Privacy Policy Ivy — Period & Cycle Tracker · Last updated: 17 July 2026
This policy explains what Ivy ("the app", "we") does with information when you use it. Ivy is published by Webgrup.
The short version. Your cycle data — periods, symptoms, moods, notes, name, age — is stored only on your phone. We never receive it, never upload it, and never sell it. The app is free and paid for by ads, and the Google AdMob advertising service does collect limited technical data (such as advertising identifiers) as described below.
- Data that stays on your device Ivy has no accounts and no cloud. Everything you enter is written to your phone's local storage and never leaves it:
Period days, flow, symptoms, moods, notes Water and weight entries Your name, age, cycle length, period length and goal App settings (theme, reminders) We have no server that stores this information, so we cannot read it, share it, hand it to anyone, or recover it for you. If you delete the app, this data is deleted with it.
- Data collected for advertising Ivy is free and supported by advertising through Google AdMob. To show ads, Google collects and processes limited data from your device, which may include:
Advertising identifier (IDFA on iOS) and device identifiers IP address, and approximate location derived from it Device type, operating system and app version Ad interactions (impressions, clicks) and diagnostic/crash data This data is collected by Google, not by us — we never receive your cycle information through it. Google's handling of this data is described in the Google Privacy & Terms.
Your cycle data is never used to target ads. It is not sent to Google or anyone else.
Your choices about ads In the EU, UK and Switzerland: the first time you open Ivy you are asked for consent to personalized ads. If you decline, you will still see ads, but non-personalized ones, which use less data. On iOS: you are asked separately for permission to track (App Tracking Transparency). If you decline, the advertising identifier is not used to track you. You can reset or limit your advertising identifier at any time in your device settings.
Notifications If you turn on period reminders, they are scheduled locally by your phone using predictions calculated on the device. No push server is involved and no data is sent anywhere.
Security You can protect the app with a PIN and Face ID / fingerprint. The PIN is stored as a salted hash in the device's secure storage (iOS Keychain / Android Keystore) — not in plain text, and not in ordinary app storage.
Because there is no account and no backup, if you forget your PIN there is no way to recover your data; the only option is erasing it and starting over.
Children Ivy is not directed at children under 13. If you are under the age of digital consent in your country, please use the app only with the involvement of a parent or guardian.
Your rights Under the GDPR, the Turkish KVKK and similar laws you have rights of access, correction, deletion and objection. In practice:
Your cycle data: it is on your device only. You can view, change or permanently delete all of it at any time via Profile → Reset all data, or by deleting the app. We hold no copy to give you or delete. Advertising data: this is held by Google. Use the choices in section 3, your device settings, or contact Google to exercise your rights over it. 8. Medical disclaimer Ivy is not a medical device and is not a method of contraception. Predictions are statistical estimates based on what you log and can be wrong. Do not rely on them to prevent or achieve pregnancy, or to make medical decisions. Talk to a healthcare professional.
Changes If this policy changes we will update this page and the date above. Continuing to use Ivy after a change means you accept the updated policy.
Contact Questions about this policy or your privacy: [email protected].
Ivy is published by Webgrup. Your cycle data stays on your device.