Legal
Privacy Policy
Last updated: October 15, 2026
Overview
Fertily helps users record and follow fertility treatment cycles and related information. We collect information users provide and technical information needed to operate, secure, and support the service. Not every item stored in Fertily is health data.
Data controller
Fertily is operated by P.N.M.P. Software, a sole proprietorship registered in the Netherlands (KvK/CCI 42126630). P.N.M.P. Software is the data controller responsible for the processing of personal data described in this Privacy Policy.
Business address: Jan Tooropstraat 34, Amsterdam, The Netherlands.
For privacy-related questions or requests, contact [email protected].
Types of data, purposes, legal bases, and retention
The table below summarizes the personal data Fertily processes in the app. Website analytics is optional, separately described below, and processed only if you accept it in the cookie banner. Health and fertility information is processed only with your explicit consent. The listed account data is retained while your account is active. When account deletion is completed, it is removed from active systems; encrypted backups may remain for up to 7 days before automatic deletion. Information that must be retained by law is an exception.
| Data type | Purpose | Legal basis | Retention |
|---|---|---|---|
| Account information (email address and account identifiers) | Create and manage your account and provide Fertily. | Contract (GDPR Article 6(1)(b)). | While your account is active; deletion and backup timing as described above. |
| Cycle, treatment, medication, appointment, symptom, pregnancy test, embryo, clinic, ultrasound, blood test, journal, and related records | Provide cycle and treatment tracking, planning, reminders, calendar features, widgets, and optional partner sharing. | Contract (Article 6(1)(b)) for service data; your explicit consent (Articles 6(1)(a) and 9(2)(a)) for health data. | While your account is active; deletion and backup timing as described above. |
| Uploaded images and PDF files | Store and display files you attach to your records. | Contract (Article 6(1)(b)) and, where they contain health data, your explicit consent (Articles 6(1)(a) and 9(2)(a)). | While your account is active; deletion and backup timing as described above. |
| Health-platform metrics you authorize (such as temperature, heart rate, sleep, or steps) | Show supported health metrics in Fertily when you enable an integration. | Your permission for the integration and explicit consent for health data (Articles 6(1)(a) and 9(2)(a)). | While your account is active; deletion and backup timing as described above. You can also revoke platform permissions. |
| Consent records (time and version of consent wording) | Record and demonstrate your health-data consent and any withdrawal. | Legitimate interests in documenting and demonstrating compliance (Article 6(1)(f)); the underlying health-data processing uses explicit consent (Article 9(2)(a)). | While your account is active; deletion and backup timing as described above, except records required by law. |
| Device, app, and session information | Operate, troubleshoot, and secure the app and maintain service reliability. | Legitimate interests in operating and securing Fertily (Article 6(1)(f)); contract where necessary to provide the service (Article 6(1)(b)). | While your account is active; deletion and backup timing as described above. |
| Support messages and account requests | Respond to your questions and fulfill account or privacy requests. | Contract (Article 6(1)(b)) or legitimate interests in responding to requests (Article 6(1)(f)), as applicable. | While your account is active; deletion and backup timing as described above, except records required by law. |
Health and fertility data
Information such as fertility treatment details, cycle information, medications, embryos, symptoms, pregnancy tests, blood test results, ultrasound results, appointments, treatment notes, and relevant uploaded files may constitute health data and special-category personal data under the GDPR. Other information in Fertily, such as account or technical information, is not necessarily health data.
How we use information
- To provide Fertily’s cycle and treatment tracking features and synchronize information across your devices.
- To store and retrieve files you choose to upload.
- To create optional reminders, calendar events, schedule views, and device widgets.
- To support partner sharing when you choose to connect another account.
- To provide requested support, respond to account requests, investigate technical issues, and maintain the service’s reliability and security.
Legal basis for processing
Fertily processes ordinary personal data only where an appropriate legal basis under Article 6 GDPR applies. For health and fertility information that constitutes special-category health data, Fertily relies on your explicit consent under Article 9(2)(a) GDPR. We ask for your explicit consent to process health and fertility information during account registration. We record when you give consent, including the time and the version of the consent wording. You may withdraw your consent at any time by choosing “Withdraw health data consent” under Profile → Account in the app. The app explains that Fertily depends on health and fertility data and asks you to confirm account deletion. If you confirm, withdrawing consent starts permanent deletion of your account and associated data; if you cancel, no deletion is started and your consent remains in place. We handle a confirmed withdrawal as an account deletion request. You can also contact us to request withdrawal. Withdrawal does not affect the lawfulness of processing that took place before you withdrew it. See “Your choices and GDPR rights” for how to withdraw consent and what this may mean for the service.
Cookies and website analytics
Our website uses optional Google Analytics to understand visits and improve the site. Analytics is off unless you accept it in the cookie banner. If you accept, Google Analytics loads and may use cookies or similar browser storage to collect website usage information, including pages viewed and links or buttons clicked. This can include a click on an email contact link. If you decline, Google Analytics is not loaded. We store your accept or decline choice in your browser's local storage. To change or withdraw your choice, clear Fertily site data in your browser, reload the site, and choose again; clearing site data also removes analytics cookies stored for Fertily. Google processes analytics information on our behalf. See Google's privacy information for details about its processing.
Access to your data
Access to user data is limited and occurs only where reasonably necessary to operate, support, troubleshoot, or secure Fertily. We do not use health or fertility data for advertising, and we do not sell personal or health data.
