Privacy Policy

1. About Crest

Crest is a menopause symptom tracking app designed to help women understand their health patterns. Crest is operated by Fem Valetudo Pty Ltd (ACN 693 141 623).

2. Our Privacy Commitment

3. Information Stored on Your Device

The following information is stored locally on your device and is never uploaded to our servers unless you explicitly opt in to research participation:

Crest automatically saves a backup of this data to your iCloud (iOS) or Google Drive (Android) account so your data transfers when you get a new phone. These backups are encrypted and controlled by Apple or Google — Fem Valetudo has no access to them.

• Symptom tracking data (physical and mental health symptoms, severity, duration, notes)
• Medication information (names, dosages, schedules, adherence logs)
• Period tracking data (dates, flow intensity, related symptoms)
• Personal preferences and settings

4. Analytics Data We Collect

To improve the app experience, we collect anonymous usage analytics through Supabase. This includes:

• Which features are used (e.g., symptom tracking, medication reminders)
• App performance data (crashes, load times)
• General usage patterns (session duration, screens viewed)
• Device type and operating system version

This analytics data is anonymous and cannot be linked to your health information. We use it solely to understand how people use Crest so we can make improvements.

5. Data We Do Not Collect

We do not collect:

• Your name, email address, or contact information (unless you contact us directly)
• Precise location data
• Advertising identifiers
• Your health data (unless you opt in to research - see below)

6. Optional Research Participation

If research participation is offered and you opt in:

• Your symptom and tracking data will be anonymised (all identifying information removed)
• Anonymised data will be securely transmitted to research partners
• Data will be used for academic research on menopause and workplace productivity
• Research findings may be published in academic journals and reports
• You can withdraw from research participation at any time in Settings

Research participation will be:

• Completely optional - the app works fully without it
• Covered by appropriate ethics approval
• Subject to a separate consent process within the app

Your individual data will never be identifiable in any research outputs. Only aggregated, anonymised findings will be published.

7. Your Rights

You have full control over your data:

• Access: All your data is visible within the app at any time
• Export: You can export your data as a PDF or CSV file
• Delete: You can delete any or all of your data within the app settings, or by uninstalling the app. To also remove data from iCloud or Google Drive backups, you can manage your device's backup settings directly through your phone's Settings app.
• Withdraw from research: If you've opted in, you can opt out at any time in Settings

Since your health data is stored locally on your device, deletion is immediate and permanent. Note that any anonymised data already contributed to research cannot be withdrawn as it cannot be identified as yours.

8. Data Security

Your data is protected by your device's built-in security features, including device encryption and passcode/biometric protection. We recommend:

• Keeping your device software up to date
• Using a strong passcode or biometric authentication
• Not sharing your device unlock credentials with others

Any data transmitted for research purposes is encrypted in transit and stored securely in accordance with Australian privacy legislation and university research data governance requirements.

Device backups: Crest automatically backs up your data to your iCloud (iOS) or Google Drive (Android) account so your information is preserved if you switch phones. These backups are encrypted by Apple or Google respectively and are protected by your Apple ID or Google account credentials. Crest initiates these backups to protect your data, but Fem Valetudo cannot access or read the backed-up files — they are stored in your personal Apple or Google account. You can disable app backup for Crest at any time in your device's Settings. For more information, see Apple's iCloud security overview or Google's backup documentation.

9. Third-Party Services

Crest uses the following third-party services:

• Supabase: Anonymous usage analytics and AI summary generation, hosted in Sydney, Australia. Supabase Privacy Policy
• RevenueCat: Subscription management. Processes purchase tokens from Apple/Google to verify subscription status. RevenueCat Privacy Policy
• Apple App Store / Google Play Store: For app distribution and in-app purchases. Apple Privacy Policy · Google Privacy Policy

We do not use advertising networks or sell data to third parties.

AI-Generated GP Summary

Crest offers an optional AI-generated summary feature to help you prepare for GP appointments. When you choose to use this feature:

• What data is sent: A summary of your symptom patterns (symptom names, frequency, severity trends), sleep quality averages, cycle regularity, and medication names and types. This is an aggregated statistical summary, not your raw daily logs.
• What is NOT sent: Your name, email address, date of birth, location, device identifiers, or any other personally identifying information.
• Who receives the data: The summary is sent to a secure server hosted by Supabase (Sydney, Australia region), which forwards it to OpenAI to generate the plain-English narrative.
• Your consent: This data is only sent when you explicitly tap "Generate Summary" and confirm in the consent prompt. It is never sent automatically or in the background.
• Data retention: Neither Supabase nor OpenAI retains your health data after generating the summary. OpenAI's API data usage policy confirms that API inputs are not used to train their models.

10. Website Enquiries

If you submit an enquiry through our website contact form, we collect your name, email address, organisation (if provided), and message. This information is used solely to respond to your enquiry and is not shared with third parties.

11. Children's Privacy

Crest is intended for adults aged 18 and over. We do not knowingly collect information from children under 18.

12. Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be reflected in the app and on our website with an updated "Last Updated" date. Material changes to research data handling will be communicated to users who have opted in to research participation.

13. Contact Us

For questions about this Privacy Policy, please contact us at admin@femhq.com.au.