Privacy Policy

Your privacy is our priority.

Effective September 27, 2026 · Applies to the Nari iOS app

The short version

Nari is built so that your health data stays yours. Everything you record is stored on your device and synced to your own private iCloud. If you turn on Partner Mode, a small set of pairing records is exchanged through Nari's Apple CloudKit public database, as described below. We run no servers of our own, embed no analytics, and never sell your data or share it with third parties. If you choose to share with a partner, that data is encrypted with AES-256 before it leaves your device.

What Nari stores

Nari records only what you choose to enter:

  • Cycle and period dates, flow intensity and clots.
  • Symptoms and how intense they were, moods, and energy levels.
  • If your goal is trying to conceive: basal body temperature (BBT), with factors that may affect it, and ovulation indicators such as a positive LH test, fertile cervical mucus, or ovulation pain.
  • Optional free-text notes and whether you took birth control.
  • Your settings: your tracking goal, typical cycle and period length, optional age, reminder times, and your partner-sharing goal.

Nari does not collect your location, contacts, photos, or browsing activity, and requests no such permissions.

Where your data lives

  • On your device. Your data is stored locally and protected by iOS data protection, which encrypts it at rest while your device is locked. You can additionally lock Nari behind Face ID or your passcode.
  • In your private iCloud. Your cycle data syncs through Apple CloudKit to your personal, private iCloud database — accessible only with your Apple account. Apple encrypts this data in transit and at rest; we never see it.

On-device intelligence

All insights, pattern detection, and daily messages are generated entirely on your device. Nothing you log is sent to any external AI service or third-party server — Nari makes no network connections other than Apple iCloud.

Partner sharing, encrypted

Partner mode is entirely optional and under your control:

  • You choose a sharing goal — Companionship, Self-care, or Trying to conceive — and Nari shows you the exact list of what it shares before you connect. Only today's values for that goal are shared; notes, symptom severity, and your history are never shared, and anything outside your goal never leaves your device.
  • Shared data is encrypted on your device with AES-256-GCM before upload and exchanged through Nari's Apple CloudKit public database. The encryption key is generated on your device and handed to your partner through the one-time invite record.
  • To connect you, the pairing records also store, in plain text, the display name you choose (if any) and a pseudonymous account identifier assigned by Apple CloudKit. They contain no cycle data.
  • Pairing uses a short-lived, single-use invite code that expires after one hour and is deleted the moment it is accepted.
  • You can change the goal or unlink at any time.

Apple Health

Nari does not use HealthKit and does not read or write Apple Health data. Everything in Nari is information you enter yourself.

Notifications & widgets

Nari's notifications are scheduled on your device — an estimate of when your period might start, a check-in if your cycle runs longer than usual, and an optional daily birth-control reminder. Nothing is sent from a server. You can turn notifications off at any time in iOS Settings. Nari's widgets show your cycle day and phase on your Home Screen and redact that information while your iPhone is locked.

Exports

You can export your data as a JSON backup, PDF, or CSV at any time. Exported files are created on your device and shared only where you send them. Like any file you export, they are not encrypted — treat them as you would any personal document.

What we never do

  • No analytics or tracking SDKs.
  • No advertising.
  • No selling, renting, or sharing of your data with third parties — ever. The only sharing is the partner sharing you turn on yourself.
  • No accounts, no profiles, no data on our own servers. We don't have servers.

Your controls

You can delete any entry inside the app at any time. Settings › Delete All Data removes your cycle data from your device and your private iCloud, withdraws any pending invite, and ends an active partner connection (the shared record is emptied so your partner's app knows the connection has ended). A small connection record remains in the public database so both apps can tell the connection has ended; it holds the display names you chose (if any) and pseudonymous CloudKit identifiers, and no cycle data. Deleting the app removes your local data; data synced to your iCloud can be managed through your iCloud settings. Nari keeps no copy of your cycle data on servers of its own.

Medical disclaimer

Nari is for informational and educational purposes only. It is not a substitute for professional medical advice, diagnosis, or treatment, and its pattern observations and fertility estimates are not a contraceptive method and do not prevent pregnancy.

Changes & contact

If this policy changes, the updated version will be posted here with a new effective date. For questions or privacy requests, write to agusteyne@gmail.com or visit the support page.