Your data, your rules
Femora Inc. — Privacy Policy
Effective: October 29, 2026
Our commitment
Intimate health data deserves the highest duty of care. This policy explains what we collect, why, how it's protected, and the control you have. Short version: we collect as little as possible, we never sell it, and you can leave with your data at any time.
Who this policy covers
Visitors to this website, customers who purchase through it, and users of the companion app. Different sections apply depending on which you are.
Why we process personal data
For the website: to respond to inquiries, process orders, prevent fraud, and (with consent) send updates you can unsubscribe from at any time. For the app: to generate your personal cycle and fertility insights, sync and secure your data, provide support, and improve the product using aggregated, de-identified analytics.
What we collect
Website: contact details you submit, order details, and standard technical logs. App: account details, the five signal streams (skin temperature, heart rate, HRV, discharge patterns, pH), cycle and symptom history you enter, and predictions generated for you.
Automated insights, honestly explained
Your insights are generated by algorithms that combine your signals with patterns learned across de-identified data. You can see what was measured, when, and request an explanation of any prediction. We do not use your data for automated decisions with legal or significant effects.
Payments
Payments are processed by PCI-DSS-compliant third-party processors (card processors and, where chosen, installment providers). We receive confirmation and limited transaction references — never your full card number.
Sharing and transfers
We share data only with service providers under contract (cloud hosting, payment processing, email delivery, app stores), with professional advisors under confidentiality, and where law requires. We do not sell personal information, ever. Where data crosses borders, contractual safeguards apply.
Security
Encryption in transit and at rest, least-privilege access, independent penetration testing, and an incident response plan with notification commitments.
Retention
Order records are kept as long as tax and consumer-protection law requires. App data is kept while your account is active; deleting your account destroys your data within 30 days, except where law requires longer retention.
Cookies
Essential cookies keep the site and cart working. Analytics cookies (if enabled) are aggregate and can be declined without affecting functionality. Your browser's tracking controls are respected.
Your rights
Depending on your jurisdiction you may have rights to access, correct, delete, export, or object to processing of your personal information, and to lodge a complaint with your regulator. Contact us and we will respond within statutory timelines — usually much faster.
Contact & changes
A named privacy officer oversees compliance. Reach them through the website contact form. When this policy changes materially, we will notify account holders by email before the change takes effect. Last updated: October 29, 2026.