Privacy policy

1. Who we are and what this covers

CareDays is built and operated by Zhivko Dinev, an independent developer based in Bulgaria (“we”, “us”). This policy covers the CareDays mobile app for iOS (and Android, when released) and the website caredays.app. It is written to be read, not skimmed — but the short version above is accurate on its own.

2. What you enter into the app

CareDays works only with information you choose to type in. Depending on how much you fill in, that can be:

• Cycle details about your partner — the start date of her last period, her average cycle length, and her average period length. The app uses these to estimate which phase she may be in.
• Her profile (all optional) — a first name or nickname, comfort foods, favorite drinks, flowers and gifts she likes, activities she enjoys, the ways she prefers to receive care, things that help her during her period, and free-text notes.
• Reminder settings — whether reminders are on, which kinds, and what time the daily reminder arrives.
• App state — today’s care idea, the date you accepted the in-app disclaimer, a cached copy of your Premium subscription status (so Premium works offline), and similar bookkeeping the app needs to run.

The app has no sign-up. It never asks for your name, email address, phone number, or payment details.

3. Where that information lives

Only on your device. CareDays stores everything in a local database on your phone. The contents are encrypted by the app with a random key that is kept in your phone’s secure storage (the iOS Keychain or Android Keystore), and your phone’s own protections — passcode, Face ID, fingerprint — guard access on top of that.

There is no cloud sync and no backup service of ours. We operate no server that receives, stores, or processes what you enter. If you get a new phone, the app starts empty and you enter the details again. Your phone’s own full-device backup (for example iCloud Backup or Google’s device backup) may include the app’s encrypted database as part of backing up your whole device; that happens under your Apple or Google account and their terms, and we have no access to it.

4. What we do not do

• We do not collect, receive, transmit, sell, rent, or share anything you enter — with anyone.
• We do not use analytics, crash-reporting, advertising, or tracking software inside the app.
• We do not show ads, and we do not track you across other apps or websites.
• We do not use your information to train AI models or to build a profile of you or your partner.
• The app connects to the internet for exactly two things: to check your Premium subscription with the store (through RevenueCat — section 5) and when you tap a link that opens caredays.app in your browser. Nothing you enter travels with either.

This is why the app’s App Store privacy label lists only Purchase History and an anonymous User ID, both marked “Data Not Linked to You”, and its Google Play data-safety section declares the same — purchase history and an app-generated ID, used solely to make subscriptions work, nothing shared.

5. Purchases and subscriptions

CareDays has a free plan and an optional Premium subscription. Two parties are involved in a purchase, and neither of them ever sees your cycle or profile data:

Apple and Google — the merchants

Premium is sold as an auto-renewing subscription through Apple’s App Store or Google Play. Apple or Google is the merchant of record: they process the payment, hold your payment details, issue receipts, handle renewals, cancellations, and refunds under their own terms and privacy policies. We never receive your name, email address, billing address, or card details.

RevenueCat — the subscription processor

To know whether Premium is active on your device, the app uses RevenueCat (RevenueCat, Inc., San Francisco, USA), a service that verifies store purchases. RevenueCat acts as our processor under a data-processing agreement and receives exactly this:

• An anonymous app user ID — a random identifier generated on your device the first time the app talks to RevenueCat. It is not your name, email, phone number, Apple ID, or Google account, and we cannot connect it to you. You can see it under Settings → Subscription as the “Support ID”.
• Purchase and subscription details from the store — the product bought, purchase, renewal and expiry dates, trial status, transaction identifiers and the store receipt or purchase token needed to validate them.
• Technical request metadata — platform (iOS/Android), operating-system version, app version, device model, language/locale, and the IP address of the request, as with any internet service.

RevenueCat does not receive cycle dates, Her Profile, reminder settings, notes, or any text you type; it receives no advertising identifiers (we keep the SDK’s device-identifier collection switched off), no email, and no custom attributes. It is used for nothing but subscription status.

