Privacy Policy · Hues Within

Version 1 · Effective: October 12, 2026 · Last updated: October 15, 2026

This Privacy Policy applies to the Hues Within mobile app, website, account services, exports, share images, and support.

1. Where your information is kept

Your working records stay on your device. With an account and the required sensitive-data consent, Hues Within also backs up saved check-ins, personal details (including an optional birthday), current and past prescriptions, custom questions and tags, and app settings. Settings include tracking and comparison choices, language, reminders, touch feedback, seasonal effects and app lock. Period and medication answers are included in their saved check-ins.

Insights and phase estimates are calculated on your device. Exports are separate copies. A new phone needs its own notification permissions and unlock method; device passcodes and biometric credentials are not backed up. Pending changes retry when synchronization is available. An offline or failed backup is not a confirmed account copy.

Signing out. Signing out keeps your account and backups. Records are cleared from the phone only after their backup is confirmed. Otherwise they remain in this account’s separate storage on the phone for your next sign-in. If local cleanup fails, you remain signed in to retry.

2. Information you choose to record

daily check-ins, including mood, energy, interest, irritability, managing everyday life, sleep duration and need for sleep, medications taken, symptoms, changes from usual, emotions, movement, activities, notes, custom answers, and timestamps;
current and past medication names, doses, units, prescription snapshots, dates, and what you report taking on a particular day;
optional period and menstrual-cycle records and settings;
display name, optional name on reports, age, country, gender identity, reminders, custom tags, custom questions, insight preferences, and other settings; and
Printable reports (Portable Document Format, PDF) or spreadsheets, and chart or calendar images, you intentionally generate.

These records can reveal sensitive health information. Reports and share images are generated only when you request them; Hues Within does not automatically send them to a clinician, family member, employer, insurer, or anyone else.

3. Account and sign-in information

If you create an account, Supabase handles your account identifier, email, sign-in provider and session information. Email sign-in may use a password, one-time code or reset link. Sign in with Apple provides an identifier and, when available, an email; it does not give Hues Within access to your iCloud files. A limited Apple credential may remain temporarily after account deletion to finish disconnecting Apple, as explained below. Edits replace the backed-up check-in for that date; a deletion record prevents an older device from restoring a deleted check-in.

The optional name on reports is used on the printable report and spreadsheet. If it is empty, the display name is used. These files are shared only when you choose to share them.

The optional name on reports is included in your signed-in basic-profile backup. Restoring an older backup without that field preserves the report name already on this device.

For purchases linked to a Hues Within account, limited purchase-verification records support access and restoration. The retention section below explains what remains after account deletion. Guest purchases use the Apple Account on the device.

Hues Within records age confirmation, Terms acceptance, Privacy acknowledgment, sensitive-data consent or withdrawal, and Insights activation or withdrawal. These choice records include the choice, notice version and a code identifying the exact text shown, language, timestamps, app version, platform, and sign-in context; they do not contain check-in answers. Guest choice records stay on the device. Signed-in choice records are stored with the account through Supabase, with a local copy for offline use.

4. Technical and support information

Service providers may process limited technical information such as Internet Protocol (IP) address, request time, browser or device information, authentication events, and error details to deliver and secure the service. If you contact support, Hues Within processes your email address, message, and anything you choose to include. Please do not email sensitive health details unless they are necessary for your request.

5. How information is used

Hues Within uses information only to:

save and display the records, preferences, history, reports, and share images you request;
back up and restore your saved check-ins, personal details, current and past prescriptions, custom questions and tags, and app settings when you sign in;
when you turn on Insights, generate descriptive patterns, comparisons, context, and frequently used tag suggestions from your records without diagnosing, predicting, or determining cause;
authenticate accounts and maintain secure sessions;
respond to support, privacy, security, and deletion requests; and
prevent abuse, diagnose service failures, and protect the service.

Health information is used only to provide the features you choose. Hues Within does not sell personal or health information, use it for advertising, share it with data brokers, provide it to insurers or employers, or use private records to train, fine-tune, evaluate, prompt, or otherwise supply an artificial-intelligence model.

