Effective date: September 8, 2026
Your journal stays on your device. We do not see or sell it. Optional partner sync sends only an explicitly chosen, end-to-end encrypted status through Supabase. Apple or Google and RevenueCat process limited purchase information for Premium.
Lapine stores the information you enter yourself:
Journal data is stored locally on your device only. Optional partner sync uses an anonymous technical account but does not upload this journal. System backups may contain a local copy.
If you enable the morning forecast, notifications are scheduled locally on your device. You can choose a private notification mode where the notification text contains no cycle details. Notifications can be turned off anytime in the app settings or system settings.
If you choose to share your day’s status, the app generates a short text code containing only: the date, your selected mood level, and the current phase name. The code is shared by you, through a messenger of your choice. Lapine never sends it anywhere itself. Codes you receive from friends are stored locally, and you can delete them anytime.
If enabled, Supabase processes an anonymous user ID, pair membership, timestamps, network metadata and an encrypted status. Only the preset status and optional mood you explicitly publish are synced. AES-256-GCM encryption happens on-device and the invitation carries the decryption key; Supabase does not receive that key. Calendar, period history, symptoms, due date and notes are not uploaded. Your paired partner can decrypt shared statuses.
Premium subscriptions are processed by Apple App Store or Google Play and, for entitlement validation, by RevenueCat acting as our processor. We never see your payment details. Purchase records are tied to an anonymous identifier, not to your name or health data.
The statements above describe the app’s journal. On this website, quiz answers and colored days are saved in your browser for up to 24 hours. They are not automatically imported into the app. If you request an email summary, your email address, selected starting plan and routine are sent through Resend; the colored days are not included.
To understand the web quiz funnel, we record a random visit ID, screen and action names, quiz version, traffic source, numeric campaign/ad IDs and a test marker in Supabase. Advertising services may receive neutral page and conversion events. We do not send quiz answers, symptoms, colored days or the derived profile to advertising services.
Web payments are processed by Stripe. To provide and restore access, we store the checkout, customer and subscription IDs, purchase email, subscription status, amount, currency, access code and activation timestamps in Supabase. A random quiz visit ID can link a verified purchase to the web funnel; it contains no quiz answers. Resend sends the access email. Contact us using the address below for questions or deletion requests.
For web access activation, the app can read a copied access code on its first launch, subject to your device’s paste permissions, or when you tap Paste. Only text matching the access-code format is retained and sent for validation; unrelated clipboard text is not stored or transmitted. The code and a random device identifier are saved securely on the device so activation can be retried. Optional email recovery sends a verification code through Resend. Supabase stores a short-lived verification challenge, purchase email, device identifier, attempt counts and a keyed hash of the request IP address to limit abuse. Knowing a purchase email alone does not grant access.
Lapine offers gentle, educational content and cycle estimates. It is not a medical device, not contraception, and not medical advice. Predictions are estimates based on the dates you enter. For medical concerns, please consult a doctor.
Lapine is not directed at children under 13 (or the minimum age required in your region).
If this policy changes, the updated version will be published at this address with a new effective date. Material changes will be noted in the app’s release notes.
Questions about privacy: [email protected]