Privacy policy
What Eggsports collects on its website and in its app, why, who processes it, how long we keep it, and how to see, download or delete it.
Eggsports is a wellness companion for the menstrual cycle, pregnancy, postpartum and menopause. Some of the data an app like this handles is among the most sensitive there is, so we collect as little as we can, keep health data apart from your identity, and never sell any of it.
This policy covers the website at eggsports.org and the Eggsports app for iPhone and Android, which hasn't launched yet. The app sections describe how the app will handle your data from its first day.
The short version
- Website: if you join the waitlist, we keep your email address and preferred language. Nothing else.
- Free tools: they run entirely in your browser. What you type into them is never sent to us.
- No tracking: visits are counted without cookies, and there's no advertising or tracking code anywhere.
- App: your health answers are stored under a pseudonym, separate from your email and identity, and only after you've given your explicit consent.
- Never: we never sell your data, never share it for advertising, and never use it for advertising ourselves.
- Your control: in the app you can download all your data, delete it, or withdraw your consent at any time.
Who we are
Eggsports ("we", "us") is responsible for the personal data described in this policy. For anything about your privacy or your data, email privacy@eggsports.org.
The website
The waitlist
When you join the waitlist, we ask for two things: your email address and your preferred language (filled in from the page you're on). We never ask health questions on the waitlist.
Your address isn't added to the list until you confirm it. We send you a confirmation email, and the link inside it carries your address in encrypted form, so it can't be read in the link itself. Confirmation links expire after seven days. If you don't confirm, you're not added.
Once you confirm, we use your address for three kinds of email: the confirmation itself, an occasional update on what we're building (at most once a month), and the launch email with your founding-member code. Every email has a one-click unsubscribe link.
To stop automated sign-ups, the internet (IP) address a sign-up comes from is used to limit repeated attempts. It's held for less than an hour and then deleted automatically.
Free tools
The free tools on eggsports.org, including the calculators, checklists and timers, run entirely in your browser. Your answers are never sent to our servers, never stored, and never put in a page address. When you close the page, they're gone.
The exercise finder works the same way: the phase, body area and intention you choose stay on the page and are never sent, stored or added to the page address.
Analytics and cookies
We use Vercel Web Analytics to count visits. It doesn't use cookies and doesn't follow you to other websites. It records which page was visited, the referring website, your country or region, and your browser and device type. Visitors are counted with a temporary code derived from the request, which is discarded after 24 hours, so visits can't be tied to you. We may also count a few anonymous events, such as a waitlist form being sent or a tool being completed (the tool's name only, never what you entered).
This website sets no cookies at all: not for analytics, advertising, tracking or even language, so there's no cookie banner. The language you read in comes from the page address (/ for English, /pt for Portuguese).
Server logs
Like every website, our hosting keeps short technical logs of requests, which include IP addresses, to keep the site running and secure. These logs are deleted after 14 days.
The Eggsports app
Adults only
Eggsports is for people aged 18 and over. You confirm your age with one tap before you start, and the app is rated for adults in the App Store and Google Play. This keeps the menstrual data of teenagers out of the product entirely.
Your account
You start without an email address or password: the app creates an anonymous account so you can begin with taps alone. You can then link it to Sign in with Apple or Sign in with Google to keep your garden safe. Linking is never required, including to buy a subscription.
When you link, we receive your email address (which can be an Apple private relay address) and an identifier from Apple or Google. We never receive your Apple or Google password.
If you never link your account and you lose your phone or delete the app, your garden can't be recovered, because nothing connects it to you.
If you give yourself a nickname so the app can greet you by name, it's stored only on your phone. It's never sent to our servers.
Your health data and your consent
Before the app stores any health answer, it asks for your explicit consent on a single, plain-language screen that tells you what we collect, why, who processes it, and how to withdraw. We record when you gave consent and which version of the consent you agreed to. If what we collect or who processes it changes, the app asks you again before your next check-in.
