Your body,
understood.

Last updated: April 2026

Who we are

Feminal is a product of Quinstru OU, registered in Estonia (EU). This policy explains how we collect, use, and protect your data.

How your data is handled

Feminal stores your health data primarily on your device. When you connect with a clinician or sign in on a new device, your data is encrypted and transmitted to our secure servers for backup and sharing purposes. We use industry-standard encryption for all data at rest and in transit.

What data we collect

• Account information: Email address, authentication credentials, and your selected role (patient or clinician).
• Health data: Information you choose to enter, including cycle data, symptoms, medications, supplements, and health history. You control what you enter and what you share.
• Alina conversations: Messages with Alina are processed by a third-party AI provider to generate responses. This provider does not retain your data for model training. Conversations are stored on your device.
• Payment information: Processed by Stripe. We never store your card details.

How we use your data

• To provide health tracking, insights, and personalised guidance through the app.
• To back up your data securely so it survives device changes.
• To facilitate data sharing with a clinician when you explicitly choose to connect.
• To process subscription payments.
• To send transactional emails (verification, password reset, clinician notifications). We do not send marketing emails.

What we never do

• Sell your personal or health data.
• Use your data for advertising.
• Share your data with insurers, employers, or any third party without your explicit consent.
• Use your data to train AI models.

Data security

All health data is encrypted at rest and in transit using industry-standard methods. Access to patient data on our servers is restricted by role-based security controls. Only you and clinicians you have explicitly linked with can access your health information.

Clinician data sharing

Entirely opt-in. You connect with a clinician using a unique pairing code. They receive read-only access to health information you have chosen to share. You can revoke access at any time. Clinicians are bound by their professional confidentiality obligations and by Feminal's Clinician Terms of Use.

Alina and AI

Alina is a clinical decision support companion. She does not diagnose, prescribe, or replace professional medical advice. Her design includes safeguards for user wellbeing, including protocols for appropriate boundaries and mandatory referral to healthcare professionals for clinical decisions. Alina's AI provider processes conversations transiently and does not retain your data.

Your rights

Under the EU General Data Protection Regulation (GDPR), the South African Protection of Personal Information Act (POPI Act), and applicable data protection laws, you have the right to:

• Access the personal data we hold about you.
• Request correction of inaccurate data.
• Request deletion of your data.
• Export your data in a portable format.
• Withdraw consent at any time.
• Lodge a complaint with a data protection authority.

Data retention

Server-side data is retained while your account is active. On account deletion, all associated data is permanently removed within 30 days. Local data is under your control and is removed when you delete the app.

Children's privacy

Certain features are restricted for users under 18. We do not knowingly collect sensitive health data from minors without appropriate safeguards.

Changes to this policy

Material changes will be communicated via the app or email. Continued use after notification constitutes acceptance.

Contact

Quinstru OU — privacy at feminal.app