The precise version
Privacy
We wrote this so the deal is visible. The app does not send us what you log. This page is the privacy policy for the app and for this website. It is the precise version of that sentence.
Who operates this
The app and this website are operated by Lupercalia LLC.
Effective date: TBD
Privacy questions: privacy@shewolf.app
The app collects nothing off the phone
The app has:
- no account, and no email, phone number, or name to register
- no cloud copy of your cycle, symptoms, notes, or PIN
- no analytics, crash reporting, advertising, or other trackers
We do not sell personal information, and we do not share it with data brokers. We do not have the app's records to sell. What you log stays in an encrypted database on the phone. We never receive it.
Some privacy laws give people a right to access, correct, or delete personal data a company holds about them. For the app, we hold nothing to access, correct, or export. Deleting what is on the phone is described on Support.
How the lock works
Your logs sit in a database on the phone. That file is encrypted. The key that opens it is a random key created on the phone. It is not your PIN, and it is not derived from your PIN, so changing the PIN does not rebuild the database.
Your PIN only wraps that key. The app stretches the PIN with Argon2id, a slow function that makes guessing expensive, and uses the result to seal the database key. The sealed key is stored in the phone's keystore: the iOS Keychain or the Android Keystore. It is marked so it stays on that device and is not part of an iCloud or Google backup.
We never see the PIN, the keys, or the database. There is no SheWolf server in that path. The details, and the limits, are on Security.
If you forget the PIN, we cannot reset it and we cannot read the data. That is intentional. A recovery option would be a backdoor.
A new phone, and export
The database is left out of iCloud and Google backups. It cannot be moved onto a new phone yet. Set the app up again on the new phone.
Settings includes “Export all data”. That hands a plain JSON file to another app through the phone's share sheet. The file is not encrypted. The app cannot import it. It is not a backup of the locked database. If you save it to email, a drive, or a computer, that copy is outside SheWolf, and wiping the app does not delete it.
Legal requests
We do not hold app accounts, cycle logs, notes, encryption keys, or a list of who uses the app. A subpoena, court order, or other legal request for those records has nothing to attach to. We cannot decrypt a phone for an investigator. The key never leaves the device, and we do not have a copy.
If we receive a request, we would:
- Read it and check that it is what it claims to be.
- Look only for the records it actually asks for. For app content, keys, and accounts, there are none, and we would say so.
- Refuse to add a backdoor, a collection feature, or a recovery path so that a later request would have something to collect.
- If the request covers something we do have, respond about that thing only, and only as the law requires. Email sent to us is one example, and it is not app data. See below.
This website does not keep a visitor log we can look up or be ordered to produce. See the next section. We do not publish a warrant canary. A canary has to be maintained, and we will not post one we cannot keep current.
This website
shewolf.app is a set of static pages hosted on Cloudflare Pages. The pages do not ask you to sign in.
- We do not set cookies.
- We do not run analytics, and we do not embed third-party scripts.
- There are no forms and no accounts on the site.
- We do not turn on Cloudflare Web Analytics, and we do not send site logs to storage. We have no visitor log we can open.
Cloudflare still handles the connection that delivers a page, which means its network can see technical data such as an IP address. That is the host carrying the bytes. It is not a SheWolf account, we do not receive it as a record we keep, and we do not ask Cloudflare to store it for us.
Email you send us
If you write to privacy@shewolf.app or support@shewolf.app, that message sits in the mailbox. It is not covered by the on-device encryption. Please do not send health details, a PIN, or an export file. We do not need them, and we cannot use them to restore the app. A legal request that covers a mailbox we operate is different from a request for app data we never had.
Deletion
On the phone, Settings → Wipe all data deletes the encrypted database, the sealed key, and export files still in the app's cache. Forgot PIN on the lock screen does the same wipe. Uninstalling the app removes what the app stored on that phone. None of these delete a copy you already shared or saved somewhere else. We have no server copy to delete for you.
Children
We do not knowingly collect personal information from anyone, including children, because the app has no account and does not send us what you log.
Changes
If this policy changes, the new version will be posted on this page with a new effective date. The app does not phone home, so we cannot push a notice into it. This page is the notice.