Privacy Policy

Last updated: October 12, 2026

At Gentleflow Cycle ("we", "us", or "our"), operated by Shree Gauri Pharma, we are committed to protecting your privacy and ensuring the security of your personal health information. This Privacy Policy explains how we collect, use, and safeguard your data when you use our application and website at gentleflow.in.

1. Information We Collect

To provide our cycle tracking and wellness services, we may collect:

• Account Information: Name, email address, and password (encrypted).
• Menstrual Health Data: Period dates, flow intensity, symptoms, mood, and cycle-related notes.
• Lifestyle Data: Sleep hours, stress levels, water intake, exercise, and energy levels — only when you choose to log them.
• Optional CarePass Data: Your self-reported pad stock, pad-usage log, optional planning preferences and reservations. Approved pickup partners only receive a one-time code, product type, quantity, and collection status. We do not share your cycle history or symptom records with the partner. Business applicants provide a contact phone and address for independent manual verification.
• Optional BodyOS CycleLab Data: With your opt-in, we store the selected self-care routine, start date, daily completion and wellbeing ratings, optional notes, and a consent timestamp. You can delete these experiments and check-ins.
• AI Interaction Data: Messages you send to our AI assistant, stored to maintain conversation history.
• Device Information: Browser type, operating system, and general usage analytics to improve our service.

2. How We Use Your Data

Your data is used solely to:

• Provide personalized cycle tracking, predictions, and health insights.
• Power our AI features (Symptom Analyzer, Mood Coach, Wellness Hub) with context about your cycle.
• Generate analytics and reports to help you understand your health patterns.
• Operate optional CarePass supply planning, partner-reported inventory and private pickup reservations. No availability is invented or guaranteed.
• Show non-diagnostic BodyOS personal observations and, if you choose CycleLab, descriptive comparisons between your recorded wellbeing check-ins. Such comparisons do not establish cause and effect.
• Improve the accuracy of cycle predictions over time.
• Communicate with you about your account (password resets, notifications).

3. We Do Not Sell Your Data

We will never sell, rent, or trade your personal or health data to any third party. Your menstrual health information is sensitive, and we treat it with the highest level of respect and confidentiality.

4. Data Storage & Security

• HTTPS/TLS protects data while it travels between your device and our service.
• Passwords are hashed using bcrypt — we never store plain-text passwords.
• All communication between your device and our servers is encrypted via HTTPS/TLS.
• Authentication, authorization, rate limits, and restricted administrative access protect account data.

5. Third-Party Services

We use the following third-party services:

• AI service providers: To process requests for AI-assisted features when you use them. We limit the context sent to what the feature needs.
• Google OAuth: If you choose to sign in with Google. We only receive your name and email — never your Google password.
• Payment, email, hosting and consultation providers: Used only when needed to operate the relevant service. Payment details are handled by the payment provider shown at checkout.

6. Your Rights

You have the right to:

• Access: View all personal data we hold about you.
• Export: Download your data at any time through your Profile settings.
• Delete: Delete your account and health/wellness data. Financial records that must be retained for tax/accounting may remain only in anonymised form. Active paid subscriptions must be cancelled first.
• Correct: Update or correct your personal information.
• Withdraw Consent: Stop using the service at any time.

7. Data Protection Rights

Gentleflow Cycle is operated by Shree Gauri Pharma. We aim to handle personal data lawfully and transparently and to support applicable privacy rights in the regions where the service is offered. This includes:

• Lawful and transparent processing of personal data.
• Collecting data only for specified, clear purposes.
• Providing easy mechanisms for data access, correction, and deletion.
• Implementing appropriate security safeguards to protect your data.

8. Children's Privacy

Our service is intended for users aged 13 and above. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided us with personal data, please contact us and we will delete it promptly.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify users of significant changes through the app or via email. Where required by law, we will provide additional notice or request consent for material changes.

10. Contact Us