Privacy Policy

1. Introduction

Asele Technologies commits to protecting personal data when using our mobile application, website, and related services. By using these services, you agree to this Privacy Policy.

2. Medical Disclaimer

Asele provides tracking tools and informational insights only and is not a regulated medical device. The Services do not offer medical advice, diagnosis, or treatment. Users should consult qualified healthcare professionals for medical decisions.

3. Information We Collect

A. Account Information

• Name and username
• Email address
• Login credentials
• Date of birth (for age verification and privacy protections)
• Optional contact details

B. Health and Cycle Tracking Information (User-Provided)

Users may voluntarily enter menstrual cycle dates, flow intensity and predictions; symptoms with severity and location; mood entries and tags; cervical discharge details; basal body temperature and ovulation data; birth control method and adherence; medications, supplements, and adherence logs; sleep quality and duration; energy levels; exercise type and activity level; hydration levels; journal entries and personal health notes; health conditions and undiagnosed symptoms (optional); and trying-to-conceive status (optional).

This data is stored only for tracking and personalized insights, and shared with third parties only when you enable Amara data access or AI Health Brief features.

C. Usage and Device Information

Automatically collected: device type and identifiers, operating system and browser, app version, IP address, crash logs and performance data, app interaction events, and last active timestamp (updated approximately every 60 seconds).

D. Notifications and Reminder Preferences

If enabled: push notification settings and device tokens, reminder preferences for cycle tracking or wellness prompts, and notification engagement feedback for personalization.

E. Onboarding Information

Cycle goals, cycle setup details, birth control method, health conditions and symptoms, support style preferences, and life context (optional).

F. Community Posts

Text of posts and comments are stored. Users may post anonymously, keeping identity hidden from other users.

G. Tasks and Productivity Logs

Task text, status, and completion history are stored.

H. Store or Transaction Data

If purchases are made: order history, billing information, and shipping address.

4. How We Collect Information

Information is collected when creating an account and completing onboarding; when entering data into the app; through user communication with the company; automatically through app usage, analytics tools, and system logs; and through secure third-party infrastructure providers.

5. Why We Collect Your Information

Data is used to create and authenticate accounts; provide menstrual cycle tracking, symptom logging, and wellness features; generate personalized reminders and notifications; store tracking history securely; power Amara AI responses (when enabled); generate AI Health Briefs (when explicitly enabled); track streaks, achievements, and engagement; improve app performance and reliability; analyze usage trends; send opted-in updates; and comply with legal obligations.

The company does not sell personal data, share it with third parties for marketing, or use health data for advertising or targeted ads.

6. Legal Basis for Processing (GDPR)

Processing is based on your consent, performance of a contract, legitimate interests (service improvement and security), and legal obligations. You may withdraw consent at any time.

7. Third-Party Services We Use

Amara AI Assistant

Amara is powered by the Lovable AI Gateway (routing to Google Gemini). Data is shared only when Amara data access is enabled. Chat messages, current cycle phase, and recent symptoms/moods are sent to generate responses. Conversations are not retained or used for model training. With the feature off, Amara uses a built-in knowledge base without sending personal data.

AI Health Brief (Corti): Opt-In Only

This optional feature generates personalized health summaries. It is off by default and requires explicit enablement with a clear consent prompt. When enabled, data sent to Corti includes aggregated cycle metrics; top symptoms and moods over selected timeframes; symptom co-occurrence patterns; medication and supplement adherence patterns; hydration patterns; health conditions and wellness context; and preferred name (if set). Corti is a European AI healthcare company under EU data protection law. It does not retain data after generating responses and does not use data for advertising or general AI model training.

Other Infrastructure and Platform Services

Supabase: secure database storage and backend infrastructure (all account information, cycle tracking data, symptom logs, wellness logs, journal entries, community posts, tasks, health notes, and reminder preferences).

Firebase Authentication / Firebase Services: account authentication, push notifications, and app infrastructure (email address, device tokens, and authentication credentials).

OneSignal: push notification delivery (notification content and device player ID).

Google Analytics: usage analytics and performance monitoring (anonymized usage data, device identifiers, app interaction events, and crash logs).

Google Play Services: required platform services for Android functionality (device information and identifiers for app distribution and updates).

Google Calendar / Microsoft Outlook (optional): calendar synchronization only with explicit authorization (OAuth authorization tokens and read-only calendar list metadata; can be disconnected anytime).

Anchor / Spotify (Podcast): serving podcast episode content via RSS feed (no personal user data sent; the app only reads the public RSS feed).

8. International Data Transfers

Data may be transferred to and stored on servers outside your location. Appropriate safeguards ensure data protection in accordance with this Privacy Policy and applicable data protection laws.

9. Data Storage and Security

Appropriate technical and organizational measures protect data from unauthorized access, accidental loss, misuse, and alteration. All data is encrypted in transit (TLS) and at rest. Supabase uses Row Level Security (RLS) so users access only their own data. Authentication tokens are securely managed and automatically refreshed. Data entered offline is temporarily stored in device local storage (IndexedDB) and synced to secure servers when connection is restored.

10. Data Retention

Personal data is retained while your account remains active. When you delete your account, personal data is permanently removed from active systems; cycle tracking data, journal entries, community posts, and all logs are deleted; and backup copies are automatically deleted within 90 days unless legally required. If you deactivate rather than delete your account, data is retained and the account can be reactivated by logging back in.

11. Account Deletion

You may delete your account directly inside the Asele app. When you delete, all stored personal information linked to your account is permanently removed; cycle tracking data, wellness logs, and journal entries are deleted; and access to the Services ends immediately. For deletion difficulties, contact support@asele.tech.

12. Cookies and Analytics Technologies

Cookies and similar technologies are used to operate the website, understand visitor behavior, and improve performance. Analytics providers such as Google Analytics set cookies per their own privacy policies. Users can control cookies via browser settings.

13. Your Rights (EU / EEA Users)

You have the right to access your personal data, correct inaccurate information, request deletion, restrict processing, object to processing, withdraw consent (including AI Health Brief and Corti data sharing), export your data, and lodge a complaint with a supervisory authority. To exercise rights, contact support@asele.tech. Users outside the EU/EEA (including UK, US, Nigeria, and other regions) may also contact the company to access, correct, or delete personal data. Reasonable requests are honored regardless of location.

14. Use by Minors

Asele is unavailable to children under 13. Users confirm their age during onboarding. Accounts discovered to belong to users under 13 are removed and associated data deleted promptly. Users aged 13–17 may use Asele with parental or guardian permission and access a privacy-restricted version: AI Health Brief and Corti data sharing are unavailable to users under 18; data collection is limited to core cycle tracking and account functionality; and no data from users under 18 is shared with third-party AI services. If a parent or guardian believes a child under 13 created an account or a minor's data was collected without consent, contact support@asele.tech for review and removal.

15. Community Features

The app includes an in-app community for posting and commenting. Users may post anonymously, keeping username and identity hidden from others. Community content is stored on secure servers. Users should not share personally identifiable health information in community posts they are uncomfortable with others seeing.

16. Platform Data Disclosures (App Store & Google Play)

Data practices described in this policy are reflected in Apple App Store and Google Play Store disclosures. The company does not use Apple's HealthKit framework or connect to Apple Health. No advertising identifiers (Apple's IDFA or Google's GAID) are used for cross-app tracking or advertising.

17. Changes to This Policy

This Privacy Policy may be updated periodically. The "Last Updated" date is revised when changes occur, with appropriate user notification via app or email. Continued service use after changes indicates acceptance of the updated policy.

18. Contact Us

Asele Technologies
Email: support@asele.tech
Website: asele.tech