Optional Insights

Insights is optional and off until you turn it on. It analyzes your recorded answers on this device, including frequently used tag suggestions. This choice is separate from accepting the Terms and consenting to sensitive-data processing. With Insights off and the required consent in place, you can still record, read History and export recorded information; new reports omit analysis.

Turning Insights off does not delete records or files already created or shared. The choice applies on this device before it is sent to your account. Offline choice records are saved for retry. If the device cannot save the choice, it may not remain off after restarting. Withdrawing sensitive-data consent is a separate choice: check-ins, History, Insights and backup pause until you consent again. Privacy information, support and urgent-support information, Apple subscription management, sign-out, account deletion and the applicable guest-erasure control remain available.

6. Service providers and disclosures

Supabase provides authentication, private signed-in backups of saved check-ins, personal details, prescriptions, custom questions and tags, and app settings, Plus entitlement and purchase-restoration records, the restricted Apple-revocation retry queue, database security, and server functions.
Apple processes Apple sign-in when you choose it and App Store purchases, restoration, billing, and subscription management. Hues Within receives transaction and entitlement information needed to verify and provide Plus, not your full payment-card details.
Google Workspace provides the support and privacy-request mailbox. If you email Hues Within, Google processes the message, sender and recipient information, attachments, and related security and delivery metadata to provide and protect the email service.
OpenAI Sites and its hosting infrastructure deliver the public website and may keep limited request, security, and reliability logs.
Authorities or professional advisers may receive information when reasonably necessary to comply with law, protect rights and safety, or investigate a security incident.

These providers may process information in countries where they operate. Hues Within uses safeguards required by applicable law for international transfers.

7. Retention and deletion

Device-local records remain until you delete an available record, use the guest data-erasure control, delete your account successfully, or delete the app and its data. Guest erasure also clears Hues Within reminders and attempts to clear cached reports or share images that the app can access, but keeps the device's language choice, app-lock setting, and separately stored guest legal and Insights choices, including whether the first-use Insights explanation has been shown.
Signed-in check-in backups remain while your account is active. Editing a check-in replaces the backed-up version for that date. Deleting a check-in removes its backed-up answers and keeps a deletion marker so an older device does not restore them.
Signed-in backups of personal details, prescriptions, custom questions and tags, app setup and backed-up preferences remain while your account is active and are updated when those records change.
Account information, legal and Insights choice records, the active Plus entitlement, and signed-in backups remain while the account is active. When Delete account completes successfully, it removes the authentication account and those Hues Within records from active cloud systems. Limited copies may remain temporarily in provider infrastructure backups, or for security, legal compliance, fraud prevention, or dispute resolution, until the applicable retention period ends.
Deleting your account also deletes its active Hues Within backups, including check-ins, personal details, prescriptions, custom questions and tags, app setup and backed-up preferences. Provider recovery copies remain subject to the separate handling explained in this notice. This does not remove files you saved or shared outside the app, or records expressly retained under the existing purchase, revocation and legal-record disclosures.
Erasing recorded data while keeping an account is currently unavailable.
Support and privacy correspondence remains only as long as reasonably needed to respond, document compliance, or resolve a dispute.

See the Data deletion page for the available steps and scope.

Limited records that may remain after account deletion

Information: Account-linked purchase records: Apple original transaction identifier, product, plan, latest transaction-signed date and verification times. The deleted Hues Within account identifier is removed. These records contain no journal entries, profile details or account email.
Purpose: Restore the same purchase and prevent duplicate or conflicting claims.
Retention: Kept only while reasonably needed for purchase restoration, transaction changes, fraud prevention, disputes or legal obligations. Apple keeps its own purchase records separately.
Information: Apple purchase-notification identifier and receipt time, without journal entries, profile details or account email.
Purpose: Prevent the same purchase notification from being processed twice.
Retention: Kept while reasonably needed for the purchase, security and legal purposes above.
Information: An Apple-issued sign-in credential, only if Apple disconnection fails during account deletion. Access is restricted to the server.
Purpose: Finish disconnecting Sign in with Apple without blocking account deletion.
Retention: A manual retry removes it when disconnection succeeds or on the first retry after 14 days. Because retries are manual, it can remain longer than 14 days.