Partner sharing
You may choose to invite one other Fertily account to view your treatment information. You must actively confirm sharing before an invite is created, and the invited account must redeem it before access starts. The connected account can read your cycle and treatment records, including events, medications, appointments, symptoms, pregnancy tests, embryo and clinic information, schedule checks, invoices and costs, and files or photos attached to those records. The partner cannot edit your data. Fertily does not share this information automatically. You can invalidate a pending invite or remove an active connection at any time; this ends the connection and blocks new access. A temporary file link created before revocation may remain usable for up to one hour. Information or files the partner already viewed, saved, or copied cannot be retrieved.
Permissions and device features
- Apple Health and Health Connect: Fertily can integrate with Apple Health on iOS or Health Connect on Android if you choose to connect and grant the relevant permissions. Depending on platform support and your permissions, Fertily may read these supported metrics used in the app: skin temperature, basal body temperature, heart rate variability (HRV), resting heart rate, sleep, and steps. These integrations are optional. Fertily accesses only data covered by the permissions you grant. You can manage or revoke permissions in the relevant platform or device settings. Health-platform data is not used for advertising and is not sold.
- Photos and files: if you choose an image or PDF to upload, Fertily accesses the item you select through the photo library or file picker.
- Calendar: if you grant calendar access, Fertily can create, update, and remove treatment-related events in your device calendar.
- Notifications and widgets: if you enable them, Fertily can schedule local reminders and store a limited schedule snapshot on your device for widgets.
Service providers and processors
Fertily does not sell personal or health data. We use the following providers to operate the service:
- Supabase Pte. Ltd. (Singapore; Fertily’s core project is hosted in France): provides authentication, database, backend and private file storage. It processes account information, health and fertility records, and uploaded files to provide these functions. Where data is transferred outside the EEA, Supabase’s Data Processing Addendum and, where required, Standard Contractual Clauses (SCCs) provide transfer safeguards. Supabase’s current subprocessor list describes other providers it may use.
- Google LLC (United States): provides optional website analytics through Google Analytics. If you accept analytics, Google receives website usage information such as page views and interactions with links and buttons. Google states that it relies on applicable adequacy decisions, including the EU–U.S. Data Privacy Framework, or SCCs where required for international transfers.
- Cloudflare, Inc. (United States): hosts and delivers the Fertily website through Cloudflare Pages. In providing this service, Cloudflare may process website request information, such as IP addresses and requested URLs, and technical logs. Cloudflare’s Data Processing Addendum and, where applicable, the EU–U.S. Data Privacy Framework or SCCs provide transfer safeguards.
- Functional Software, Inc. (United States), doing business as Sentry: may process mobile app crash reports and error diagnostics when Sentry is enabled in an app build. Diagnostic events may include technical information and your internal Fertily user ID. Sentry stores this data in its Frankfurt, Germany data region. Sentry’s Data Processing Addendum and, where applicable, Standard Contractual Clauses (SCCs) provide safeguards for any transfers outside the EEA.
These providers process data only as needed to provide their services to Fertily. Using service providers to operate Fertily is different from selling your personal data.
International data transfers
Fertily aims to process and store its core backend data in the EU/EEA. Some service providers may process personal data outside the EEA. Where required, Fertily relies on appropriate safeguards or transfer mechanisms under the GDPR.
Storage, retention, and deletion
Account and treatment data is generally retained while your Fertily account exists and as necessary to provide the service. You can permanently delete your Fertily account in the app under Profile → Account → Delete account. When account deletion is completed, your account and associated health and fertility data are deleted from active systems, except for information Fertily may be legally required to retain. Encrypted backup copies may remain for up to 7 days before they are automatically deleted.
Security
We use reasonable technical and organizational measures to protect personal information. Connections between the app and Supabase services use HTTPS/TLS. Supabase encrypts database data and database backups at rest using AES-256. User data in our database is protected by database roles, least-privilege permissions, and Row Level Security policies that restrict access to each user’s records; connected partners can only read information the owner has chosen to share with them. Access by Fertily and its service providers is limited to what is reasonably necessary to operate, support, and secure the service. We maintain an incident response process to investigate, contain, document, and, where legally required, report personal data breaches. No system can guarantee absolute security.
Your choices and GDPR rights
You may withdraw consent to processing your health and fertility data at any time by contacting [email protected]. Because Fertily’s core features rely on the health and fertility information you choose to enter, withdrawing consent may mean Fertily can no longer provide the relevant service. You can also delete your account and associated data in the app: Profile → Account → Delete account.
To make a request to exercise your GDPR rights, including data portability, email [email protected]. Where appropriate, we may ask you to verify your identity before responding. We ordinarily respond within the period required by applicable privacy laws.
- Depending on the circumstances and applicable GDPR conditions, you may have the right to access your personal data, correct inaccurate data, request deletion or restriction of processing, receive certain data you provided in a structured, commonly used, machine-readable format or ask us to transmit it to another controller where technically feasible, object to certain processing where that right applies, and withdraw consent where processing relies on consent.
- You also have the right to lodge a complaint with a data protection authority.
- You may choose whether to grant optional permissions such as health-platform, photo, calendar, or notification access. You can manage health-platform permissions in the relevant device or platform settings. You can disable reminders, remove uploaded attachments where available, and stop using Fertily at any time.
Automated decision-making and profiling
Fertily does not make decisions about you based solely on automated processing, including profiling, that produce legal effects or similarly significantly affect you.
Age requirement
Fertily is intended for adults aged 18 or older and is not intended for use by anyone under 18. If you are under 18, please do not create an account or use Fertily.
Contact
For privacy-related questions or requests, contact [email protected].