Privacy Policy

Meadow: Menopause Tracker · last updated 25 August 2026

The short version. Your diary stays on your phone. There is no account and no sync, and nothing you write — not a symptom, not a note, not a medication — is ever sent anywhere. Meadow can optionally send anonymous crash reports and counts of which screens you use, so that faults can be fixed. That is off unless you turn it on, and you can turn it off again at any time.

Who is responsible

Meadow is published by Marwan Atia, Germany, who is the data controller for the purposes of the UK GDPR and the EU GDPR.

Contact: marwansamir688@gmail.com

What Meadow stores on your device

Everything you enter is written to an encrypted database on your phone: symptoms, severities, times, free-text notes, cycle and bleeding entries, medications and doses, reminders, your display name and birth year if you choose to give them, and your settings.

The database is encrypted, and the key is held by your phone’s own keystore — iOS Keychain or the Android Keystore.
It is excluded from iCloud backup and from Android’s automatic backup.
There is no account, no sign-up and no server, so there is no copy of your diary anywhere but your own phone.
You can export everything as PDF or CSV, and delete everything, from Settings. Deleting removes it from the device permanently.

None of this is transmitted to us or to anyone else, whatever your analytics setting.

Optional crash reports and usage analytics

Meadow includes two services that are switched off by default and only start if you turn on “Send crash reports and anonymous usage” in Settings:

Service	Purpose	Provider
Sentry	Crash reports — where in the code a crash happened	Functional Software, Inc. (Sentry)
PostHog	Anonymous usage — which screens are opened	PostHog, Inc. (EU hosting)

What is sent, if you turn it on

That the app crashed, the type of error and where in the code it occurred.
Which screens are opened, and in what order.
How many symptoms an entry contained — never which ones.
Whether a report was exported, and how long it took.
Technical information such as app version, device model and operating system version.

What is never sent, whatever you choose

Anything you typed — notes, custom symptom names, your display name.
Which symptoms you logged, or how severe they were.
Which medication you take, its brand, dose or schedule.
Your diary, in whole or in part.
Any advertising identifier, or anything else that identifies you or your phone.
Screen recordings or screenshots. Session replay is not used.

This is enforced in the app’s code by an allow-list: only the events and values listed above may be transmitted, and anything else is discarded before it leaves the device.

Legal basis, and how to withdraw

Where the UK or EU GDPR applies, the legal basis for crash reports and usage analytics is your consent (Article 6(1)(a), and Article 9(2)(a) for data concerning health). Meadow does not rely on legitimate interests for this.

You can withdraw consent at any time in Settings → Helping improve Meadow. Withdrawal takes effect immediately: the services stop and the local identifier is discarded. Nothing you have entered is affected either way.

Your rights

You have the right of access, rectification, erasure, restriction, objection, and data portability.

Your diary: you already hold it. Export it or erase it from Settings without asking anyone. We cannot access it, so we cannot produce, correct or delete it on your behalf.
Analytics data: write to the address above and it will be deleted. Because it is not linked to you, please say roughly when you used the app so the records can be found.

You may also complain to your data protection authority. In Germany that is your Landesdatenschutzbeauftragter; in the UK, the ICO.

Retention

On your device: until you delete it or remove the app.
Crash reports: 90 days.
Usage events: retained no longer than needed to understand how the app is used, and deleted on request.

International transfers

PostHog data is processed on EU infrastructure. Sentry may process crash reports in the United States under Standard Contractual Clauses. If you do not turn on crash reports and analytics, no transfer happens at all.

Children

Meadow is intended for adults and is not directed at children.

What Meadow does not do

No advertising, and no advertising identifier.
Nothing about you is sold or shared, and no data broker receives anything.
No tracking across other apps or websites.
No account, so there is no user database to be asked for or breached.

Not a medical device

This app is not a medical device and does not diagnose, treat, cure, or prevent any medical condition. Always consult a healthcare professional before making medical decisions.

Changes

If this policy changes in a way that affects what leaves your phone, the change will be described here with a new date, and consent will be asked for again where the law requires it.