Legal

Privacy Policy

Last updated: September 28, 2026

1. Who We Are & What This Policy Covers

Estroclic is operated by BeeDazl LLC, a Wyoming limited liability company in the United States. BeeDazl LLC is responsible for the personal information described in this policy and acts as its controller where that term applies.

This policy covers the Estroclic mobile app, estroclic.com, our website forms and our communications with you, together the "Service." It explains what information we process, why, who receives it and your choices. Websites and services you visit through external links have their own privacy practices.

At signup, we ask you to agree to our Terms of Use and Privacy Policy and confirm that you are at least 18. This policy provides information about our practices; accepting it does not replace any specific consent required by law.

2. Information We Collect

Information you provide in the app

• Account information: your email address, account identifier and authentication information. If you sign in with Google or Apple, we receive the account information that provider makes available for sign-in, which may include an email address or Apple relay address, name and provider identifier. We do not receive your Google or Apple password.
• Pill and pack records: your selected pill type or regimen, optional brand, pack dates, pill-taking dates and times, pill status, replacement or other pill issues, and pack or refill records.
• Optional health entries: symptoms and events you log, including events that may affect pill absorption; bleeding dates and intensity; mood, energy, skin or body symptoms, cramps, weight and free-text notes.
• Preferences: reminder times, timezone, notification choices and other settings used to personalize your experience.
• Optional care contact: the name and phone number you save for someone you may wish to contact. Please only provide details you have permission to use.
• Support: your messages and any screenshots or other information you choose to send. Screenshots and notes can contain sensitive information; share only what is needed.

We use your entries to produce personal summaries, histories and reports. Optional health entries are not required to create an account. The information needed for a particular tracking feature depends on the feature you use.

Information from website forms

We collect your email when you request a doctor-question guide or join an available email list. Clinician collaboration forms collect contact and professional details, country, areas of expertise, collaboration preferences, optional profile links and your message. We use these submissions to handle your request and any separately authorized follow-up.

Technical, usage and subscription information

We and our service providers process information such as device and browser type, operating system, app version, IP address, timezone, account activity, sign-in events and usage events. Measurement services may process app-instance or device identifiers and advertising identifiers where available. Website records may include page URLs, referrers, approximate country and interactions such as app-store link clicks.

For security and form-abuse prevention, we process request information, including IP addresses, browser information and an IP-derived identifier. Subscription services provide purchase, transaction and entitlement information linked to your account, such as the plan, store, status and relevant dates. We do not receive your full payment-card details.

Information comes from you, your device and browser, sign-in and app-store providers, and the service providers described below. Location access is explained in Section 5.

3. Health Information

Your pill records, symptoms, bleeding entries and related personal summaries can reveal sensitive health information. We use this information to provide the tracking, history, reminders and reports you request. Hosting and support services may process it as needed to provide those services.

We do not send your entered pill records, symptom entries, weight, care-contact details or notes as events to advertising-measurement services. Technical information about use of a health-related app or website is distinct from those entries, but can still reveal an interest in health. Section 16 explains our measurement tools.

We do not ask for sexual activity, pregnancy status, ovulation dates or biometric identifiers as dedicated tracking fields. If you include additional sensitive details in a note or support request, we receive those details too.

You can stop making optional entries, edit or delete records where controls are available, export your information, or request deletion. Removing information needed for a feature may prevent that feature from working.

4. Purposes & Legal Bases

We use information to operate accounts; provide tracking, reminders, synchronization and personal summaries; manage subscriptions; respond to requests; deliver requested website resources; communicate with you; protect the Service; diagnose problems; and understand usage and advertising performance.

Where data-protection law requires a legal basis, the relevant bases for these purposes are:

• Contract: account administration, requested service functionality and subscription management.
• Legitimate interests: maintaining a secure and reliable service, preventing misuse, resolving support issues and understanding service performance, subject to your rights and any consent requirements.
• Consent: optional website analytics and marketing communications where consent is required. You can withdraw consent without affecting processing that was lawful before withdrawal.
• Legal obligations: responding to valid legal requirements and retaining records where the law requires it.

Sensitive health information requires an additional legal condition in jurisdictions such as the EU and UK. Explicit consent under Article 9(2)(a) is the condition identified for our health-tracking purposes. General agreement to this policy is not itself a substitute for that consent, and contract or legitimate interests alone do not satisfy that additional requirement.

5. Permissions & Your Device

• Location: if you grant foreground location permission, the app can obtain device coordinates and use your device's location services to identify and display a city. The accuracy depends on your device and permission settings. This city-display feature does not upload your coordinates to your Estroclic account. Device timezone information is used separately for time-related features.
• Photos: you can choose a screenshot to attach to a support email. Selecting an image does not upload your entire photo library to Estroclic.
• Notifications: permission allows the app to schedule reminders on your device. You can manage notification permissions and previews through system settings.
• Local storage: the app stores login-session information, settings, cached records and pending pill-log changes on your device to support normal use and synchronization. Some information therefore exists on your device as well as on our servers.

