On Deck
Her cycle, quietly understood.
Privacy Policy
Last updated: August 2026
The short version
The app itself makes no network requests. Everything you enter stays on this phone, encrypted. We never receive it, never see it, and no server anywhere stores it — we have no server at all.
Purchases and iCloud sync are handled by Apple’s system services, not by us. What syncs is ciphertext, and the key only ever moves between your own devices. Details below.
What is processed
Only what you enter in the app: what you call her, cycle length, period length, regularity, and the period start and end dates you record.
This is consumer health data. That is precisely why this app is built without any ability to send it off your device.
What we do not do
· The app itself makes no network requests; there is no networking code in it
· No servers — we never receive, store, or look at any user data
· No third-party SDKs of any kind: no analytics, no crash reporting, no ads
· No device identifiers, location, contacts, or photos are collected
· No profiling, no targeted advertising, no selling or sharing with anyone
Where data lives
Inside this deviceu2019s app sandbox, encrypted with AES-256-GCM. The key is held in the system keychain and never syncs to iCloud or migrates to another device. Once the device is locked, the file is unreadable at the system level.
The master key never syncs. Only if you turn on iCloud sync yourself does the app create a second, sync-only key and store it in your iCloud Keychain, which is end-to-end encrypted.
Law enforcement and third-party requests
This matters especially for a reproductive health app: we hold none of your data. If law enforcement, a subpoena, a court order, or any third party asks us for it, there is nothing for us to hand over — not because we would refuse, but because the data does not exist on our side.
The only people who can read these records are those who can unlock your device.
Who can see it
Only someone who can unlock this device. You can also turn on "Require unlock" in Settings to put Face ID or your passcode in front of the app itself.
Backup files
Data leaves the app sandbox only when you tap "Export a backup", producing a file encrypted with the 6-digit passcode you choose. Where that file goes afterwards is entirely up to you; we have no knowledge of and no access to it.
Please note: six digits stop a casual snoop, not someone who sets out to crack it. Keep backups on your own device or a private drive.
Purchases
The app offers optional paid features (On Deck Pro). Purchases are handled entirely by Apple’s App Store — we never receive or store your payment details, Apple Account identifier, or any transaction record. All this device keeps is whether it is unlocked, and that never leaves the device.
Not buying changes nothing about recording, seeing her status, fixing dates, or exporting encrypted backups. Those stay complete and free.
iCloud sync (optional, Pro)
Nothing syncs unless you turn it on in Settings. What goes to iCloud is ciphertext: the encryption key lives in your iCloud Keychain, which is end-to-end encrypted, so only your own devices can retrieve it. Apple cannot read the contents, and neither can we — we have no server to receive them.
Turning sync off deletes both the cloud copy and the sync key.
Reminders (optional, Pro)
Reminders are scheduled entirely on your device. No push service is involved, no device token exists, and nothing is sent to any server. The default is discreet mode: nothing cycle-related appears in the notification itself.
Your rights
· Access and correct: everything is in the app, viewable and editable at any time
· Export: Settings u2192 Export a backup
· Delete: Settings u2192 Erase everything. This removes both the encrypted file and the keychain key, and cannot be undone
If you live in California (CCPA/CPRA), Washington (My Health My Data Act), or another state that grants you data rights: those rights apply to personal information a business holds about you. Because we collect and hold nothing, there is no record here for us to disclose, delete, or correct — you already hold all of it. We do not sell or share personal information, and we never have.
Children
This app is not directed to children under 13, and we do not knowingly process their information.
Her right to know
What you record is your partneru2019s health information. We recommend telling her that you track it, and what you track.
Changes
Any change to this policy ships with an app update and is dated on this page.
Contact
Questions, bug reports, or feature requests? Email yzd3008@icloud.com. We usually reply within a few days.
