Privacy Policy
This Privacy Policy explains how the PBAC Score mobile application and this website (pbacscore.com) handle data. PBAC Score is operated by PrepHub LLC.
The short version: the cycle data you enter in the app stays on your device. The app sends only a small, fixed list of anonymous usage events, which you can turn off. This website sets no cookies and runs no analytics or advertising trackers.
This document describes only data flows that actually exist in the current product. It is written to be accurate rather than aspirational, and does not claim compliance with any specific law that the product’s architecture cannot support.
1. Data you enter in the app
When you use PBAC Score you log menstrual-hygiene events — pads, tampons and clots (with a light/medium/full or small/large level), and whether a day involved leaking. From these entries the app derives your cycles and PBAC scores.
All of this is stored locally on your device in an on-device database. There is no account system, and we do not operate a server that receives or stores your cycle data. We cannot see it, and we cannot retrieve it on your behalf.
Device backups
Your device’s operating system may automatically back up the app’s local database to your own cloud account — iCloud on iOS, or Google Drive Auto Backup on Android. These backups are between you and Apple or Google. PBAC Score has no access to them and is not a party to them.
You can generate a one-page PDF overview of your completed cycles on your device and share it through your phone’s standard share sheet. That file is created locally and leaves your device only if you choose to share it.
2. Anonymous usage analytics
To understand whether the app is genuinely useful, the app sends a short, fixed list of anonymous interaction events to our analytics processor, PostHog Inc.. This is the only data the app transmits.
The complete list of events is:
| Event | What it records |
|---|---|
| app_open | The local calendar date and whether the open was a fresh launch, a return, or a notification tap. |
| cycle_opened | The sequential number of the cycle (1, 2, 3, …). |
| cycle_closed | The cycle number, its length in days, and the number of bleeding days. |
| event_logged | The event type (pad, tampon, cup, clot or leak) and the number of the cycle it belongs to. |
Each event carries a random, app-generated identifier created on first launch and stored only on your device. It is not linked to your name, email, Apple ID, Google account, advertising identifier, or any other persistent device identifier. Reinstalling the app generates a new identifier.
What these events never include
- PBAC scores or any blood-loss values
- The specific calendar dates of your cycles, bleeding days or events
- Event levels (light / medium / full, small / large)
- Any free-form text
- Your name, email, date of birth, address or phone number
- Apple ID, Google account, advertising identifiers (IDFA/AAID) or other persistent device IDs
- Location, photos, biometrics, or health/fitness data
Turning it off
Usage analytics is on by default and can be switched off at any time in the app under Settings → “Help improve the app”. A short notice on first launch explains this. Once off, no further events are sent. To request deletion of previously sent anonymous events, contact [email protected].
3. Data when you visit this website
This website is a set of static pages. It sets no cookies, embeds no advertising or analytics trackers, and loads no third-party fonts or scripts.
As with any website, the hosting provider that serves these pages may keep standard technical access logs — such as your IP address, the time of the request, the page requested and your browser’s user-agent string — for security and operational purposes. We do not use these logs to build a profile of you and do not combine them with the app’s analytics.
4. Support requests you send us
If you email us for support or to exercise a privacy right, we receive your email address and whatever you choose to put in your message. We use it only to respond to you and to keep a record of the request, and we do not use it for marketing.
5. Third-party services
We keep third-party involvement to a minimum. The only processor that receives data from the app is:
| Processor | Role | Reference |
|---|---|---|
| PostHog Inc. | Anonymous usage analytics (Section 2) | https://posthog.com/dpa |
Analytics events are sent to PostHog Inc. over an encrypted connection to the host us.i.posthog.com. They are never sold, shared with advertisers, or used for marketing. Apple iCloud and Google Drive are not our processors — those backups are between you and the platform vendor.
6. Storage, transfer and security
- Your cycle data is stored on your device and, if your OS is configured to do so, in your own cloud backup.
- Anonymous analytics events are transmitted over an encrypted (TLS) connection.
- We do not operate a database of your personal cycle data, so there is no central store of it to breach.
No method of electronic storage or transmission is completely secure. We cannot guarantee absolute security, but we limit risk by keeping your sensitive data on your own device.
7. Retention and deletion
- Cycle data: removing the app from your device deletes its local database. To remove a cloud backup, use your platform’s tools (iOS: Settings → your Apple ID → iCloud → Manage Account Storage; Android: Google Account → Data & privacy → Backups).
- Individual entries: you can delete a logged event inside the app.
- Anonymous analytics: switch analytics off in Settings to stop sending events, and email [email protected] to request deletion of previously sent anonymous events. Because these events are not linked to your identity, we cannot return them to you in readable form.
- Support emails: retained only as long as needed to handle your request and keep a reasonable record.
8. Your rights
Depending on where you live, you may have rights to access, correct, delete, or restrict the processing of personal data, and to object to certain processing. Because the app holds your cycle data on your own device, you already have direct control over most of it.
Users in Russia
For users in the Russian Federation, the app is designed so that the sensitive data about your menstrual health is not collected by us: it remains on your device. The only data transmitted is anonymous usage statistics, as described in Section 2, which you can disable. Requests can be sent to [email protected].
Users in the United States
We do not sell personal information and do not share it for cross-context behavioural advertising. To make a privacy request, contact [email protected].
To exercise any right, email [email protected]. We will respond within the time required by applicable law.
9. Children
PBAC Score is not directed at children. It is intended for users of at least 13 years of age. We do not knowingly collect data that would identify a child.
10. App stores
The app is distributed through the Apple App Store and, where available, other app stores. The privacy disclosures shown on each store listing (Apple’s “App Privacy” label and Google Play’s “Data Safety” section) describe the same practices summarised here.
11. Changes to this policy
If we make a material change — for example, adding a collected event or a new processor — we will update the effective date at the top of this page and provide notice in the app before the change takes effect.
12. Contact
For privacy questions or requests, contact [email protected]. The operator of the app is PrepHub LLC.