Prova is built privacy-first. The short version: your symptom data stays on your device. We don't run an account system, we don't have a server that stores your logs, and we don't sell or share anything.
What we collect
Your symptom record never leaves your device. On iPhone, the app checks in with our feedback service when it starts (to show replies to feedback you sent), carrying an anonymous identifier (a random ID stored on your device, not linked to your name, email, Apple ID or Google account; it can persist if you reinstall the app) only. The Android app does not check in; it contacts our feedback service only when you send feedback. Every symptom entry, period date, cycle estimate, and treatment note you record is stored locally on your phone. Prova has no login and no cloud database of your health data.
Apple Health
If you tap Import periods from Apple Health and allow it, Prova reads the menstrual-flow days saved in Apple Health (for example by Natural Cycles or Apple's Cycle Tracking) and adds the period start dates to your record on your iPhone. Prova only reads this one kind of Health data, never writes to Apple Health, and never sends Health data off your device. It is not used for advertising, sold, or shared with anyone. You can turn access off any time in the Health app (your profile picture → Apps → Prova).
Health Connect (Android)
On Android, if you tap Import periods from Health Connect and allow it, Prova reads the menstruation records saved in Health Connect (for example by Natural Cycles, Clue or Flo), including past records up to two years back, and adds the period start dates to your record on your phone. Prova only reads this one kind of health data, never writes to Health Connect, and never sends health data off your device. It is not used for advertising, sold, or shared with anyone. You can turn access off any time in Health Connect (Settings → Apps → Health Connect → App permissions → Prova).
Notifications
If you enable the daily reminder or luteal-phase alerts, Prova schedules local notifications on your device. These are generated on-device and are not sent through any server.
Purchases
On iPhone, subscriptions and the lifetime purchase are handled entirely by Apple's App Store (StoreKit). On Android, they are handled entirely by Google Play Billing. Prova receives only the purchase status Apple or Google provides to confirm your access. We never see your payment details.
Optional feedback
If you choose to send feedback through the in-app "Help shape Prova" form, we receive: the message you write; your email address only if you type one in (so we can reply); whether you are on the free or Pro plan; your app version, device model, OS version and language; and the random ID described above. On iPhone, a bug report also includes a short log of recent in-app events (for example "pattern unlocked", never your symptom entries), and any screenshot you choose to attach. This is voluntary, sent over an encrypted connection, used only to reply and decide what to fix, and never sold or shared. Your symptom data is never included.
Deleting feedback you sent
To have feedback you sent deleted from our feedback service, email [email protected] from the address you used, or tell us roughly when you sent it and what it said, and we will delete it.
Analytics & third parties
We do not run third-party analytics or advertising SDKs against your symptom content. There is no tracking of what you log.
Your control
You can erase all data at any time from Settings → Erase all data, which permanently deletes every entry on your device. Deleting the app also removes all local data.
Children
Prova is not directed at children under 13 and does not knowingly collect data from them.
Contact
Questions about privacy? Email [email protected].