Code Red Privacy Policy

Effective date: October 7, 2026

Code Red is the English version of the app published in Russian as «Деньки». This is a translation of the Russian policy; if they differ, the Russian version at denki-diary.web.app/privacy prevails.

1. General

This Policy describes how Mikhail Vitalievich Sibgatulin (the “Operator”) processes the personal data of users of the Code Red mobile app, a menstrual cycle and symptom diary (the “App”). Processing follows Federal Law No. 152-FZ of the Russian Federation “On Personal Data” of July 27, 2006.

The App is free. No payment data is processed.

2. What data is processed

• Account data: your email address and password if you sign in with email (the password is stored in encrypted form by the authentication provider and is not available to the Operator); the identifier and email address from Apple or Google if you sign in with them; your name if Apple or Google share it.
• Cycle and symptom data, which is health data: period start dates, cycle and period length, cycle type, symptom tags, notes, daily symptom ratings, how symptoms affect your daily life, and your list of medications and supplements with the days you took them.
• Apple Health data, if you turn on the Health connection in the App (see “Apple Health”).
• Conversations with the AI assistant: your messages, the assistant’s replies, the assistant’s memory (facts you shared in the chat; you can edit or delete them), and the date and fact of your consent to share data with the AI model.
• Technical data: sign-up and last sign-in dates, server logs (request time, IP address, app information, response code). The text of entries and messages is not written to logs.

The App has no ads, no analytics services and no ad attribution.

3. Why data is processed

To run the App: keep your journal, calculate your cycle day and phase, sync entries between your devices, and answer you in the AI chat if you agree to it; to keep the service secure and prevent abuse, including limits on requests to the AI model; and to support users.

The report for your doctor is created on your device. The App does not send it to anyone; you choose who receives it.

Apple Health

The connection to the Health app on iPhone is turned on only by you, in the App’s Profile, and only for the data types you allow in the iOS dialog. You can turn it off in the same place and change permissions in iPhone Settings.

• The App reads period days logged in other apps and on Apple Watch. New period start dates are added to your journal and are then stored and processed like your other journal entries, including being shared with the AI assistant if you have agreed to that.
• The App reads sleep and resting heart rate only for the report for your doctor. This data is not stored on the server and is not shared with the AI assistant; it only goes into the report created on your device.
• The App writes period days and symptoms from your journal to Health. These records stay in Health after you turn off the connection; you can delete them in the Health app.

Health data is not used for advertising, marketing or behavioral analysis and is not sold.

4. Legal basis

Data is processed with your consent and to the extent needed to provide the App. Health data is processed only for the App features you use.

Sharing data with the AI model requires separate consent. The App asks for it before your first chat message; you can withdraw it in the chat settings.

5. Sharing with third parties and cross-border transfer

The App uses these service providers:

• Google, Firebase: authentication, database, server functions, password reset emails. Journal entries, chat history and memory are stored in Google data centers in Europe.
• Google, Gemini API: preparing the AI assistant’s replies. The model receives your message, the assistant’s memory and up to 90 most recent days with entries, only when you send a chat message and only after your consent. After you withdraw consent, no new data is sent; data sent earlier is processed by Google under the Gemini API terms.
• Apple and Google: sign in with an Apple ID or Google account, if you choose it.
• Apple: distribution of the App through the App Store and TestFlight.

Cross-border transfer. The service providers are located outside the Russian Federation. Personal data is transferred to them with your consent, to the extent needed for the App to work, and in line with Law 152-FZ.

Personal data is not sold, not used for advertising and not made public.

6. Storage and protection

Data is kept while your account exists. You can delete your account in the App: Settings, “Account” section, “Delete account and data”. Deleting removes journal entries, chat history and memory from the server; for accounts created with Apple, the App’s access to your Apple ID is revoked. You can also export your data there (“Export my data”). Chat history and memory can be deleted separately; your journal stays.

A copy of your entries is kept on the device so the App works offline; it is deleted when you sign out. Sign-in data on iPhone is stored in the iOS Keychain.

Organizational and technical safeguards are used: HTTPS/TLS in transit, encryption at rest by the cloud provider, and access rules that make entries available only to the account owner. Certified cryptographic protection tools are not used.

7. Your rights

You may ask how your personal data is processed, request that it be corrected, blocked or destroyed, withdraw your consent, and delete your account. Send requests to privet@bezterapevta.ru. You will receive a reply within the time limits set by Law 152-FZ.

8. Age

The App is intended for people aged 18 and over.

9. Changes

This Policy may be updated. The current version is always on this page; significant changes are marked with a new effective date.

10. Contact

Operator: Mikhail Vitalievich Sibgatulin. Person responsible for personal data processing: Mikhail Vitalievich Sibgatulin. Email: privet@bezterapevta.ru.