Wombly – Privacy Policy

Effective date: 10 November 2026 · Last updated: 10 November 2026

This Privacy Policy explains how ZEROSYNTAX (SMC-PRIVATE) LIMITED ("ZEROSYNTAX", "we", "us" or "our") collects, uses, shares and protects information when you use the Wombly app for Android, available on Google Play (the "App"). The App helps you track your menstrual cycle, symptoms, fertility, pregnancy and postpartum health, so much of the information you give us is sensitive health information. We treat it that way.

This policy applies only to the Wombly App. Our other apps are covered by the general ZEROSYNTAX Privacy Policy. Where the two differ, this policy controls for the Wombly App.

1. Who we are

The App is published by ZEROSYNTAX (SMC-PRIVATE) LIMITED, Wapda Town, Lahore, Punjab, Pakistan. For data protection laws such as the EU and UK General Data Protection Regulation (GDPR), we are the "controller" of the personal information described in this policy. You can reach us at info@zer0syntax.com.

2. Not medical advice

The App gives general information and estimates, such as period, fertile-window, ovulation and due-date predictions, PCOS self-check results and AI-written answers. These are not medical advice, a diagnosis or a treatment, and the App is not a method of birth control. AI answers can be wrong. Always talk to a qualified healthcare professional about your health. In an emergency, call your local emergency number.

3. Information we collect

We collect only what the App needs to work. Most information comes directly from you.

3.1 Your private account (created automatically)

When you first open the App, we automatically create a private, anonymous account for you. It has a random account ID and no name, email address or phone number. Your entries are stored on your phone and backed up to our secure servers under this account, so the App can keep your data safe. If you also sign in with Google (section 3.4), you can restore the backup on a new phone. Without signing in, the backup can't be restored on another device.

3.2 Cycle and health information you enter

Depending on what you choose to log, this may include:

• Cycle data: period start and end dates, flow intensity, cycle length, period length, luteal-phase length, cycle regularity and typical flow.
• Daily logs: symptoms, moods, wellbeing habits, sexual activity and sex drive, ovulation and pregnancy test results, cervical fluid, basal body temperature, weight, water intake and your free-text notes.
• Profile information: your birth year (year only), height, measurement units, birth control method, health conditions you choose to record (for example PCOS or endometriosis) and your usual symptoms.
• Pregnancy and postpartum data: last menstrual period, due date, pregnancy start and end, pregnancy outcome (including loss or birth), number of babies, pre-pregnancy weight, checkups and appointments (date, time, type, title, location, provider name and notes), blood pressure and pulse, contraction timings, hospital and baby bag checklists, and your birth plan (which may include your name and your partner's name).
• Reminders you set up (type, time and message).

3.3 Health Connect data

If you choose to connect Health Connect on your Android phone, the App reads these data types: basal body temperature, body weight, resting heart rate, heart rate variability, respiratory rate, oxygen saturation, steps and sleep (including sleep stages and bed and wake times). The App does not write any data to Health Connect. The App asks for each permission separately, and you can allow some and deny others.

We use Health Connect data only to show how your body changes across your cycle and pregnancy inside the App. Imported values are saved with your daily logs and backed up to your private account like your other entries. Health Connect data is never used for advertising or marketing, never sold, never shared with data brokers or advertisers, never used to determine credit-worthiness or for lending, and never sent to our AI provider. The use of information received from Health Connect will adhere to the Health Connect Permissions policy, including the Limited Use requirements.

You can stop access at any time in Health Connect settings on your phone (the Health Connect app, or Settings › Apps › Health Connect › App permissions). You can also disconnect Health Connect inside the App (Settings › Devices & health): the App then stops reading from Health Connect, and you can choose to keep or delete the readings it already imported. Deleting removes only imported values; anything you entered yourself is kept.

3.4 Sign in with Google (optional)

You can link your account to Sign in with Google. This keeps your data when you change phones, and it is needed for the community, the partner program and AI features. We receive a unique Google account identifier and the basic profile information Google shares at sign-in (your email address and, if available, your name). We use these only to identify your account and contact you about it, never for marketing. We also keep basic account records, such as the sign-in method, when the account was linked and when the App was last used. We never receive your Google password.