The legal basis for this processing is the performance of your subscription contract (GDPR Art. 6(1)(b)). RevenueCat processes data in the United States under the EU–US Data Privacy Framework and standard contractual clauses. It keeps purchase records for as long as needed to manage your subscription and according to its own privacy policy. If you want your anonymous record deleted, email us with your Support ID and we will request it; note that deleting the record does not cancel a subscription — cancelling is done in your App Store or Google Play settings.

6. Notifications and device permissions

Notifications are the only permission CareDays asks for, and they are optional. During setup the app explains what reminders do and then shows the standard system prompt; you can decline and still use every feature. You can change your mind at any time in the app’s Settings or in your phone’s system settings.

• Reminders are scheduled locally on your device by the operating system. There is no push server, and no push token or device identifier is ever sent to us.
• You get at most one reminder a day: the daily care idea at the time you choose (8:30 by default), a heads-up the day before an estimated phase change, and a heads-up a few days before her period is estimated to begin. Each kind can be turned off separately.
• Reminder text is deliberately generic — for example “Today’s care idea is ready”. It never includes her name, dates, phase names, or anything else you entered, so nothing personal appears on your lock screen.

The app requests no other permissions: no location, contacts, calendar, camera, photos, microphone, health data (Apple Health or Health Connect), or advertising identifiers.

7. About your partner’s information

Most of what you enter describes another person. CareDays is designed to be used openly — ideally set up together with her — as a way to show up with more care, never as a way to monitor anyone. The information is hers as much as yours: if she asks you to delete it, Settings → Delete all data removes it immediately. Everything stays on your phone, so no one else, including us, can see it.

8. How long we keep it, and how to delete it

Your information stays on your device until you remove it. You can delete all of it at any time via Settings → Delete all data, which erases the database and the encryption key and returns the app to its first-run state; the cached subscription status goes with it (your subscription itself lives with the store and can be restored). Uninstalling the app also removes all of its data. Because we hold no copies, deletion is immediate and cannot be undone by anyone — including us.

9. Security

We designed CareDays so that the most common risk — a breach of someone else’s server — simply does not apply: there is no server holding your data. On the device, the database is encrypted by the app and the key lives in the operating system’s secure storage. No method of storage is perfectly secure, so we recommend keeping a passcode or biometric lock on your phone and installing updates from the App Store or Google Play.

10. Children

CareDays is intended for adults and is not directed at children. Since the app collects no personal information beyond the anonymous purchase record described in section 5, we knowingly hold no information about anyone under 18.

11. Your rights

Under the GDPR and similar laws you have rights to access, correct, delete, restrict, export, and object to the processing of your personal data. For the information you enter into the app, all of this happens directly on your device, under your control: you can view and edit it in the app and delete it in Settings. It never reaches us, so we hold nothing to hand over or erase on our side.

If you believe we hold any personal data about you (for example an email you sent us), or you want the anonymous purchase record described in section 5 deleted, write to support@caredays.app and we will respond within 30 days. You also have the right to lodge a complaint with a supervisory authority — in Bulgaria, the Commission for Personal Data Protection (cpdp.bg).

12. The caredays.app website

This website uses Umami, a privacy-friendly analytics tool, to count visits in aggregate (pages viewed, country, device type). It sets no cookies, stores no IP addresses, and cannot identify you, which is why the site shows no cookie banner. The website has no accounts and collects no personal information from you.

If you join the waitlist on our companion site, therealhusband.com, we store the email address you give us solely to tell you about the launch, and you can ask us to delete it at any time by emailing the address below.

13. Health disclaimer

CareDays provides educational and relationship-support content. It is not a medical device and does not provide medical advice, diagnosis, or treatment. Cycle estimates are approximations of what she may experience — every person and every cycle is different — and must not be used for contraception, conception planning, or any health decision. If something seems severe, persistent, or concerning, please talk to a qualified healthcare professional.

14. What may change, and how we tell you

Optional Premium subscriptions are part of the app today and are described in full in section 5. A future version may add privacy-preserving, aggregate measurement of our own advertising (such as Apple’s SKAdNetwork) — which would never include anything you enter into the app. Before any such change ships, we will update this policy, the app’s store privacy labels, and the “Last updated” date above, and we will note material changes inside the app.

15. Contact

Questions about privacy: support@caredays.app
See also our Terms of use and Support & FAQ.