Technical information such as device type, operating system, and last-seen time, plus standard network metadata
3. Optional Android Health Connect
On Android only, and only after you tap Connect health data in the app, Yuvix can read from Health Connect. This is read-only. Nothing is requested at launch, and there is no background sync.
- Read: exercise sessions (imported only when you tap Import recent workouts, up to the last 30 days) and sleep sessions (read while the Move screen is open to show last night's sleep duration).
- Kept on your device: imported workouts (exercise type, start and end time, no effort rating) and opaque record IDs used to avoid duplicates.
- Not kept: sleep data. Heart rate, calories, distance, routes, device, and source app are not read.
- Not sent anywhere: none of it goes to Mentarich LLC or any server.
- Revoke: tap Disconnect on the Health data page (Settings > Connect health data), or manage Yuvix in the Android Health Connect app.
- Delete: Remove imported workouts deletes only imported workouts. Delete All Local Data deletes everything Yuvix stored, but does not change Health Connect permissions.
4. Temporary Files and Reminders
- Doctor-Ready Health Report PDF: created on your device as a temporary file and deleted after you share it or dismiss it. It is not kept as a stored record. Copies you save or send from the share sheet are outside Yuvix.
- Reminders: optional local notifications with generic text. Nothing is sent to a server.
- Backups: the encrypted health database is excluded from device backups on both Android and iOS.
- Encryption keys: held in the Android Keystore or the iOS Keychain (this device only). We do not verify that they are hardware-backed.
5. What We Never Do
- We never write data to Health Connect.
- We never sell or rent your personal information to third parties.
- We never use reproductive or menstrual health data for targeted advertising or user profiling.
- We never upload your generated Doctor-Ready PDFs without your explicit operating-system share command.
6. User Control
You have complete control over your records at all times. You can view, edit, or permanently erase your local database via Settings > Data & Privacy > Delete All Local Data. This does not clear Health Connect permissions or delete your RevenueCat customer record; to have that record deleted, email support@yuvixapp.com.