Effective date: August 1, 2026
Dot is a period tracker built on one principle: your cycle data belongs to you, on your device, and nowhere else.
Nothing. Dot has no servers, no accounts, and no analytics. We cannot see, access, transmit, sell, or share your data — the app has no mechanism to send it anywhere.
Everything you log (periods, symptoms, moods, notes, settings) is stored in an encrypted database (SQLCipher) on your device only. The encryption key is stored in your device's secure keychain. Deleting the app permanently deletes your data. You can also erase everything at any time from Settings → Delete everything, or export it as JSON from Settings → Export my data.
Optional Dot Pro subscriptions are processed by Apple (App Store) or Google (Play), with receipt validation by RevenueCat, our purchases infrastructure provider. RevenueCat receives an anonymous randomly generated app-instance identifier and purchase receipts — never your cycle data, never your name or email. See RevenueCat's privacy policy.
Reminders are scheduled locally on your device. Their text is deliberately non-revealing (“A gentle heads-up for this week”) and never includes cycle details on your lock screen.
Dot does not connect to HealthKit, Google Fit, or any external health platform. Your entries never leave the app's encrypted local database.
Dot is not directed at children under 13 and does not knowingly collect any data from anyone — because it collects no data at all.
If this policy ever changes, the updated version ships inside the app and here, with a new effective date. Because the app has no accounts, we cannot and will not retroactively collect anything you logged before a change.
Questions: [email protected]