Your information, explained plainly
Privacy Policy
This Privacy Policy explains how Varelune handles information when you visit varelune.app, contact us, request beta access, or use the Varelune app. Varelune is being built as a privacy-first, local-first women’s health app. We will update this policy when our data practices change.
1. Information Varelune is designed to keep local
The Varelune app is designed to store health records on your device and work offline. No account is required for the local-first app experience. At the time this policy takes effect, Varelune has no implemented health-data cloud sync path and no third-party analytics SDK in the app.
Health information you enter into the app may include cycle, fertility, pregnancy, postpartum, menopause, mental and emotional wellbeing, symptoms, medications, digestive, bowel, pelvic-floor, appointment, and personal-note information. This information is sensitive. Do not use Varelune as a substitute for professional medical care.
Local-first design does not mean that every device-level copy is automatically protected in every situation. Device backups, exports, screenshots, notifications, operating-system services, and apps you choose to share with may create additional copies. Review your device settings and sharing choices carefully.
2. Information submitted through this website
The beta/contact form is not part of the Varelune health record. Please do not submit symptoms, diagnoses, medications, menstrual, fertility, pregnancy, sexual-health, or other sensitive health information through the form or by email.
If you use the form, we collect the information you choose to provide, such as your email address, name or preferred name, request type, and message. We also receive limited technical information needed to deliver and protect the form, which may include your IP address, request metadata, and abuse-prevention signals.
Submissions are processed by Cloudflare and our email provider, delivered to developer@varelune.app, and stored in email systems. They are not added to the Varelune app or a Varelune application database. Provider security logs, backups, and retention schedules may preserve limited information for longer than the active mailbox.
3. How we use information
We use website submissions to respond to requests, review beta interest, communicate about the product when appropriate, prevent abuse, protect the service, and maintain records needed for legitimate business and legal purposes. We do not use website submissions to provide medical advice.
Varelune is not designed to sell your personal information or use your health record for advertising. We do not describe the app as anonymous, completely risk-free, or encrypted at rest until those protections are implemented and independently verified.
4. Service providers and disclosures
We may share information with service providers that help operate the website and contact flow, including Cloudflare and email providers. They process information on our behalf and may retain logs or backups under their own security and retention practices.
We may also disclose information when required by law, to respond to valid legal process, to protect users or the service, or in connection with a business transfer. We do not share information with clinicians, insurers, employers, advertisers, or other third parties for their own use unless you direct us to do so or the law requires it.
5. Retention and deletion requests
We keep information only for as long as reasonably needed for the purpose collected, security, support, legal obligations, and legitimate business records. Email providers and Cloudflare may retain copies in logs or backups according to their own schedules.
To ask us to delete a website submission or ask a privacy question, email developer@varelune.app. Include enough information for us to locate the request, but do not send health information. Deletion from active systems may not immediately remove copies held in provider backups or security logs.
6. Security
We use reasonable measures appropriate to the information and service involved. Varelune’s encrypted storage and user-controlled encrypted backup work is still in progress. Do not rely on the current pre-release app for data that requires a completed, independently verified encryption design.
No service or device is perfectly secure. You are responsible for protecting your device, passcode, operating-system account, and any exports or backups you create.
7. Children and sensitive use
Varelune is not directed to children. Do not use the website contact form to submit information about a child. If you believe a child has provided personal information, contact us at developer@varelune.app.
8. Changes to this policy
We may change this Privacy Policy as Varelune develops. The effective date above shows when the current version became active. If a change is material, we will provide notice through the website or app where reasonably practicable.
9. Contact
Privacy questions and deletion requests: developer@varelune.app.
Important: This policy is a product draft for review and should be checked against the final app implementation, legal entity, jurisdictions, provider contracts, retention settings, and App Store privacy disclosures before publication.