You can change permissions in your device settings. Disabling a permission affects the corresponding feature. Uninstalling the app does not by itself delete your server account or cancel a store subscription.

6. Who Receives Information

We use providers in the following categories. The information they receive depends on the service they perform:

• Hosting, storage and authentication: account information, health records and technical information needed to store, synchronize and protect the Service.
• Subscriptions and app stores: account-linked identifiers, transaction and subscription information needed to process purchases, restore access and verify entitlements. Apple and Google process store payments under their own terms. Our subscription-management provider receives an identifier linked to your Estroclic account; it is not an anonymous identifier.
• Email and support: contact information, message content, delivery information and attachments needed for account messages, support and authorized communications.
• Analytics and advertising measurement: Google Analytics, Google Analytics for Firebase and, in app builds where enabled, Meta App Events process the usage and measurement information described in Section 16.
• Website traffic reporting and abuse prevention: Vercel provides website hosting and aggregate traffic reporting. Cloudflare Turnstile processes technical information, including IP and browser information, to protect selected forms.

Providers acting on our behalf process information for the services they supply. App stores, sign-in providers and certain measurement services may also act independently under their own privacy terms. See the Google, Apple, Meta, Vercel and Cloudflare privacy policies.

If you choose to share an export, open another service or send an email, the recipient and service you select receive that information. We may also disclose information when legally required or necessary to establish or defend legal claims, prevent fraud or address threats to safety, subject to applicable law.

A business reorganization or sale may involve a transfer of information subject to applicable law and privacy protections. We will provide notice before materially different uses and obtain consent where required.

7. Advertising & Limits on Use

We do not sell personal information for money, rent your entered health records, or provide those records to employers, insurers or data brokers for their own use. We do not use your entered health records to train general-purpose AI models. Estroclic does not display third-party targeted advertisements in the app.

We do use measurement tools to understand how people find and use Estroclic and how advertising performs. This can involve identifiers and usage events, even when entered health records are excluded. Some privacy laws define "sale" or "sharing" more broadly than an exchange for money; the statement above does not remove any applicable opt-out rights. See Sections 11 and 16.

8. How Long We Keep Information

Retention depends on the type of information, why it is needed and applicable legal requirements:

• Account and health records: kept to provide your account and history until you remove records, delete your account or request deletion, or the account is deleted under our inactivity rule, subject to necessary legal exceptions. We periodically delete inactive accounts when there has been no sign-in and no pill-history entry for more than two years. For accounts that have never signed in, we use the account creation date.
• Support and website requests: kept to handle the request, related follow-up and any resulting dispute or legal obligation. The relevant considerations include whether the request is resolved and whether an ongoing relationship remains.
• Email preferences: kept to manage your choices. A limited suppression record may be needed to respect an unsubscribe request.
• Subscription and financial records: kept as needed for subscription administration, refunds, disputes and applicable accounting or tax obligations. App stores maintain their own records.
• Security and measurement: retention depends on the investigation or reporting purpose and the applicable provider settings. Reports that are genuinely anonymized may be kept longer; a device identifier alone does not make information anonymous.

Deletion from active systems does not necessarily remove every backup copy immediately. Residual backup copies remain subject to backup rotation and applicable deletion requirements. Contact us for information about the retention applicable to your records.

9. Access, Export & Deletion

These request options are available regardless of where you live, subject to verification and applicable legal exceptions. We may ask for enough information to verify your request and protect your account. Please do not email identity documents or additional health information unless we explain why they are needed.

Exports and reports may contain sensitive information. Copies you save or share through another app, email service or recipient remain under your and that recipient's control. Deleting your Estroclic account does not delete those copies. Subscription cancellation is managed separately through Apple or Google.

Email support@estroclic.com to exercise your rights or withdraw consent where processing relies on consent. Withdrawing permission to process information required for tracking may mean that we can no longer provide that feature. We aim to respond within 30 days and will follow any applicable statutory deadline and permitted extension.

10. EU, EEA & UK Privacy Rights

Where the GDPR or UK GDPR applies, you may have rights to access, correction, deletion, restriction, portability and objection, subject to the conditions in those laws. You may withdraw consent at any time where it is the basis for processing, and object to direct marketing or processing based on legitimate interests.

We do not make solely automated decisions with legal or similarly significant effects on you. Personal tracking summaries are provided for your information.

You can complain to your local data-protection authority, including the UK Information Commissioner's Office. GDPR requests are normally answered within one month; permitted extensions for complex or numerous requests will be explained within that period.