These records remain subject to applicable privacy rights. The regional notices explain how to request a review of their retention or deletion.

8. Security

Hues Within uses encrypted connections, controls that restrict access to account records, and sign-in information protected by your device. The optional app lock uses the device's own Face ID, Touch ID, or passcode check; Hues Within does not receive or store biometric templates. Access is limited to what is needed to operate the service. No system can guarantee absolute security. If a breach creates legally reportable risk, affected users and authorities are notified as required.

9. Your choices and rights

You can use guest mode, skip unanswered questions, disable optional medication or period tracking, choose whether to use the app lock, export reports or share images, delete individual check-ins, clear guest data, and permanently delete your signed-in account from Settings. Depending on where you live, you may also have rights to access, correct, delete or cancel, restrict or oppose processing, withdraw consent, receive portable data, and complain to a privacy authority. Mexico residents may exercise applicable access, rectification, cancellation, and opposition (ARCO) rights. Hues Within does not discriminate against anyone for exercising a privacy right.

Regional privacy notices

Exercising ARCO rights in Mexico

ARCO means access to your personal data, rectification of inaccurate or incomplete data, cancellation when you want data deleted, and opposition when you object to a particular use. To make a request, email hello@hueswithin.com with the subject “ARCO privacy request.” Include your name, the email used for your Hues Within account, the right you want to exercise, a clear description of your request, and the email where you want to receive the response. If someone is acting for you, include enough information to confirm their authority. Please do not send journal entries, health details, passwords, or other unnecessary sensitive information.

Hues Within may use the account email or another proportionate authentication step to verify identity or account ownership. If information needed to process the request is missing, Hues Within may ask you to complete it. Hues Within will communicate its decision within 20 business days after receiving a complete request. If the request is granted, it will be carried out within the following 15 business days. When justified and permitted by law, either period may be extended once for the same length, and Hues Within will tell you why.

Exercising ARCO rights is free. You are responsible only for reproduction or delivery costs allowed by law, if any; electronic access will be provided when practical. Cancellation may be limited where Hues Within must retain or block data for legal, security, or dispute-resolution reasons. If you disagree with the response, you may contact Mexico’s Secretaría Anticorrupción y Buen Gobierno or another competent data-protection authority.

10. Legal bases where applicable

Where applicable law requires a specific legal basis, Hues Within relies on your request to provide a feature, consent where required and validly obtained, compliance with a legal obligation, or another basis that the applicable law permits and that Hues Within discloses when required. When Hues Within relies on consent for a purpose, you may withdraw it using the available consent control or by contacting Hues Within. Withdrawal does not make earlier lawful processing unlawful and is separate from deletion.

After sensitive-data consent is withdrawn, check-ins, History, Insights and backup are unavailable until you give consent again. Existing data is not deleted. Privacy documents, support and urgent-support information, Apple subscription management, sign-out, account deletion and the applicable guest-erasure control remain available.

11. Age eligibility

Hues Within is intended only for adults age 18 or older. People under 18 may not create an account, use guest access, or otherwise use Hues Within. Contact Hues Within if you believe a person under 18 has provided information so the situation can be reviewed and appropriate action taken, including deletion where required.

12. Website cookies and logs

The public information pages do not set advertising cookies. The hosting provider may keep limited request logs for security and reliability.

13. Changes to this policy

Changes are posted here with an updated date. Hues Within provides additional notice or seeks renewed consent when required, including before materially expanding how sensitive information is used.

14. Third-party policies

15. Controller and contact

Cynthia Salinas Treviño is the Privacy Lead and the operator and controller of Hues Within. Her legal domicile as controller is Manuel Alanis 6, Col. Lomas del Hipico, 64989 Monterrey, Nuevo León, Mexico. For privacy questions or requests, contact hello@hueswithin.com.