Stages of Her Privacy Policy

Last updated: 27 October 2026 · Effective: 27 October 2026

1. Who we are and how to contact us

Stages of Her is a women's health tracking platform operated by Stages of Her (Pty) Ltd, South Africa. This policy covers the Stages of Her app, website and connected doctor and affiliate tools.

For privacy questions, requests or complaints, contact privacy@stagesofher.com. For account access help, contact support@stagesofher.com.

2. Information we collect

• Account information: email address, country, date of birth, account role, authentication details and any optional profile or contact information you provide. Passwords are stored as hashes, rather than readable passwords.
• Health information you choose to record: period and cycle dates; fertility signs and test results; pregnancy and postpartum information; perimenopause and menopause symptoms; contraception; PCOS and other symptoms; mood, sleep, sexual wellbeing, hydration, diet, exercise and supplements; motherhood records; screening responses; notes and journal content. Which information we hold depends on the features you use.
• Connected health information: data you permit us to read from Google Health Connect, as described below.
• Subscription and payment records: subscription status, payment references and billing information. Paystack processes card payments; we do not store your full card number.
• Technical and support information: device and app information, notification tokens, network request information such as IP addresses, error reports, performance diagnostics and messages you send to support.
• Doctor and affiliate information: professional details supplied for doctor verification, patient connections, referral codes and referral activity, where those account types apply.

3. Google Health Connect

On supported Android devices, connecting Google Health Connect is optional and requires your permission. Depending on the permissions and features you choose, Stages of Her reads:

• Steps: to display daily movement in your activity tracking.
• Sleep sessions: to display sleep records and duration in your sleep tracking.
• Heart rate: to display measurements alongside your tracked health information.
• Exercise sessions, where supported and separately authorized: to let you import workouts instead of entering them manually.

Authorized records may be sent to our backend and stored with your account to provide connected tracking and synchronization. We use this information for the health and fitness features you request, not for advertising, sale to data brokers, credit decisions or insurance eligibility. We do not sell Health Connect data or use it to train general-purpose AI models.

You can review or revoke permissions in your device's Health Connect settings. Revoking permission stops future access; it does not automatically remove information already imported into Stages of Her. You can delete your Stages of Her account to remove associated stored information. Deleting your Stages of Her account does not delete the original records held by Health Connect or other apps.

4. How we use information

We use information to provide tracking, estimates, reminders, reports and account synchronization; manage subscriptions; provide support; maintain security; diagnose errors; and meet applicable legal obligations. Health estimates are based on the information available to the app.

We request specific consent to process health information and separate consent for doctor sharing. Account and subscription information is used to provide the service you request. Security and necessary operational processing support our legitimate interests, and some records may be processed to meet legal obligations, where applicable. You may withdraw health-data consent in Profile → Privacy & data; doing so limits features that require that information.

An optional research preference records willingness to participate in future anonymized research. It does not, by itself, authorize an undisclosed research project.

5. Sharing and service providers

We do not sell personal or health information and do not use it for targeted advertising. We do not integrate advertising or third-party behavioral analytics services into health tracking.

• Doctors: a linked doctor can access tracked information only when you grant the separate sharing permission. You can revoke it in the app.
• Partners: if you invite a partner, the partner features show a limited reproductive-stage view rather than unrestricted access to all trackers.
• Paystack: processes payments and receives information needed to do so. Its own privacy and record-retention practices apply to its payment records.
• Cloudflare: provides website hosting, network security, traffic delivery, email infrastructure and off-server backup storage. As a service provider, it processes the data needed to deliver those services, including requests passing through its network.
• Google Firebase Cloud Messaging and platform notification services: process device identifiers or notification tokens and notification content needed to deliver app notifications.
• Diagnostics: the app sends error and performance diagnostics to our self-hosted GlitchTip service. Automatic screenshot and view-hierarchy capture are not enabled.

Authorized staff may access information when necessary for support, security or service operations. We may disclose information when required by applicable law or a valid legal process, or when necessary to protect users and the service. We do not give advertisers or data brokers access to tracked health information.

6. Storage, international processing and security

Our primary application database is hosted on our server in Johannesburg, South Africa. Service providers, including Cloudflare and notification or payment providers, may process information in other countries. Using the service from outside South Africa involves international transfer of information.

We use HTTPS for data in transit, authenticated access, access controls, password hashing and encryption for two-factor authentication secrets. Privacy features include Discreet Mode and an optional PIN lock. No transmission or storage system can be guaranteed completely secure.

7. Retention and account deletion

We retain account and tracked information while your account remains active. You can permanently delete your account and associated records in the live application database from Profile → Privacy & data → Delete my account, or at stagesofher.com/deleteme. The website requires sign-in and password confirmation; two-factor verification applies when enabled.

Backups are separate snapshots and are not immediately rewritten when an account is deleted. Local database backups use a 14-day retention rotation. Backups are also replicated to Cloudflare R2 for disaster recovery; those copies are governed by the backup storage retention configuration. Deleted information may remain in backup snapshots until they expire and is not available through the live account. Technical logs and records independently held by payment or other service providers are separate from your live account records and may remain under their operational retention schedules or legal obligations. Contact us for questions about a particular record.

Revoking a doctor's access does not remove reports you previously shared with that doctor outside the app or records they independently retain. Account deletion does not automatically cancel a subscription managed by an external app store; manage those subscriptions with that store.

8. Your choices and rights

You can review and edit your entries, manage device permissions and notifications, withdraw consent, revoke doctor sharing, export your data and delete your account. Export and consent controls are in Profile → Privacy & data. You can also contact our privacy email to request access, correction, deletion or assistance. We may need to verify your identity before acting on a request.

Depending on where you live, you may also have rights to portability, restriction of processing, objection, or a complaint to a data protection authority. In South Africa, you may contact the Information Regulator. In the European Union or United Kingdom, you may contact your local supervisory authority. We handle requests in accordance with the laws applicable to your situation.

9. Children and minimum age

Registration requires a date of birth. Our current minimum registration age is 13, or 16 in the European Economic Area. We do not provide a parental-consent registration flow. If you believe an account belongs to someone below the applicable minimum age, contact us so we can investigate and delete it where appropriate.

10. Website storage

The website uses storage needed for functions you request. For example, the subscription checkout flow temporarily keeps an access token in your browser's session storage so it can verify payment when you return. The account deletion page keeps its authentication token in page memory. We do not use advertising cookies or third-party behavioral analytics on the website.

11. Policy changes

We publish updates on this page with a revised date. Material changes to how we handle health information will be communicated through the service, and we will request additional consent where required. Contact privacy@stagesofher.com with any questions.