3.5 Community ("Secret Chats")

Anyone can read Secret Chats. Posting and replying require Sign in with Google. If you take part, we collect the posts, replies, polls, poll votes, photos, likes, saved posts, follows and topic choices you make. You appear under an anonymous animal name and avatar, not your real name. Please note:

• Community content is public. Other App users can see posts, replies and photos, and anyone who has the link to a photo can open it. Don't post anything that could identify you or anyone else.
• Photos are cleaned on your phone first. Before a photo is uploaded, the App resizes it and saves it as a new image. This removes all photo metadata, including GPS location, the date and time it was taken and camera details. The original photo never leaves your phone. The App uses the Android photo picker and sees only the photo you pick.
• Community guidelines. Before you post or reply, you agree to our community guidelines. Your agreement is remembered on your phone, and the time you agreed is saved on your account.
• Reports. When you report a post or reply, we store your account ID, which post or reply you reported, the reason you picked and the time. Only our moderator sees reports. The person you reported is never told who reported them. What you report is hidden from you straight away. When three different signed-in members report the same item, it is hidden from everyone until a moderator reviews it. A person reviews every report within 24 hours and may keep the content, remove it, or stop a member from posting.
• Blocks. When you block someone, we store your account ID, their account ID and the time. You won't see their posts or replies, and yours are hidden from their account. Secret Chats is public, so anyone can still read posts without signing in. We don't tell them. You can unblock at any time.
• Word filter. Our server checks posts, replies, polls and community names against a short list of slurs and abusive phrases, and refuses matching text. Health, anatomy and sexual-health words are never filtered. No community text is sent to any outside moderation service or AI.

3.6 Partner program (optional)

You can invite a partner to see some of your information in their own copy of the App. You share a one-time pairing code yourself.

• Always shared once you pair: your cycle, period and luteal lengths and your recent period dates (in pregnancy mode, your last menstrual period and due date).
• Never shared with a partner: the sexual activity, sex drive and ovulation or pregnancy test results you log.
• Shared only if you turn it on (off by default): today's moods, symptoms and flow; sleep total and bed and wake times; upcoming checkups (date, type and title); recent weight and blood-pressure readings; recent contractions; and hospital and baby bag progress.
• Never shared with your partner: your notes, temperature, journal or pregnancy outcome.
• Your partner can send you short support messages, which we deliver as notifications.
• Partners can optionally give a display name and must confirm they are 18 or older.

Either of you can unlink at any time, and sharing stops straight away. Your partner is not our service provider. Once they have seen information you chose to share, it is outside our control.

3.7 AI answers (optional)

Some features use artificial intelligence to give you short, general answers. All of them use one provider: Claude, made by Anthropic. AI features need Sign in with Google and have a daily limit.

Your permission comes first. The first time you use an AI feature, the App shows a short screen called "AI answers by Claude". It explains what is sent. Nothing is sent unless you tap Allow AI answers. Your choice is saved on your phone, and you can change it at any time in Settings › Privacy & data › Privacy settings › "AI answers (Claude by Anthropic)".

What is sent, and only when you use the feature:

• Messages (guided health topics such as cramps, mood, sleep, bloating or a sex and fertility check-in): the topic, and the questions and the answers you chose in that chat.
• Add Symptom › AI insight: your current cycle phase (or, in pregnancy mode, your pregnancy week), the symptoms you selected, and up to three symptoms you often log at this point in your cycle.
• PCOS check › Explain with AI: your result, your age group, the answers you chose in the check, and whether you use hormonal birth control.

We never send your name, email address, Google account details, account ID, device identifiers, dates, your notes or your Health Connect data to the AI provider. Requests go from our server to Anthropic, so Anthropic doesn't see your IP address. We don't store your questions or the AI's answers on our servers. We keep only a count of how many AI requests your account makes each day, to apply the daily limit. Answers in Messages are saved only on your phone; other AI answers are only shown on screen. We don't use your data to train AI models. Anthropic processes each request to write the answer, under its commercial terms and privacy policy, which don't allow it to train its models on this data. AI answers can be wrong and are not medical advice.

3.8 Purchases and subscriptions

You buy and pay for subscriptions through Google Play Billing. We never receive your card details. Our subscription provider, RevenueCat, receives purchase information from Google Play (product, purchase token, transaction ID, purchase and expiry dates, and trial status). It is linked to a random ID, or to your account ID once you sign in, so we can unlock Premium features.

3.9 Notifications

Most reminders (period, fertile window, ovulation, pill, checkup and custom reminders, and daily tips) are scheduled on your phone. When your partner sends you a support message, the App shows it as a notification the next time it checks for new messages. We do not use push notifications and store no notification token.

