Privacy Policy

Otty (“we,” “our,” or “us”) is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and safeguard your information when you use the Otty mobile application (“the App”).

Information We Collect

We collect the following categories of information:

• Account information (optional): If you choose to sign in, we collect your email address, name, and authentication identifiers from your chosen sign-in provider.
• Health information: Menstrual cycle data, cycle and period length, and related cycle information. You enter this yourself, or, if you choose to connect Apple Health, the App reads your period (menstrual flow) dates, ovulation test results, basal body temperature, and cervical mucus logs from Apple Health (read-only) to fill in period dates and confirm your ovulation day for you.
• Content you create in the App: Personal content you choose to add or save, including names you set, notes you write, items you save or bookmark, milestones, profile photos, and any other content you create within the App.
• Subscription information: Purchase history, transaction identifiers, and subscription status, processed through our subscription management provider.
• Device and usage information: Device identifiers, push notification tokens, app version, operating system, in-app interactions, crash reports, and performance data, collected to operate the App and improve its quality.
• Customer support information: Any information you provide when you contact us for support.

How We Use Your Information

• Provide and personalize the App’s core features
• Sync your data across your devices when you sign in (optional)
• Deliver notifications you have opted into
• Process your subscription and provide customer support
• Improve app stability, performance, and product quality
• Comply with legal obligations

Sensitive Health Data

We recognize that menstrual cycle data is sensitive health information. This data is encrypted in transit and stored with access controls. We do not use your health data for advertising, and we do not sell your health data to third parties.

If you choose to connect Apple Health, the App requests read-only access to four Cycle Tracking data types: menstrual flow, ovulation test results, basal body temperature, and cervical mucus quality. It uses menstrual flow only to determine your period start dates and cycle phases, and the other three only to confirm the day you ovulated in a cycle and refine your next period estimate. These calculations happen on your device. The App never writes any data to Apple Health and reads no other health data. Health data obtained through Apple Health is never used for advertising, is never sold, is not sent to our analytics providers, and is not shared with third parties for their own purposes. You can stop syncing at any time in the App’s Settings, or revoke access entirely in the iOS Settings app under Privacy & Security, then Health, then Otty.

For more on how we handle your reproductive and cycle information, including your rights under Washington’s My Health My Data Act and similar state laws, see our Consumer Health Data Privacy Policy.

Sharing With Paired Partners

If you choose to pair with another user inside the App, certain information you create or enter (such as cycle data, names, and content) is shared with the user you pair with as part of the pairing functionality. You can end pairing at any time from the App’s Settings.

Data Storage and Security

Your data is stored on your device. If you choose to sign in, your data is also backed up to our cloud infrastructure providers. Data is encrypted in transit using TLS, and we apply industry-standard security measures to protect data at rest. No system is perfectly secure, and we cannot guarantee absolute security.

Service Providers

We use third-party service providers to operate the App. These providers process data on our behalf for purposes such as authentication, cloud storage, subscription management, push notifications, analytics, and crash reporting. Each provider has its own privacy policy.

Current providers include Google Firebase, RevenueCat, PostHog (product analytics; app data hosted in the European Union, website analytics hosted in the United States and routed through Cloudflare), and Apple Push Notification Service. This list may be updated from time to time without changing this Policy.

On ottyapp.com, PostHog may also record anonymous session replays and click heatmaps so we can see how pages are used. Anything typed into a form is masked before it is recorded, and the period calculator page is never recorded.

We do not sell your personal information to any third party.

Your Rights and Choices

Regardless of where you live, you can:

• Export your data from the App’s Settings.
• Delete your account and data from the App’s Settings.
• Control notifications from the App’s Settings.
• Use the App without an account. Sign-in is optional; some features (such as cloud sync and pairing) require sign-in.

California and Other U.S. State Privacy Rights

If you are a resident of California, Colorado, Connecticut, Utah, Virginia, or another U.S. state with applicable privacy laws, you have additional rights, including the right to:

• Know what personal information we collect about you
• Request access to or deletion of your personal information
• Correct inaccurate personal information
• Opt out of the “sale” or “sharing” of personal information for cross-context behavioral advertising

We do not sell or share personal information for cross-context behavioral advertising. To exercise your rights, contact us at the email below.

European Union and UK Privacy Rights (GDPR / UK GDPR)

If you are located in the European Economic Area, United Kingdom, or Switzerland, you have rights under the GDPR and UK GDPR, including the right to access, correct, delete, restrict, or object to our processing of your personal data, and the right to data portability.

Our legal bases for processing are: your consent (for optional features such as analytics and notifications), performance of our contract with you (for core App functionality), and our legitimate interests (for security, fraud prevention, and improving the App).

Your data may be transferred to and processed in the United States, which has different data protection laws than your country. We rely on appropriate safeguards (such as Standard Contractual Clauses) for these transfers.

To exercise your rights, contact us at the email below. You also have the right to lodge a complaint with your local data protection authority.

Children’s Privacy

The App is not directed at children under 13 (or under 16 in the European Economic Area and the United Kingdom). We do not knowingly collect personal information from children below these ages. If you believe we have collected information from a child, please contact us and we will promptly delete it.

Data Retention

We retain your data for as long as your account is active or as needed to provide the App’s services. When you delete your account, all associated data is permanently removed from our systems within a reasonable period, except where retention is required by law.

Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated in the App or on our website. Your continued use of the App after changes are posted constitutes acceptance of the updated Policy.

Contact Us

For questions about this Privacy Policy or your data, contact us at:
ottyteam@gmail.com