Privacy, plainly.
MenoTracker is operated by DJUMP, MB, a small company registered in the Republic of Lithuania, which is the data controller for everything described here. This page covers both the MenoTracker mobile app and this site — what we collect, where it goes, and what you can ask us to do with it.
What the app collects
- Your account — an email address and password, or a Google or Apple sign-in. A display name if you give one.
- Your entries — for each symptom you log: the date, the symptom type, a severity from 1 to 10, and the note you typed if you typed one. This is health data, and we treat it as such.
- Your settings — the stage you selected, your birth year if you entered it, your reminder time, and a push token if you turned notifications on.
No location, no contacts, no microphone, no camera, no health data pulled from Apple Health or Google Fit. The app asks for notification permission and nothing else.
Where it is stored
In a Postgres database hosted by Supabase in the European Union. It is encrypted in transit and at rest, and row-level security means an account can read only its own rows — including us: we do not browse your entries, and we have no feature that would show them to us alongside your name.
The AI insights
Plus subscribers get pattern analysis. When you open Insights or tap refresh, your entries from the last 30 days — dates, symptom types, severities and any notes — are sent to OpenAI's API, which returns the summary you read. Your name, email, and account identifier are not part of that request. OpenAI acts as our processor, does not use API data to train its models, and the transfer to the United States relies on the European Commission's standard contractual clauses. If you are on the free tier, nothing is ever sent.
The insights are informational. They are produced by a language model reading your log, they can be wrong, and they are not medical advice or a diagnosis.
Payments
Subscriptions are billed by Apple or Google, never by us. We never see your card. RevenueCat manages the subscription state against a pseudonymous account identifier so the app knows whether Plus is active.
Analytics and crash reports
The app records product-usage events — a screen was opened, a symptom was logged, the paywall was shown — in PostHog, on its EU hosting. Those events never carry which symptom you logged, how severe it was, what stage you are in, or anything you typed. Crashes go to Sentry so we can fix them. Both are off in development builds. From app version 1.0.4 both are also opt-in: the app asks for your consent before enabling them, and you can change your answer at any time in Settings. We run no advertising SDK. This marketing site uses only cookieless page-view analytics (Vercel) — no advertising trackers.
What we never do
- We do not sell, rent, or share your data with insurers, employers, advertisers, or data brokers.
- We do not show ads, and we do not profile you for anyone else's ads.
- We do not use your entries to train our own models, or anyone else's.
What this site collects
Only what you give us. If you write to us through the contact form, we receive your name, email, and message, and use them only to write back. No fingerprinting, no third-party trackers.
Who helps us run this
- Supabase — hosts the database and accounts (EU region).
- OpenAI — generates the Plus insights, as described above (United States).
- RevenueCat, Apple, Google — subscriptions and billing.
- PostHog (EU) — product analytics. Sentry — crash reports.
- Resend — delivers the email from our contact form.
- Vercel — hosts this site (short-lived server logs, standard request metadata) and provides cookieless page-view analytics.
How long we keep it, and deleting it
Your entries stay until you delete them or delete your account. You can delete the account from inside the app — Profile, then Delete account — which removes the account and the entries attached to it. You can also email us and we will do it for you. Contact-form messages are kept only as long as the conversation is useful.
Your rights
You may ask us, at any time, to show you the data we hold on you, correct it, export it, or delete it. We will do it. Email start@djump.io and we will reply within a few working days. We process your health entries on the basis of your explicit consent, given when you create an account and log your first symptom, and you may withdraw it at any time by deleting your account. Under EU/UK data-protection law you also have the right to lodge a complaint with your national supervisory authority — in Lithuania, that is the State Data Protection Inspectorate (VDAI). If you live in Washington State or another US state with a consumer health data law, our separate Consumer Health Data Privacy Policy spells out the same rights in that law's terms.
Children
MenoTracker is not directed at, or appropriate for, anyone under 18. We do not knowingly collect data from minors.
Changes
We may revise this page. When we do, we update the effective date at the top. Material changes will be announced on the site.
Contact
DJUMP, MB · Klaipėda, Lithuania
start@djump.io