With your consent, the app stores:
- Your phase and its key details: your usual cycle length and the start of your last period, your due date or week of pregnancy, the date and type of birth, or whether you have hot flashes.
- Your daily check-in answers: how you slept, how your body feels, where you're holding tension, how your heart is, and one question about your phase (for example period flow and cramps, pelvic and lower-back comfort, pelvic floor symptoms, hot flashes and night sweats, or joint stiffness).
- Your practice: the intention you chose, whether you moved or rested, the movements in your practice, and how they felt.
- Safety confirmations: that your doctor or midwife has cleared you to exercise, and whether you reported a warning sign.
- Your garden: your eggs and flowers, which grow from your check-ins.
- Wearable data, only if you connect it (see the next section).
We use this data for one purpose: to personalize your daily practice and messages, apply the safety rules for your phase, and grow your garden. Never for advertising.
Apple Health and Health Connect
Connecting Apple Health (HealthKit) or Health Connect is optional and has its own permission screen from your phone. If you connect, Eggsports reads, and never writes:
| Data | Who it's read for |
|---|---|
| Resting heart rate, heart rate variability (HRV), sleep, daily steps | Everyone who connects |
| Basal body temperature, menstrual flow records | Only when you're in the menstrual cycle phase |
Data is read only while the app is open, for the last 24 hours, and is saved with your check-in. A period start found in your health data is never applied automatically; the app asks you to confirm it.
Data from Apple Health and Health Connect is never used for advertising and never sold. Our use of information received from Health Connect follows the Health Connect Permissions policy, including its Limited Use requirements.
Stored under a pseudonym
Your health and garden data isn't stored next to your email or account. It's stored under a separate pseudonymous ID, calculated from your account ID with a secret key. The key is kept in a secure vault, apart from the health data, and is used only by our own servers. A copy of the database on its own can't connect your health data to your email.
This is pseudonymization, not anonymity. Our servers must be able to make that connection to show you your own data, so we can. Access is limited to the server functions that need it.
Messages, notifications and public gardens
- Your daily message and practice are prepared from your check-in. The service that helps write them receives derived check-in values and your phase context (for example your week of pregnancy), never your name, nickname, email, account ID or anything you could be identified by.
- Emails from the app are only sent once your account is linked: a welcome email and a monthly note about what hatched in your garden. They contain no health data, only details such as how many flowers of each intention bloomed. Every email has a one-click unsubscribe link and contains no advertising trackers. Our email provider records whether an email was delivered and opened, which we use only to keep delivery working.
- Push notifications need your phone's permission. Their text never names a phase or a symptom (never "your period", for example), because lock screens are public.
- Public gardens are private by default. If you choose to share your garden, it gets a link with a random code that only you can share. The page shows the garden art and how many flowers of each intention it holds. It never shows your name, email or health data. You can make it private again at any time.
Payments
Subscriptions are bought through the App Store or Google Play. Apple and Google handle payment, and we never see your card details. RevenueCat, which manages subscriptions for us, receives your account ID and purchase receipts, never health data.
App analytics and error reports
To understand how the app is used, we record event names only, such as "check-in completed" or "subscription screen shown", against a random ID for your installation. Never your health answers, your phase, your cycle day or your pseudonymous health ID. Error reports have request contents and user identifiers removed before they're sent.
Personalization, not decisions about you
The app uses rules and automated suggestions to choose each day's practice and message. These shape your wellness practice only. They don't make decisions with legal or similarly significant effects on you, and you can always choose something else.