11. US State Privacy Rights

Depending on your state and whether the relevant law applies, you may have rights to know about, access, correct, delete or obtain a portable copy of your personal information; withdraw certain consents; limit certain uses of sensitive information; and opt out of sale, sharing or targeted advertising. You may also have a right to appeal a request decision. We will not discriminate against you for exercising applicable privacy rights.

California law uses "sharing" to include certain disclosures for cross-context behavioral advertising. Advertising-measurement disclosures must be considered separately from the fact that we do not sell information for money. You can contact us with a sale, sharing, targeted-advertising or sensitive-information request, including through an authorized agent where the law permits.

Use support@estroclic.com and describe your request and state of residence. We will apply the relevant verification requirements, exceptions and response period, including the 45-day period for applicable California access, correction and deletion requests. Website cookie choices and device advertising controls are described below; changing website cookies does not change app measurement.

12. International Processing

BeeDazl LLC is a US company. Our providers operate internationally, so information may be processed outside your country, including in the United States. A provider's headquarters does not necessarily determine where every record is stored.

International transfers are subject to applicable data-protection requirements. Where required, transfers need an appropriate safeguard, such as applicable standard contractual clauses or a recognized adequacy mechanism. Contact us for information about the destinations and safeguards applicable to your information.

13. Security

We use safeguards such as encrypted network connections, authenticated access and access restrictions intended to protect personal information. These measures do not make any system completely secure. Protect your device and sign-in details, and consider notification previews and shared devices when using the app.

We respond to personal-data breaches and notify authorities and affected people where required by law. Under the GDPR, qualifying authority notifications are generally due within 72 hours of awareness; affected individuals must be informed without undue delay when the applicable high-risk threshold is met.

14. Age Requirement

Estroclic accounts are intended for people aged 18 or older. Signup asks you to confirm that you meet this requirement. We do not knowingly maintain accounts for people under 18. If you believe someone under 18 has provided account information, contact us so we can investigate and take appropriate steps to remove it.

15. Reminders & Emails

The app schedules reminders locally on your device using your settings and tracking state. Notification content may reveal that you use a pill-tracking app or relate to your pill routine. You can adjust available reminder settings in the app and control lock-screen previews or disable notifications through iOS or Android settings.

We send account and security communications, such as verification, password-reset and sign-in messages, and may send onboarding or product emails. Optional messages include an unsubscribe option. Unsubscribing from optional emails does not stop essential account, security or legally required communications. Requesting a website resource is not, by itself, permission for unrelated marketing.

16. Analytics, Cookies & Choices

On the website

• Preference storage: your browser stores whether you accepted or rejected optional analytics until you change your choice or clear that storage.
• Google Analytics: loads after you accept website analytics. It uses cookies and processes identifiers, page and referrer information, browser/device information and usage events, such as tool opens and app-store clicks. Our configuration disables Google signals and advertising-personalization signals.
• Vercel traffic reporting: runs separately from the optional Google Analytics choice. It provides aggregate reporting about page visits, referrers, approximate country and browser/device characteristics without third-party cookies. Hosting also involves processing IP addresses and request information.
• Cloudflare Turnstile: operates on protected forms to check for automated or abusive submissions.

Our custom website measurement events do not include entered calculator values, form messages or app health records. Page URLs and titles can nevertheless describe a health topic or pill brand. Website analytics is not intentionally linked to your Estroclic account.

Use Cookie settings in the footer or the button below to change optional website analytics. You can also manage cookies in your browser. Rejecting Google Analytics does not disable hosting, form security or Vercel traffic reporting.

Change cookie settings

In the app

Google Analytics for Firebase measures app usage, including automatic lifecycle events and signup events with the sign-in method. It may process app-instance identifiers, device information and advertising identifiers where available. Meta App Events, where enabled in an app build, measures installation and app-launch activity for advertising performance and may process device and advertising identifiers. These tools can operate independently of website cookie choices.

On iOS, access to the advertising identifier is subject to Apple's tracking permission. Android provides advertising-identifier and ad-privacy controls through device settings. Availability varies by operating-system version. Limiting an advertising identifier does not necessarily stop all analytics processing.

Contact us with app-measurement privacy requests. Signing in through a browser or opening an external website can involve cookies governed by that service's policy.

17. Changes to This Policy

We may update this policy as our practices or legal requirements change. We will post the updated policy on this page and revise the date above. Where required by applicable law, we will provide additional notice of material changes through an appropriate channel, such as the website, the app or email, and obtain any required consent. Continued use alone does not replace consent where it is required.

18. Contact Us

For privacy questions, requests or concerns, contact BeeDazl LLC, Wyoming, United States, at support@estroclic.com. Please identify the app account email or website interaction relevant to your request without including unnecessary sensitive information.