Privacy policy

PART C — Privacy Policy

Who we are

Feminal is a product of Quinstru OÜ, registered in Estonia (EU). This policy explains how we collect, use, and protect your data.

How your data is handled

Feminal stores your health data primarily on your device. When you connect with a clinician or sign in on a new device, your data is encrypted and transmitted to our secure servers for backup and sharing purposes. Your health and intake data is individually field-encrypted on our servers. Account information is protected by encrypted storage and role-based access controls. All data is encrypted in transit.

What data we collect

• Account information: Email address, authentication credentials, and your selected role (patient or clinician).
• Health data: Information you choose to enter, including cycle data, symptoms, medications, supplements, and health history. You control what you enter and what you share.
• Alina conversations: Messages with Alina are processed by third-party AI providers (Anthropic and Mistral AI) to generate responses. Where health data is included to give Alina context, direct identifiers (such as names, date of birth, and ID, phone, email, and medical-aid numbers) are removed before transmission. These providers do not retain your data for model training. Conversations are stored on your device and synced to our secure servers so Alina can recall context across sessions and devices.
• Payment information: Processed by Stripe (on the web) or by Apple In-App Purchase (iOS) and Google Play (Android), managed via RevenueCat in the mobile apps. We never store your card details.

Who processes your data

Feminal uses a small number of trusted service providers to run the app. Each handles a specific piece of the service and is bound by contract to protect your data:

• Anthropic (United States) — runs the AI model that powers Alina. Your messages and the relevant health context are processed to generate Alina's replies. Anthropic does not keep your data to train their models.
• Mistral AI (France) — generates Alina's voice when you tap Listen. Text is sent, audio comes back, the text is discarded.
• Stripe (United States, Ireland) — processes card payments on the web. Stripe holds card details; we only see subscription status.
• Apple (United States, Ireland) — processes subscriptions on iOS through In-App Purchase. Apple holds card details; we only see subscription status.
• RevenueCat (United States) — manages subscriptions in the mobile apps across Apple In-App Purchase and Google Play. It receives an app user ID and your subscription status. No health data is sent to RevenueCat.
• Google and Apple sign-in — if you choose to sign in with your Google or Apple account, that provider verifies your identity and shares your email address and an authentication token with us.
• Voice input / speech recognition — when you use voice input to talk to Alina, your speech is transcribed by your device's built-in speech recognition. On the web (Chrome) and on Android, the platform's speech service (Google) may process this audio to perform the transcription; on iOS this is often handled on your device. Feminal does not store or retain your voice audio.
• ipwho.is (United States) — when you sign in on a new device, your IP address is sent to estimate an approximate location (city or region) shown in the security notification email. Your IP address is used only for this and is not retained.
• Firebase / Google (United States) — analytics (usage events, screen views, session duration) and push notifications. No health data is sent to Firebase.
• SendGrid (United States) — transactional and clinical email: account verification, password reset, security notifications, and the clinical notes and health summaries that clinicians choose to send to their linked patients.
• Recipe images (Google Firebase Storage, and third-party image services) — recipe illustration images are generated or sourced using only dish names and ingredients (no personal data) and served from Google Firebase Storage.
• Railway (United States, EU) — hosts the backend application and encrypted database.

Some providers are in the United States. Transfers of personal data are protected under Standard Contractual Clauses and, where applicable, the EU-US Data Privacy Framework, with equivalent protections for transfers from South Africa under the POPI Act.

How we use your data

• To provide health tracking, wellness information, and educational content through the app.
• To back up your data securely so it survives device changes.
• To facilitate data sharing with a clinician when you explicitly choose to connect.
• To process subscription payments.
• To send account and transactional emails (verification, password reset, security notifications), and to deliver the clinical notes and health summaries that clinicians choose to send to their linked patients. We do not send marketing emails.

What we never do

• Sell your personal or health data.
• Use your data for advertising.
• Share your data with insurers, employers, or any third party without your explicit consent.
• Use your data to train AI models.

Data security

Your health and intake data is individually field-encrypted at rest, and all data is encrypted in transit. Account information is protected by encrypted storage and role-based access controls. Access to patient data on our servers is restricted by role-based security controls. Only you and clinicians you have explicitly linked with can access your health information.

Clinician data sharing

Entirely opt-in. You connect with a clinician using a unique pairing code that the clinician gives you. Until you enter that code, no clinician can see your data. Once connected, your clinician can view the health information you have chosen to share, and can send you clinical notes, referrals, and records through the app, which appear in your Clinician's Notes. You can revoke access at any time. Clinicians are bound by their professional confidentiality obligations and by Feminal's Clinician Terms of Use.

Alina and AI

Alina is an AI wellness companion. She does not diagnose, prescribe, or replace professional medical advice. Her design includes safeguards for user wellbeing, including protocols for appropriate boundaries and mandatory referral to healthcare professionals for clinical decisions. Alina's AI providers (Anthropic and Mistral AI) do not retain your conversations or data for model training.

Feminal may display descriptive data observations based on information you enter — for example, noting that your cycle length varies or that a supplement has not been logged alongside a condition. These observations are limited to counts, dates, and durations derived from your data. They are not diagnoses, screening results, or medical assessments. They are provided for your information and to help you have informed conversations with your healthcare provider.

Medical disclaimer

Feminal is a wellness and educational tool. It is not a medical device, and nothing in the app constitutes professional medical advice, diagnosis, or treatment. The information provided through Feminal, including content from Alina, is for general educational and informational purposes only. It does not create a doctor-patient relationship. Always seek the advice of a qualified healthcare professional with any questions you may have regarding a medical condition. Never disregard professional medical advice or delay seeking it because of something you have read or received through Feminal.

Your rights

Under the EU General Data Protection Regulation (GDPR), the South African Protection of Personal Information Act (POPI Act), and applicable data protection laws, you have the right to:

• Access the personal data we hold about you.
• Request correction of inaccurate data.
• Request deletion of your data.
• Export your data in a portable format.
• Withdraw consent at any time.
• Lodge a complaint with a data protection authority.

Data retention

Server-side data is retained while your account is active. When you delete your account, a 7-day grace period begins during which you can cancel; once it ends, all associated data is permanently removed. Local data is under your control and is removed when you delete the app.

Children's privacy

Feminal is an 18+ service. We verify age at signup using date of birth, and accounts cannot be created by anyone under 18. We do not knowingly collect personal information from anyone under 18. If we become aware that we have inadvertently collected data from a person under 18, we will delete it.

We intend to offer a version of Feminal designed for younger users in future. That version will include age-appropriate safeguards and the parental or guardian consent mechanisms required by applicable law (including COPPA, GDPR, and the POPI Act) before it is made available to minors.

Changes to this policy

Material changes will be communicated via the app and by email at least 14 days before they take effect. The “Last updated” date at the top reflects the most recent revision.

Contact

Quinstru OÜ — support@quinstru.com