Privacy Policy for field.
Last updated: 12 October 2026
field. ("we", "us") is an iPhone app that helps you understand and support a partner's menstrual cycle. This policy explains what we store, why, who handles it, and how you can remove it. We wrote it to be read, so it is plain on purpose.
1. Who is who
- You are the person with the account. You sign up with an email and password, or with Apple or Google.
- Your partner does not have an account and never uses the app. Details about her are entered by you, from what she has told you.
Because the app holds information about her that she did not enter herself, we ask you to talk to her first: tell her the app exists, what you are entering, and that she can ask you to stop. The app is built around that conversation. See section 7 for what happens if she asks for her information to be removed.
2. What we store
About you
- Your email address and a password (stored only as a one-way hash, we cannot read it).
- If you sign in with Apple or Google instead: the identifier and email address they give us (Apple can give a private relay address instead of your real one), and your name if they share it. There is no password. For Apple we also keep a token, readable only by our server, so we can cancel the app's access at Apple when you delete your account.
- Your first name, date of birth, and your own love-language ranking, if you enter them.
- How you describe the relationship (for example "in a relationship", "dating"), if you enter it.
About her (entered by you)
- Her name or nickname, and her date of birth.
- The first day of her last period, her usual cycle length and period length.
- Whether she uses hormonal birth control (yes, no, not sure), if you answer.
- Your guess at her love-language ranking.
We call this "cycle and health-related information". It is the most sensitive thing we hold, and we treat it that way (sections 5 and 6).
About your device and use of the app
- A push-notification token and the time zone of your phone, if you allow notifications. We use them to send you a notification on the day a new phase starts.
- A short log of which notifications we have sent you, so we never send the same one twice.
- Reminders on your phone: if push notifications are not in use, your phone books reminders itself. They can include her name and are stored only on your phone. We cancel them when you sign out or delete your account.
- Products you save in the app.
- Anonymous usage counts, unless you turn them off (Profile, Settings, "Share anonymous usage"): which screens you open, what kind of thing you tap (never which suggestion or product, because that could show where she is in her cycle), which onboarding step you reached, and how you signed in. They carry no name, email, date or account id, nothing about her, and no IP address, and are not linked to your account. They also carry three general facts about you: your relationship stage, an age range (never your birth date) and your top love language. We use them only to see where people get stuck and what is useful.
Not stored on our servers
- Face ID or Touch ID. If you turn it on, your phone checks your face or finger locally. We never receive it.
- Your location, contacts, photos, or Apple Health data. The app does not ask for any of them.
- Payment details. Purchases happen on a retailer's website, not in the app.
3. Why we use it
- To work out which phase she is likely in and show you content for that day.
- To send the notifications you asked for.
- To keep your account working and secure.
- To tailor suggestions (for example, the wording of a suggestion can follow the love-language guess you gave).
We do not use your data, or hers, for advertising. We do not sell it. We do not build profiles to share with anyone.
4. Who else handles it
| Who | What they do | What they see |
|---|---|---|
| Supabase | Hosts our database, sign-in, and the small server functions that send notifications and delete accounts. | Everything listed in section 2, stored encrypted. |
| Apple (push service) | Delivers notifications to your phone. | Your device token and the notification text, which can include her name. The message goes directly from our server to Apple, not through any other company. |
| Apple and Google (sign-in) | If you choose "Sign in with Apple" or "Sign in with Google", they confirm who you are. | What you share with them to sign in. They do not receive anything about her. Their own privacy policies apply to that step. |
| Resend | Sends the emails your account needs (sign-in confirmation, password reset). | Your email address and the email text. |
| Have I Been Pwned (Pwned Passwords) | When you choose a new password, your phone asks whether it has appeared in a known data breach. | Only the first 5 characters of a one-way scramble (hash) of the password. Never the password itself, your email, or anything about you or her. Their own privacy policy applies. |
| PostHog | Counts anonymous usage (screens opened, taps), so we can see where people get stuck. | Only the anonymous events described in section 2. No name, email, dates, anything about her, account id or IP address. Hosted in the European Union. You can switch it off in Profile, Settings. |
| Shopee (and TikTok Shop, if a product uses it) | The retailer you choose to open from a product card. | Only what you do on their site. We send no profile data to them. Their own privacy policy applies from the moment you open their page. |
We use one analytics company (PostHog, above) for anonymous usage counts, and no advertising companies. We do not sell or share information for advertising and do not track you across other companies' apps or websites, so the app does not show Apple's tracking prompt. If that ever changes, we will update this page and the App Store privacy details before the change ships.
