Capsule is committed to protecting your privacy. This policy explains what data the App collects, how it is used and stored, and with whom it is shared.
Capsule tracks sensitive health information — including menstrual cycle data and, where you choose to log it, information about sexual activity. We treat all such data with particular care. You remain in full control of what is recorded and where it is stored.
Capsule stores the following data locally on your device:
Your real name, phone number, physical address, financial information, location, or device identifiers.
All cycle, symptom, and intimacy data is stored locally on your device using AsyncStorage.
If you sign in, your data is also synced to a cloud database powered by Supabase, hosted in the European Union. Supabase stores data in secure, encrypted infrastructure with TLS in transit and AES-256 at rest.
If you use the App without an account, no data ever leaves your device — with the sole exception of AI requests described in Section 04, which are only sent after your explicit consent.
Capsule offers an optional Intimacy Lock feature that requires Face ID or Touch ID authentication before displaying intimacy log details on the calendar or in day view.
Capsule uses a third-party AI service to provide personalized wellness tips. Data is only shared with this service after you give explicit consent within the App.
Capsule sends data to Claude AI, a large language model developed by Anthropic, PBC (anthropic.com). Anthropic is a separate, independent company and is not affiliated with Capsule.
The data is sent solely to generate a personalized AI-powered wellness response (cycle-phase advice, symptom insights) in real time.
Anthropic processes Capsule's requests under a Zero Data Retention policy. Your data is not stored on Anthropic's servers after the response is generated and is not used to train or improve AI models.
The App requests your explicit permission before any data is sent to the AI service. You may decline — the App will function normally without AI features. You can revoke your consent at any time in Settings. Once revoked, no further data will be sent.
Capsule does not use any third-party analytics, crash reporting, advertising SDKs, or user tracking of any kind. We do not build usage profiles, we do not track you across apps, and we do not share data with advertisers. The App does not use cookies.
We use industry-standard security measures: encrypted data transmission (HTTPS/TLS), encrypted-at-rest cloud storage via Supabase (EU region), biometric device-level protection for intimacy data (if enabled by you), and no plaintext storage of sensitive tokens. All AI requests are transmitted over encrypted connections.
Capsule is not intended for children below the minimum age required by your local jurisdiction. We do not knowingly collect personal data from individuals below this age. If you believe a minor has provided us with personal data, please contact us so we can remove it.
You have the right to:
Users located in the European Economic Area (EEA) and the United Kingdom have additional rights under the General Data Protection Regulation (GDPR) and the UK Data Protection Act, including rectification, restriction of processing, portability, and objection to processing. Users in California have additional rights under the California Consumer Privacy Act (CCPA). To exercise any of these rights, contact us using the details below.
If you delete your account, your cloud data is permanently removed within 30 days. Local on-device data is removed immediately upon App deletion. AI request data is not retained by Anthropic (see Section 04).
If you are located outside the European Economic Area, your data may be transferred to and stored in Supabase's EU infrastructure. We rely on Standard Contractual Clauses (SCCs) and the appropriate legal mechanisms to protect such transfers.
We may update this policy from time to time. Changes will be reflected by the "Last updated" date at the top. Material changes will be communicated to you in the App. Continued use of the App after changes constitutes acceptance of the updated policy.
We respond within 30 days.