Why we're allowed to use your data
Under the General Data Protection Regulation (GDPR) and the UK GDPR, every use of personal data needs a legal basis. Ours are:
| What we do | Data | Legal basis |
|---|---|---|
| Store and use your health data in the app | Phase details, check-ins, wearable data, practice, garden | Your explicit consent (GDPR Article 9(2)(a) and Article 6(1)(a)) |
| Send waitlist emails | Email address, language | Your consent (Article 6(1)(a)), which you can withdraw by unsubscribing |
| Run your account and subscription | Account ID, linked email, subscription status | Performing our contract with you (Article 6(1)(b)) |
| Send app emails and notifications | Email address, push token, garden details | Our legitimate interest in keeping you informed about your own account (Article 6(1)(f)); you can unsubscribe or turn notifications off at any time |
| Share a public garden | Garden art, flower counts by intention | Your consent, given when you choose to share it |
| Keep the website and app secure and working, count visits | IP addresses in logs and rate limits, anonymous analytics, error reports | Our legitimate interest in a secure, working service (Article 6(1)(f)) |
| Comply with the law and defend legal claims | Only what a specific case requires | Legal obligation (Article 6(1)(c)) and legitimate interest (Article 6(1)(f)) |
Who processes your data
We use a small number of service providers (processors). They act only on our instructions, under data processing agreements, and none of them may use your data for their own purposes.
| Processor | What they receive | What for |
|---|---|---|
| Supabase | All app data | The app's database, sign-in and server functions |
| Anthropic (Claude API) | Derived check-in values, your phase context and a short summary of how movement has felt for you. Never your identity. | Writing your daily message and shaping your practice. Under the commercial terms we use, Anthropic doesn't use this data to train its models. |
| WorkoutX | Exercise IDs only. No user data. | Exercise demonstration videos. Your device loads the videos directly from WorkoutX, which, like any server, sees your device's IP address. |
| RevenueCat | Your account ID and purchase receipts. No health data. | Managing subscriptions |
| Resend | Email address, first name if your account is linked, garden details. No health data. | Sending email, including waitlist email |
| Expo | Push token and notification text | Sending push notifications |
| Vercel | Website traffic and public garden pages. Public gardens contain no health data. | Hosting the website and counting visits |
| Upstash | The IP address of a waitlist sign-up, for less than an hour | Stopping automated sign-ups |
Apple and Google are not our processors: when you sign in with them, buy through their stores, or connect Apple Health or Health Connect, their own privacy policies apply to what they do.
How long we keep it
| Data | Where it lives | How long |
|---|---|---|
| Waitlist email and language | Resend | Until you unsubscribe or ask us to delete it |
| An unconfirmed waitlist sign-up | Only inside the confirmation link | The link expires after 7 days |
| IP address of a waitlist sign-up | Upstash | Less than an hour |
| Check-in answers, wearable values, practice, eggs, gardens | Supabase, under your pseudonymous ID | Until you delete them or your account. Accounts with no activity for 24 months get two emails (if linked) and are then deleted. |
| Email address and Apple or Google sign-in | Supabase Auth | Until you delete your account |
| Nickname | Your phone only | Until you delete the app |
| Subscription status | RevenueCat | Until you delete your account |
| Server logs | Supabase, Vercel | 14 days. The contents of requests that carry health data are never logged. |
Your rights
You can use these rights wherever you live. In the app, most of them take a few taps. You can also email privacy@eggsports.org, and we'll reply within one month (30 days).
See and download your data
In the app, go to Profile → Privacy → Download my data. Within minutes you get a file with all your data, in a machine-readable format (JSON) plus a summary you can read. This covers your rights of access and portability.
Correct your data
You can change your phase details at any time in Profile → My phase. Past check-ins can't be edited, but you can delete them.
Delete your data
In the app, go to Profile → Settings → Delete Account. This permanently deletes your account, all your health and garden data, your subscription record at RevenueCat, your contact at Resend and any cached images of public gardens. Requests by email are handled within 30 days. Copies in database backups disappear as those backups expire, and in any case within six months.
Deleting your account doesn't cancel a subscription with Apple or Google. Please cancel it first in your store's subscription settings; the app links you there.
