Dawn PhaseDawn Phase
Log inFree

Privacy Policy

Effective date: September 2026

Dawn Phase is built on one principle: your body data is yours. This policy describes what the app actually stores, what it does with it, who else handles it, and what happens when you delete it — including the parts that are less tidy than “we collect nothing.” We keep the language plain on purpose.

A note on what this data is — and isn't.

The cycle, symptom, and wellness information you log in Dawn Phase is personal self-tracking data. Dawn Phase is not a medical device, is not contraception, and does not provide medical advice. See our Terms of Service for the full health disclaimer and your responsibility for health decisions.

1. What we store

If you have a Dawn Phase account, we store:

  • Account details — your email address, the name you give when you sign up (we use it to greet you in the app and in emails), the date you joined, and your password stored only as a salted, one-way hash (see Section 5).
  • Your goal — what you told us you're using Dawn Phase for. See the next part of this section; it deserves more than a bullet point.
  • Tracking mode — cycle tracking or perimenopause.
  • Cycles — the period start dates you log, period end dates where you log them, and the cycle lengths worked out from them.
  • Daily logs — flow, mood (including named moods such as anxious or calm), energy, sleep hours, graded symptoms (cramps, bloating, headache, hot flashes, night sweats, brain fog), custom symptoms you add, and any free-text notes you write.
  • Basal body temperature — temperature readings and notes, if you log them.
  • Date of birth — only if you add it. It is optional and used for the Cosmic view.
  • Email settings — whether period reminders, the weekly digest and streak-milestone emails are on, how many days before your period a reminder arrives, and when we last sent you a weekly digest and a monthly report, so neither is sent twice.
  • Imported data — if you import from another app, the cycles, daily logs and temperatures from that file are stored like anything you logged yourself. The file is read in your browser; the file itself isn't uploaded or kept.
  • Share links — if you create one: a random link code, when it was created, whether it is still active, and how many times it has been opened.
  • Feedback — answers to optional questions we ask in the app, such as what brought you to Dawn Phase (the choices include health reasons like PCOS or perimenopause), and any message you send through the feedback form. Answers are stored with your account ID; messages are stored with your account ID and your email address. Section 6 says what deleting your account does to them.
  • Password resets — a single-use reset code and its expiry, while a reset is pending.
  • Past payments — Dawn Phase is free and currently takes no payments. If you paid under an earlier subscription, we still hold your Stripe customer ID and subscription status. Your card details were only ever held by Stripe.

Your goal is sensitive, so here it is on its own

When you sign up we ask what you're using Dawn Phase for: tracking your cycle, avoiding pregnancy, trying to conceive, or health monitoring. We store your answer, and choosing Trying to conceive in Settings stores it too. That answer records your reproductive intentions — whether you are trying to become pregnant or trying not to — and we treat it as some of the most sensitive information in your account.

It changes what the app shows you. If you're avoiding pregnancy, Dawn Phase doesn't show you cycle phases or fertile-window estimates. If you're trying to conceive, it shows fertile-window and ovulation estimates. The goal itself isn't written into emails or share links, though what they contain follows it — for example, an email to someone avoiding pregnancy names no phase. You can change it in Settings or delete it with your account.

We don't collect your phone number, your location, your contacts, or advertising identifiers. The app contains no third-party analytics, advertising, tracking-pixel or session-recording code.

2. How we use it

Your data is used to run Dawn Phase for you:

  • Showing your cycle day, your calendar, predictions worked out from your own cycles, your insights, and your doctor visit report.
  • Cycle phases and phase-based tips — for everyone except people who told us they're avoiding pregnancy.
  • Fertile-window and ovulation estimates — only if you're trying to conceive.
  • Sending emails. Everyone gets a welcome email, and password-reset emails when asked for. Period reminders, pre-period check-ins, a weekly digest and a monthly report are on by default for new accounts, and you can turn them off in Settings. Streak-milestone emails — sent when your logging streak reaches 7, 14, 30, 60 or 90 days — are on by default too, and have their own switch in Settings. Reminders, digests and reports contain cycle information, such as your predicted period date, your cycle day, your phase where you're shown one, your most-logged symptoms, and your average mood and sleep.
  • Showing what a share link displays to whoever opens it — no login is needed to view one, so anyone with the link can see it until you revoke it.
  • Reading your feedback and answering you when you contact us.
  • Keeping you signed in and keeping the service working and secure.

3. Who else handles it

Three companies process data for us, each only to provide its part of the service:

  • Cloudflare hosts the website, the app's server and the database. Every request passes through Cloudflare's network, which processes your IP address to deliver and protect the service. We don't store IP addresses in our database.
  • Resend sends our emails. It receives your email address, your name when an email greets you by it, and the content of each email — which, for reminders, digests and reports, includes the cycle information described above. Messages you send through the feedback form reach us by email through Resend too.
  • Stripe handled payments under an earlier subscription. No payments are taken now.

Nobody else. We have no advertising partners, data brokers or ad-tech integrations.

4. What we will never do

  • We will never sell your data — to anyone, for any price.
  • We will never share your data with advertisers — Dawn Phase has no advertising model.
  • We will never use your health data to train AI models without your explicit written consent.
  • We will never transfer your data in a company sale without giving you 30 days' notice and the chance to delete your account first.

5. Storage and security

Your data is stored in Cloudflare D1, Cloudflare's managed database, which encrypts stored data at rest (AES-256). Connections to the website and the app's server use HTTPS.

Passwords are never stored in plain text. They are hashed with PBKDF2-HMAC-SHA-256 using a unique random salt for every account, so a stolen database cannot be reversed with precomputed rainbow tables. Each hash is additionally combined with a secret key that is held separately from the database and never stored alongside it, meaning a copy of the database on its own is not enough to test password guesses against.

When you log in, a sign-in token is kept in your browser's local storage and expires after 30 days. The browser also keeps a few preferences, such as notices you've dismissed, and the installed app caches public pages and app files so it can open offline — never your logged data. The app itself doesn't set cookies.

Our server logs record requests and account IDs so we can keep the service running, not the contents of what you log. The people who run Dawn Phase can access the database when that is needed to operate, fix or support the service.

6. Your rights and controls

  • Export — download your daily logs as a CSV file from Settings, and open a doctor visit report covering the last 90 days that you can print or save as a PDF.
  • Correct — edit or delete any entry in the app, and change your goal, tracking mode, date of birth and email settings in Settings.
  • Delete your account — from Settings. This removes, straight away and all together, your account and the cycles, daily logs, temperatures, email settings and share links tied to it — a deleted share link no longer opens for anyone.
    • Feedback is kept, but no longer tied to you. Answers you gave lose your account ID; messages you sent lose your email address, and the account ID left on them belongs to no account any more. What you wrote stays as you wrote it.
    It does not remove:
    • the copy of each feedback message that reached our inbox by email when you sent it, which includes your email address;
    • copies in Cloudflare's database backups, which keep point-in-time history for up to 30 days before it ages out;
    • emails we have already sent you.
    To have feedback removed entirely, email us.
  • Access — request a full copy of your stored data by emailing us at privacy@dawnphase.com.

If you are located in the European Economic Area, the UK, or California, you have additional rights under GDPR, UK GDPR, and CCPA respectively. Please contact us to exercise them.

7. Contact

Questions, concerns, or data requests: privacy@dawnphase.com

We aim to respond to all privacy enquiries within 5 business days.