PinkyBloom for Android, a product of Veronata, Inc. (“we,” “our,” or “us”), is built on a simple principle: your health data belongs to you. This policy covers the PinkyBloom Android app. It explains what data the app handles, how it’s stored, and how we protect your privacy. The Android app is on-device only: there is no account, no backend, and no analytics — your data never leaves your phone.

1. Data Stored on Your Device

PinkyBloom stores all health data locally on your Android device, in a database encrypted at rest (SQLCipher) and protected by the Android Keystore. This includes:

Menstrual cycle dates and predictions
Symptoms you log (cramps, headaches, bloating, etc.)
Mood and energy entries
Journal entries and notes
AI conversation history with Pinky
Private Vault notes and documents, behind a biometric lock

Voice input is processed entirely on-device using Android’s on-device speech recognizer. Audio is never recorded, stored, or transmitted.

The Pinky AI companion runs entirely on your device. Your conversations and the health context behind them are never sent to us or to any third party.

2. Data We Do NOT Collect

PinkyBloom for Android does not collect, transmit, or have access to:

Personally identifiable information (PII) — no names, no emails, no phone numbers
Account credentials — there are no accounts or logins
Location data or GPS coordinates
Browsing history or web activity
Advertising identifiers or tracking pixels
Contacts, photos, or other device data

3. No Analytics, No Tracking

PinkyBloom for Android contains no analytics SDK, no crash reporting, and no advertising or tracking libraries of any kind. We do not measure how you use the app, and no usage data is collected or sent anywhere. The “Insights” and symptom charts you see inside the app are computed on your device from your own data — they are for you, and are never transmitted.

4. The One Time the App Uses the Network

The only reason PinkyBloom connects to the internet is to download the on-device AI model that powers Pinky, one time, on first setup. This is a generic, openly-licensed language model — the download request contains no personal or health data. After the model is downloaded, the app works fully offline, including in airplane mode. If you do not set up the AI model, the app makes no network requests at all.

5. Health Connect

With your explicit permission, PinkyBloom integrates with Health Connect to provide a fuller picture of your wellbeing. All Health Connect data is used on-device only and is never transmitted.

Reads: sleep, resting heart rate, heart-rate variability, exercise, active calories, and weight — used to contextualize your cycle insights
Writes: menstruation (period start/end and flow), so your cycle is reflected across your other health apps

Health Connect access requires your permission and can be revoked at any time in Health Connect settings. PinkyBloom does not read or write any other Health Connect data types.

6. Permissions We Request

Microphone — for on-device voice input only; audio is not recorded or stored
Notifications — for local cycle reminders and check-ins; no push server is involved
Photos — only the image you pick in the system photo picker, used for on-device text recognition (e.g. importing a calendar); the image is not stored or sent
Health Connect — as described in Section 5

7. Data Retention & Deletion

Because all your data lives on your device, you are always in control of it:

Delete all my data: Settings → Delete all my data permanently erases all tracked data, preferences, and the downloaded AI model.
Uninstalling the app permanently removes everything — there is no account to delete and no server-side data to request removal of.

8. Children’s Privacy

PinkyBloom is not directed at children under the age of 13. We do not knowingly collect personal information from children under 13. Because the app collects no data, no such information is transmitted to us in any case.

9. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated “Last Updated” date. We encourage you to review this policy periodically.

10. Contact Us

If you have questions or concerns about this Privacy Policy or your data, email us at veronata@veronata.com.

Veronata, Inc.
2261 Market Street STE 22406
San Francisco, CA 94114