隐私政策
最后更新：2026 年 8 月
一句话版本
App 自身不联网。你填的所有内容都只存在这台手机上，加密保存。我们收不到、看不到，也没有任何服务器存着它 —— 我们根本没有服务器。
购买与 iCloud 同步由 Apple 的系统服务处理，不经过我们；同步上传的是密文，钥匙只在你自己的设备之间流转。详见下文。
我们处理哪些信息
只有你在 App 内主动填写的内容：对她的称呼、周期长度、经期长度、规律程度，以及你记录的经期起止日期。
这些属于消费者健康信息（consumer health data）。正因如此，本 App 从设计上就不具备把它传出这台设备的能力。
我们不做什么
· App 自身不发起任何网络请求，代码里没有一处网络 API
· 没有服务器，我们不接收、不存储、不查看任何用户数据
· 不接入任何第三方 SDK，包括统计、崩溃上报、广告
· 不收集设备标识符、位置、通讯录、相册
· 不做用户画像，不做定向广告，不向任何第三方出售或共享信息
数据存在哪里
存在这台设备的应用沙盒内，使用 AES-256-GCM 加密，密钥保存在系统钥匙串中，且不会同步到 iCloud 或迁移到其他设备。设备锁屏后，文件在系统层面即不可读。
主密钥永不同步。只有当你主动开启 iCloud 同步时，才会另外生成一枚仅用于同步的密钥并存入 iCloud 钥匙串（端到端加密）。
关于执法与第三方索取
这一点对生殖健康类应用尤其重要：我们手上没有你的任何数据，因此无论是执法机关、法院传票，还是任何第三方向我们索取，我们都无从提供 —— 不是我们不愿意，是技术上不存在这份数据。
能读到这些记录的，只有能解锁你这台设备的人。
谁能看到
只有能解锁这台设备的人。你还可以在设置里开启「打开就要验证」，为 App 单独加一道 Face ID 或设备密码。
备份文件
只有你主动点击「导出备份」时，数据才会离开 App 沙盒，生成一个用你设定的 6 位口令加密的文件。这个文件之后去了哪里由你决定，我们无法知晓也无法访问。
请注意：6 位数字口令能挡住随手翻看，挡不住专门的破解。请把备份文件存在你自己的设备或私人网盘。
购买
本应用提供可选的付费功能（懂她 Pro）。购买流程完全由 Apple 的 App Store 处理 —— 我们不接收、不存储你的支付信息、Apple 账户标识或任何交易明细。本机只保存一个「这台设备是否已解锁」的状态，它不会离开设备。
不购买不影响记录、查看状态、修改记录与加密备份 —— 这些功能永远完整可用。
iCloud 同步（可选，需 Pro）
只有你在设置里主动开启时才会同步。上传到 iCloud 的是密文：加密密钥存放在 iCloud 钥匙串中，而 iCloud 钥匙串是端到端加密的，只有你自己的设备能取出它。Apple 读不到内容，我们更读不到 —— 我们没有服务器接收它。
关闭同步会同时删除云端副本与同步密钥。
提醒（可选，需 Pro）
提醒完全在你的设备上排期，不使用推送服务，不存在 device token，也没有任何信息发往任何服务器。默认采用「含蓄」模式：通知栏上不会出现任何与周期有关的内容。
你的权利
· 查阅与更正：全部内容都在 App 里，随时可看可改
· 导出：设置 → 导出备份
· 删除：设置 → 清空全部数据。该操作会同时删除加密文件与钥匙串中的密钥，不可撤销
如果你居住在加利福尼亚州（CCPA/CPRA）、华盛顿州（My Health My Data Act）或其他赋予你数据权利的州：这些权利针对的是企业所持有的个人信息。由于我们不收集也不持有任何用户数据，你的查阅、删除、更正、拒绝出售等请求在我们这里没有可执行的对象 —— 全部控制权本来就在你自己手上。我们从不出售或共享任何个人信息。
未成年人
本 App 不面向未满 13 周岁的儿童，也不会在知情的情况下处理其信息。
关于她的知情权
你记录的是伴侣的健康信息。我们建议你让她知道你在记录，也让她知道记录了什么。
政策更新
本政策如有变更，会随 App 版本更新，并在此页面标注更新日期。
联系我们
如有疑问、发现问题或想提建议，请发邮件到 yzd3008@icloud.com，我们通常几天内回复。