If your account was never linked and you've lost access to it, we have no way to connect it to you. It's deleted automatically after 24 months without activity.
Withdraw your consent
In the app, go to Profile → Privacy → Stop using my health data. We delete all your health data straight away. Your account and subscription stay, and check-ins pause until you choose to give consent again. Withdrawing consent doesn't affect what we did with your data before.
Object, restrict and complain
You can object to our use of your data based on legitimate interest, or ask us to restrict it while a question is resolved. If you're unhappy with how we've handled your data, you can complain to the data protection authority where you live or work, for example the CNPD in Portugal or the ICO in the United Kingdom. We'd welcome the chance to put things right first.
Consumer Health Data Privacy Policy
This section is our Consumer Health Data Privacy Policy under Washington's My Health My Data Act. We apply it to everyone in the United States, including people covered by similar state laws.
The consumer health data we collect, and why. The categories are listed in "Your health data and your consent" and "Apple Health and Health Connect" above: your phase and its key dates, your daily check-in answers, your practice, safety confirmations, your garden, and wearable data if you connect it. We use them only to provide the app you asked for: to personalize your daily practice and messages, apply the safety rules for your phase, and grow your garden.
Where it comes from. From you, through your answers in the app; from Apple Health or Health Connect, only if you connect them; and from what we calculate from these, such as your cycle day or week of pregnancy.
What we share, and with whom. Derived check-in values and phase context are processed by Anthropic, and all app data is stored with Supabase, both acting as our processors. No other company receives your consumer health data. We share it with no affiliates and no other third parties, and we never sell it.
Your rights. You have the right to:
- confirm whether we collect, share or sell your consumer health data, and see it, including a list of every third party that has received it and how to contact them;
- withdraw your consent at any time;
- have your consumer health data deleted, including by our processors.
Use the controls in the app or email privacy@eggsports.org. We respond within 45 days. If we need more time, we'll tell you why, and we'll take no more than 45 extra days. These requests are free.
Appeals. If we decline your request, you can appeal by replying to our answer or emailing privacy@eggsports.org with "Appeal" in the subject. We'll reply within 45 days with our decision and the reasons for it. If we deny your appeal, you can contact the Washington State Attorney General's office at atg.wa.gov.
Requests for reproductive or pregnancy data
We know that, in some places, information about periods, pregnancy and pregnancy loss can be sought in legal proceedings. Our position:
- We respond only to valid, legally binding orders.
- Where the law allows, we tell you before handing anything over.
- Where possible, we challenge requests that seek reproductive or pregnancy data.
Pseudonymous storage and short retention limit what could ever be disclosed. You can also delete your data at any time.
No selling, no advertising
We never sell your personal data. We never share it for advertising, never use it for advertising ourselves, and use no advertising code in the website or the app. We work with no data brokers.
International transfers
Some of our processors are based in, or process data in, the United States and other countries outside the EU, the EEA and the UK. When personal data leaves those areas, we protect it with an adequacy decision where one applies (such as the EU-US Data Privacy Framework, for certified providers) or with the European Commission's Standard Contractual Clauses and, for the UK, the UK addendum to them.
Children
Eggsports is only for adults aged 18 and over. We don't knowingly collect data from anyone younger. If you believe someone under 18 is using Eggsports, tell us at privacy@eggsports.org and we'll delete their data.
How we protect your data
- Health data is stored under a pseudonym, with the key kept apart from the data.
- Each person can read only their own data, enforced by the database itself.
- Data travels encrypted (HTTPS).
- The contents of requests that carry health data are never written to logs.
- The free tools on the website never send your answers anywhere.
Changes to this policy
When we change this policy, we update the date at the top of this page. If a change affects how we use your data in a meaningful way, we'll tell you in the app or by email before it takes effect. If what we collect or who processes it changes, the app asks for your consent again before your next check-in.
Contact
For questions, requests or complaints about privacy: privacy@eggsports.org.