3.10 No analytics or crash-reporting tools

The App contains no analytics, crash-reporting or advertising SDK. If you have allowed your Android device to share usage and diagnostics data, Google may give us anonymous crash and performance reports for the App (Android vitals in Google Play Console), as described in Google's privacy policy. We never receive your health, cycle, pregnancy or community data this way.

3.11 Information that stays on your phone only

The following is stored only on your phone and never uploaded to our servers:

• your pregnancy journal and bump photos;
• your Messages (AI chat) history;
• daily check-in answers and PCOS check results;
• baby-name lists and your custom symptom names;
• App Lock, screenshot protection and notification settings;
• your AI permission choice.

This information is lost if you delete the App or sign out. Exporting your data first keeps your PCOS check results, but the export does not include your pregnancy journal or bump photos, your Messages history, check-in answers or baby names. (Your birth plan is backed up to your account and has its own export in Tools › Birth plan.)

3.12 Support requests

If you contact us, we receive your email address and whatever you include in your message.

3.13 Permissions the App may ask for

The App does not access your precise location, contacts, camera, microphone or advertising ID.

4. How we use information

• To provide the App's features: tracking, predictions, charts, reminders, pregnancy tools, and backup and sync.
• To run optional features you choose: Health Connect import, the community, the partner program and AI answers.
• To manage subscriptions and free trials, including daily AI limits.
• To keep the App and community safe: word filtering, reports, blocking, moderation and preventing abuse and spam.
• To fix bugs and improve reliability.
• To answer your support requests and send important service messages.
• To comply with the law and protect our rights.

5. Legal bases for processing (EEA and UK)

• Health data (a special category of data): processed with your explicit consent. You give it when you start using the App, and separately for optional features such as Health Connect, partner sharing and AI answers. You can withdraw it at any time by turning a feature off or deleting your data.
• Providing the App and subscriptions: performance of our contract with you.
• Security, community moderation and abuse prevention: our legitimate interests in a safe, working App.
• Legal obligations: where we must keep or disclose information by law.

6. What we never do

• Sell or rent your personal or health data.
• Share your data with advertisers, ad networks or data brokers.
• Use health data, including Health Connect data, for advertising, marketing or profiling unrelated to the App.
• Track you across other companies' apps or websites, or access your advertising ID.
• Use your data to train AI models.

7. Who we share information with

We share information only with the service providers below. They process it on our behalf under contracts that require them to protect it and use it only to provide their services to us. We also share information with others when you choose to (your partner or the community), or as described in section 8.

Business transfers: if ZEROSYNTAX is involved in a merger, acquisition or sale of assets, information may be transferred as part of that deal. The new owner must honour this policy, and we will tell you before your information becomes subject to a different policy.

8. Legal requests and reproductive health data

We know that menstrual, fertility and pregnancy data can be especially sensitive. We disclose personal information to authorities only when we are legally compelled to by a valid, binding legal order. When that happens, we will:

• review each request carefully and challenge requests that are unlawful, overly broad or not properly issued;
• disclose only the minimum information legally required; and
• tell you before we disclose, unless the law forbids it.

Information that exists only on your phone (section 3.11) is not held by us, so we cannot disclose it.

9. International data transfers

We are based in Pakistan. Our main database is in the European Union, and some service providers process data in other countries, including the United States. Data protection laws in those countries may differ from those in your country. Where the law requires it (for example for data from the EEA, UK or Switzerland), we use appropriate safeguards such as the European Commission's Standard Contractual Clauses.

10. How long we keep information

• Your account and backed-up data: for as long as your account exists. When you delete your data or account in the App, we delete your account and all backed-up data from our database right away, then erase what is on your phone.
• Entries you delete one by one: they disappear from the App straight away. In your backup they are kept as "deleted" markers, so your other devices remove them too. The markers are erased when you delete your data or account.
• Anonymous accounts you stop using: if you never sign in with Google and don't use the App for 12 months, we automatically delete that anonymous account and its backup. The data on your phone stays. If you come back, the App creates a new private account and backs up what is still on your phone.
• Community photos: when you delete your post, we delete its photo right after. A daily cleanup also removes any photo that no post uses, normally within two days. When you delete your account, we delete all your community photos. Photos of posts hidden by a moderator are kept until the moderator decides.
• Partner pairing codes: codes expire after 7 days and are deleted 30 days after that. Records of attempts to enter a code are deleted after 1 day.
• Daily AI usage counts: 90 days.
• Community reply notifications: 90 days.
• Community reports: kept until a moderator reviews them, then deleted 12 months after the decision.
• Subscription records: as long as needed for accounting, tax and legal purposes.
• Data on your phone: until you delete it, sign out or delete the App.