We may disclose information if a court or law requires it, and we will say so when the law allows.
5. Where it is stored and how it is protected
Data is stored with Supabase in Singapore. It is encrypted in transit (HTTPS) and at rest. Every table is protected by row-level security, so your session can only read and change your own rows. Passwords are hashed. On your phone, your sign-in session is kept in the iOS Keychain.
No system is perfectly secure. If we ever learn of a breach that affects you, we will tell you and the authorities as the law requires.
6. Affiliate links
Some products in the app link to retailers through affiliate links. If you buy through one, we may earn a commission at no extra cost to you. The app shows at most one product at a time in its main suggestion list. Prices shown are approximate and can differ on the retailer's site.
7. Her information, and her wishes
She has no account, so she cannot log in to see or change anything. We think that is the right design for an app about a relationship, but it comes with a duty on us.
- If you want to remove her details, edit them in Profile, or delete your whole account (section 8). Both are immediate.
- If she asks you to stop using her information, you can remove it yourself in the app, or delete your account.
- If she contacts us directly at support@fieldperiod.com and asks us to delete the information held about her, we will act on it. Because she has no account, we ask her for her full name and date of birth as she believes they were entered, and we look for a single matching record. If one matches, we remove her details from it (name, date of birth, cycle details, birth-control answer). We do not tell the account holder that she wrote to us, because that could put her at risk. We cannot prove who is writing, so this is a reasonable check, not a guarantee.
We cannot stop someone from typing the same facts into the app again later. What we can do is make sure a stated wish is honoured when it reaches us.
8. Your choices
- Delete your account: Profile, then Delete account. You confirm it is you (with your password, or through Apple or Google), and we permanently delete your account, her details, your answers, saved items and notification history. It happens immediately. Our hosting provider may keep short-lived backups, and anything you delete ages out of them when they expire. We do not control that schedule, so we cannot give an exact number of days.
- Change or correct anything: edit your name, email and password in Profile, and her details in her card.
- Anonymous usage counts: turn them off any time in Profile, Settings, "Share anonymous usage". Counts already sent cannot be tied back to you, because they carry no account id.
- Notifications: turn them off in the app (Profile, Reminders) or in iOS Settings. Turning them off stops new pushes; deleting the account also removes your device token.
- Ask for a copy: email support@fieldperiod.com and we will send you what we hold about you.
9. Children
field. is for adults. You must be at least 18 to use it. We do not knowingly collect information from younger people, and we will delete it if we learn we have.
10. How long we keep things
Anonymous usage counts are kept for one year (the limit of the plan we use with PostHog) and cannot be linked to an account, so deleting your account does not remove them. We keep your other information while your account exists. When you delete your account it is removed immediately from our live systems.
10a. Emails
If you joined our waitlist, we use your email address only to send occasional updates about field. (for example, the launch). Every update email has an unsubscribe link, and we stop sending as soon as you use it. If you have an account, we send you the emails the account needs (sign-in confirmation, password reset, email change). We do not send news or marketing to account holders. We never sell or share these addresses.
10b. This website
The waitlist form on fieldperiod.com stores the email address you give it, with the time you joined, in our database (Supabase). The site also uses Vercel Web Analytics, which counts page views without cookies and without storing anything that identifies you. To limit abuse, the form also keeps a scrambled (hashed) version of your network address for up to two days. It cannot be turned back into the address, and it is never linked to the email you enter.
11. Your rights and the law
We aim to follow the data-protection law that applies to you. We operate from Singapore, so the Personal Data Protection Act applies: you may withdraw consent, and ask to access or correct your personal data, by writing to us at the address below. If you are in the EU or UK, you may also have rights of access, correction, deletion, portability and objection, and you may complain to your local data-protection authority.
12. Changes
If we change this policy in a way that matters, we will tell you in the app before it takes effect and update the date above.
13. Contact
field. is operated by an individual in Singapore. support@fieldperiod.com