Privacy Policy
Last updated: 24 September 2026. Applies to the Hushday iPhone app and this site.
The short version. Everything you log – attacks, how bad they were, where it hurt, medicines, doses, notes, the days you mark – is written to a private database on your iPhone and stays there. There is no account and no Hushday server, so there is nowhere for it to be uploaded to. What can leave the phone is listed below, in full: crash and performance reports with no health values in them, your subscription status, and – only if you turn them on – a backup in your own iCloud Drive and an exchange with Apple Health on the phone itself.
1. Who we are
Hushday is made by an independent developer, Arman Malkhasyan, Armenia, who is the data controller for the limited processing described here. You can reach us at support@hushday.app.
2. What Hushday stores, and where
Your entries are stored in an app-private database on the device itself, plus a small settings store for preferences such as reminder times, theme and language. Both are protected by iOS app sandboxing and by your device passcode. Hushday shows a blank screen in the app switcher, and you can add a Face ID, Touch ID or passcode lock to the app itself in More → Privacy.
We cannot read any of it. Not because we promise not to, but because it is never sent to us – there is no account system, no login, no email address collected, and no backend service that receives your entries.
On this website, we save your appearance choice (Auto, Light or Dark) in your browser's local storage so it stays the same between pages and visits. It is not sent to us and is not used for analytics or advertising.
Website visit statistics
This website uses Vercel Web Analytics to count visits and page views. It provides aggregate statistics such as the page visited, the referring website, country, browser and device type. It does not use cookies and cannot connect a website visit to the app or to your diary. URL parameters and fragments are removed before a page view is sent, and nothing is sent when your browser asks not to be tracked (Do Not Track or Global Privacy Control). Read more about Vercel Web Analytics privacy.
3. What leaves your iPhone
| Goes to | What | Your control |
|---|---|---|
| Sentry (crash and performance reports) | What failed, and for a small share of sessions how long things took: stack traces and timings, the app version, device model and iOS version. | Off in More → Privacy |
| Apple and RevenueCat (purchases) | Subscription status, the product and a random app user id. | Needed for a subscription |
| Your own iCloud Drive | A backup file in your personal Apple account, under Apple's encryption. | Off until you turn it on |
| Apple Health, on the phone | Headaches you choose to save there, and period days and sleep you let it read. | Off until you allow it |
Hushday sends no usage analytics: no record of which screens you open or what you log leaves the phone. If that ever changes, this policy and the app will say so before it does.
4. Crash and performance reports
When something breaks we receive a report so it can be fixed. For about one session in twenty the same service also measures how long the app took to start and to open screens, so slow spots can be found. Personally identifiable information is turned off, and every report is filtered before it is sent so that nothing you wrote can ride along in a message or a breadcrumb. You can switch these reports off at any time in More → Privacy.
5. Subscriptions
Purchases are processed by Apple. We never see your payment details – Apple tells us only whether a subscription is active. RevenueCat validates the purchase on our behalf and identifies it with a random installation identifier created on your iPhone, not with anything about you. Their processing is covered by RevenueCat's privacy policy and Apple's.
6. iCloud backup
Backup is optional and off until you turn it on in More → Your data. When on, Hushday writes a single backup file into the Hushday folder of your iCloud Drive, inside your own Apple account. It travels between your devices under Apple's encryption, and we have no access to your iCloud account. You can delete the file yourself from the Files app at any time.
Period days read from Apple Health are deliberately left out of that file and out of exports. They stay where Apple keeps them, and after a restore Hushday reads them from Apple Health again.
7. Apple Health
Apple Health is entirely optional and works only with your permission, which you give per data type in Apple's own dialogue and can take back at any time in the Health app. With permission, Hushday saves each finished attack to Apple Health as a headache with its severity – nothing else about it, not what you called it, medicines or notes – and reads your menstrual flow and your sleep. Period days are kept on the phone to show headaches around them; sleep is read when your patterns are worked out and is not stored. All of this happens on the device; Health data never passes through us.
8. Widgets, Siri and the Lock Screen
If you add the Hushday widget, it shows this month's headache days and whether an attack is in progress. On the Lock Screen that is visible to anyone who can see your phone, so add it only where you are comfortable. The widget's button and the Siri and Shortcuts actions can start or end an attack without unlocking – so that it takes one tap while it hurts – and they only write to your own diary on the phone.
9. Exports and the doctor report
You can export your entries as JSON or CSV at any time, without a subscription. Creating a PDF report requires Hushday Pro. Reports are made on your device, and you choose whether to share them. Once you share a file, where it goes is up to you and to the app you send it through; at that point this policy no longer governs it.
10. What we never do
- Sell, rent or trade your data. There is no data to sell.
- Share anything with advertisers, data brokers, employers or insurers.
- Show advertising, or profile you for it.
- Track you across other apps or websites, or ask to.
- Require an account, an email address or a phone number.
- Put a health value into a crash report.
11. Your rights
If you are in the European Economic Area, the United Kingdom, Switzerland, California or another region with comparable law, you have rights of access, correction, deletion, portability and objection over personal data a company holds about you.
In practice these are already in your hands: your entries are on your device, so access and portability are the export in More → Your data, and deletion is deleting an entry, deleting all data there, or removing the app. For crash reports, switch them off in More → Privacy, and ask us to delete what we have received by writing to support@hushday.app. The feedback email from More → About includes a random installation id that lets us find it; we have no other way to identify you. We answer within 30 days.
Our legal basis for crash reporting is legitimate interest – keeping the app working – which is proportionate because the reports carry no health values and no identity. You can object at any time, and the switch in More → Privacy is that objection: no reason needed, no feature withheld. For processing a purchase, the basis is performance of our contract with you.
12. Children
Hushday is intended for adults and is not directed at children. We do not knowingly collect data from anyone under 16.
13. Retention
Your entries stay on your device until you delete them. Crash reports are kept by our processor for as long as they are useful for fixing problems and no longer than 12 months, then deleted automatically.
14. Changes to this policy
If this policy changes in a way that affects what leaves your phone, the date at the top will change and the app will tell you before the change takes effect. Earlier versions are available on request.
15. Contact
Questions, requests or corrections: support@hushday.app. A person reads every message.