11. Security

• All data sent between the App and our servers is encrypted in transit (HTTPS/TLS).
• Data on our servers is encrypted at rest. Database access rules make sure each account can read only its own data.
• Your sign-in session is kept in encrypted storage protected by the Android Keystore, and data on your phone is protected by Android device encryption.
• Sign-in secrets are stored only on our server and never shown to the App or to any user.
• You can turn on App Lock (fingerprint, face unlock or device PIN) and screenshot and recent-apps protection in the App.
• Only authorised staff who need it can access our production systems.

No system is 100% secure. If a data breach affects your personal information, we will tell you and the relevant authorities as the law requires.

12. Your choices and controls

• Export your data: Settings › Privacy & data › Export your data.
• Delete all your data: Settings › Privacy & data › Privacy settings › Delete all my data. This works for everyone, whether or not you signed in. It permanently deletes your backed-up data and account from our servers, then erases the App's data on your phone. If you signed in with Google, you can also use Settings › Delete account.
• Delete your account without the App: if you no longer have the App installed, email info@zer0syntax.com with the subject "Wombly account deletion", from the email address of the Google account you signed in with. We delete your account and all backed-up data and reply within 30 days. If you never signed in, your data is tied only to an anonymous account on your phone; reinstall the App and use Delete all my data, or it is deleted automatically after 12 months without use (section 10).
• AI answers: turn them on or off in Settings › Privacy & data › Privacy settings › "AI answers (Claude by Anthropic)".
• Health Connect: turn access on or off at any time in Health Connect settings on your phone, or disconnect it in the App and choose whether to delete imported readings.
• Partner sharing: change what you share, or unlink, at any time in the partner settings.
• Community: delete your posts at any time. Use the ••• menu on a post or reply to report or block someone. To unblock, go to Secret Chats › your profile › Safety › Blocked members.
• Notifications: manage them in the App or in your phone's Settings › Notifications.

13. Your privacy rights

Depending on where you live, you may have the right to:

• access the personal information we hold about you and get a copy (portability);
• correct inaccurate information;
• delete your information;
• withdraw consent at any time (this doesn't affect what we did before you withdrew it);
• object to or restrict certain processing;
• opt out of the "sale" or "sharing" of personal information or targeted advertising (we do none of these);
• not be discriminated against for using your rights; and
• complain to your local data protection authority (for example, in the EEA or UK).

You can do most of this yourself in the App (export and delete). For anything else, email info@zer0syntax.com with the subject "Wombly privacy request". We may need to check that the request comes from you. We reply within 30 days, or sooner if your local law requires it. If we decline your request, you can appeal by replying to our decision, and we will review it within 45 days.

14. US consumer health data notice

This section applies to residents of US states with consumer health data laws, such as Washington (My Health My Data Act), Nevada and Connecticut.

• Consumer health data we collect: the cycle, symptom, mood, sexual activity, sexual-health check-in, ovulation and pregnancy test, fertility, pregnancy, postpartum, birth control, health-condition, body-measurement, vital-sign and Health Connect data described in section 3.
• Sources: directly from you and from Health Connect (with your permission).
• Purposes: only to provide the App features you ask for, as described in section 4.
• Sharing: only with the service providers in section 7, with your partner or the community when you choose to, and as required by law (section 8). We do not sell consumer health data.
• Consent: we collect and share consumer health data only with your consent, which you can withdraw at any time.
• Your rights: you can confirm whether we collect your consumer health data, access it, get a list of the third parties it has been shared with, delete it and withdraw consent. Use the tools in the App or email us as described in section 13.
• No geofencing: we don't use geofences around healthcare facilities.

15. Children and teens

The App is not for children under 13, and they should not use it. In the EEA and UK, users under 16 (or the lower age set by local law) need permission from a parent or guardian. If you are a parent and think your child under 13 has given us information, email us and we will delete it. The partner program is only for people aged 18 or older.

16. Changes to this policy

We may update this policy when the App or the law changes. We will post the new version on this page and change the "Last updated" date. If a change materially affects how we use your health data, we will tell you in the App and, where the law requires it, ask for your consent again.

17. Contact us

ZEROSYNTAX (SMC-PRIVATE) LIMITED
Wapda Town, Lahore, Punjab, Pakistan
Email: info@zer0syntax.com
Website: https://zer0syntax.com/