Privacy Policy

Vylopause collects the information you provide directly and the health and wellbeing data you choose to log. We do not collect more data than is necessary to provide the service. Account and contact information: your email address and (optionally) your name when you create an account, plus a password stored as a one-way hash. If you sign in with Google, we receive the email address and profile details Google shares with us. Menopause symptoms and health/wellbeing information: self-reported symptoms (for example hot flashes, mood, sleep, brain fog, joint pain), biometric readings (such as resting heart rate, heart-rate variability, weight, fasting glucose), medication tracking, and free-text notes you add to your logs. We also store the details you enter during onboarding — menopause stage, date of birth, baselines, screening dates (e.g. mammogram, DEXA scan), and related context.

We store the email address you register with, used to identify your account, send security and account-related messages, deliver check-in reminders, and (if you request it) email your wellness reports to you or a healthcare provider you nominate. Your password is never stored in readable form; only a salted hash is retained. When you use Google Sign-In, the name and email returned by Google are used to create and identify your account.

The core of Vylopause is the daily information you log: symptom ratings, counts, triggers, mood and cognition, physical and genitourinary symptoms, weight, and notes. We also generate derived “bio-scores” and protocol suggestions from this data. Optionally, you can connect a health source (Apple Health, Google Fit, Google Health Connect, or a Bluetooth wearable) so Vylopause can import readings such as heart rate, HRV, sleep and weight; this only happens with your explicit permission and you can revoke it at any time. All symptom and health information is linked to your account and is yours to view, edit, export and delete.

We use your information only to operate and improve Vylopause for you: • To create and manage your account and authenticate you. • To calculate your daily bio-score and generate personalized wellness protocols and AI insights based on your logged symptoms and biometrics. • To let you track symptoms, medications, mood and trends over time and to produce downloadable reports you can share with your healthcare provider. • To send check-in reminders, medication reminders, and (where available) mobile push notifications, according to the notification preferences you set. • To generate your monthly trends report and deliver it to the email address you choose. • To detect safety-significant entries (for example bleeding after menopause or very high symptom severity) and present appropriate resources — Vylopause never performs automated medical decisions. • In aggregate, de-identified form, to understand how the app is used and to improve its features. We do not use your data to train AI models.

Your data is stored securely on Vylopause's hosted platform, which manages authentication, the database, file storage and hosting. Data is encrypted in transit using TLS and at rest using industry-standard encryption. Access to production data is restricted on a least-privilege basis and is limited to authorised personnel who need access to operate and support the service. We isolate account/identity records from health logs, and payment details never touch our servers (see Payments). While no service can guarantee perfect security, we apply reasonable technical and organisational measures to protect your information and to investigate and notify you in the event of a security incident affecting your personal data.

Vylopause relies on trusted service providers to deliver the app: • AI / language-model provider: your aggregated symptoms and biometrics are sent to our AI provider to generate personalized wellness insights and general health definitions. We instruct our AI provider not to use your content to train its models. • Payment provider (Stripe and Google Play Billing): handles subscription payments; Vylopause never receives, processes or stores your full card number or payment details. • Email provider: used to send account messages, check-in reminders, and the reports you request. • OAuth provider (Google): used only for Google Sign-In; Google shares the email and basic profile it returns to us. • Hosting, database and file-storage provider: the platform that stores account, profile and health-log data and serves the app. • Optional health-data connectors (Apple Health, Google Fit, Google Health Connect, Bluetooth wearables): only used when you connect them, to import readings you choose. Each provider processes data only on our instructions and under appropriate data-protection agreements. We do not sell your data to anyone.

Vylopause offers a Premium subscription (for example, a monthly plan). When you subscribe via Google Play Billing, your purchase is processed by Google; Vylopause receives only a verified purchase token and an order identifier — never your card or billing details, which stay with Google. When you subscribe via our web checkout, payment is processed by Stripe under its own secure environment, and again we receive only a transaction result, not your raw card data. We store the resulting subscription status, provider, product identifier, purchase token (from Google Play) and expiry date on your profile purely to enable and verify your entitlement. Google Play refund and subscription-management terms, and any applicable Google Play policies, apply to Google Play purchases; you can manage or cancel a Google Play subscription from your Google account at any time.

We use basic, first-party analytics to understand aggregate usage (for example which features are used) and to improve reliability and performance. This may include pseudonymous usage events, device type, app version, and language, but not your symptom entries or health readings. We do not use behavioural advertising or cross-app ad-tracking SDKs. Diagnostic and crash information, where collected, is used only to fix and improve the app.

Vylopause does not sell your personal or health information, and we do not rent or share it for third-party advertising purposes. We do not combine your data with data from third-party brokers. The only third parties that receive your data are the service providers listed above, acting strictly as processors to deliver the features you use. Anonymous, aggregated statistics that cannot identify you may be used internally or in reports about the app.

We keep your information for as long as your account is active, so you can continue to see your history and trends. If you cancel a Premium subscription, your data remains so you keep your history; the subscription entitlement simply changes. If you stop using Vylopause, we keep your data for a reasonable period to allow you to return and then progressively delete or anonymize inactive accounts in line with our retention schedule, unless we are legally required to retain specific records. Reports you email from the app are delivered to the recipient you choose and are then outside Vylopause's retention controls.

You can delete your account and the personal data associated with it from within the Vylopause app (Settings → account/delete-account) or via the in-app Data Deletion request. Deleting your account permanently removes your user profile, symptom logs, bio-scores, medication logs and linked data. Community posts you have shared may remain visible to others in anonymized form, as the community does not display your identity. You can also request data export or deletion by contacting us (see Contact). Where a Google Play subscription exists, cancelling the subscription in your Google account stops future billing but does not by itself delete your in-app data — please use the delete-account option for that.

Depending on where you live (for example under the GDPR/UK GDPR, or California/other U.S. state laws), you may have the right to: access the personal data we hold about you; receive a copy of it in a portable format; correct inaccurate data; delete your data; object to or restrict certain processing; withdraw consent for processing based on consent; and lodge a complaint with your data-protection authority. Health data is special-category data; we process it only as necessary to provide the service you requested, with your consent. To exercise any right, contact us using the details in the Contact section; we will respond within the timeframe required by applicable law.

Vylopause and its service providers may store and process your data in countries other than your own, including the United Kingdom, the European Economic Area and the United States. Where data is transferred outside your region, we do so using appropriate safeguards such as standard contractual clauses or other lawful transfer mechanisms recognized by applicable law, and only with providers that meet our security requirements.

Vylopause is a women's-health and menopause-management app intended for adults. It is not directed at, and we do not knowingly collect personal data from, children under the age of 16 (where local law requires, 18). Menopause by its nature affects older users; if you believe a minor has provided us personal data, please contact us so we can delete it.

We may update this Privacy Policy to reflect changes in Vylopause, our practices, or legal requirements. When we do, we will revise the “Last updated” date above and, for material changes, provide notice within the app or by other reasonable means. Continued use of Vylopause after a change means you accept the updated policy. We encourage you to review this page periodically.

If you have any questions, requests, or concerns about this Privacy Policy or your personal data — including access, correction, deletion or export requests — please contact the developer/business responsible for Vylopause:

DTD Consultancy Limited 71–75 Shelton Street, Covent Garden, London, WC2H 9JQ, United Kingdom Email: dtd.consultancy@outlook.com