In short: Your period records, symptoms and notes never leave your phone. We show no ads, sell no data and use no third-party tracking. Deleting your account erases everything.
Data that stays on your device
The following is stored only on your phone, encrypted with iOS complete file protection (NSFileProtectionComplete). It is never sent to our servers:
- Period start and end dates, flow intensity
- Symptoms, mood entries, discharge type
- Intercourse and contraception records
- Diary notes
- Water, sleep, weight and basal body temperature
- AI chat history
Data processed on the server
| Data | Why | Source |
|---|---|---|
| Name, email address, profile image | To create your account | From Google or Apple when you sign in |
| Username | Your forum identity and uniqueness check | Chosen by you |
| Forum posts, polls, answers, likes | To run the forum | Directly from you |
| AI question and current cycle summary | To generate the answer | Directly from you — not stored, only relayed |
| Daily message counter | Abuse-prevention quota | Generated by the app |
| Your app settings: notification preferences, theme, device lock, forum preferences, favourite and read article lists, display name and avatar | So your settings are waiting for you when you sign in on another device | Generated by the app, tied to your account |
| Device notification token | So we can send you notifications | Apple Push Notification service |
We do not collect location, contacts, photos, Apple Health data or advertising identifiers. There is no third-party advertising or analytics tracking in the app.
Where your data is stored
Account and forum data are stored on Google Firebase within
the European Union (multi-region eur3). Our server
functions run in Belgium (europe-west1).
The AI assistant
When you ask the assistant a question, the question and your current cycle summary (cycle day, phase, the past week's symptom and mood labels) are sent to our server, which relays them to Anthropic (Claude) to generate the answer.
- Your name, email and account ID are not included.
- Conversations are not stored on our servers; they stay on your device.
- The AI provider's API key is held in Google Secret Manager on the server, never inside the app.
- Anthropic is based in the United States, so this is a transfer outside the EU. Using the assistant constitutes your explicit consent to that transfer.
Processors we work with
| Service | Purpose | Location |
|---|---|---|
| Google Firebase (Authentication, Firestore, Cloud Functions) | Account, username, forum, server functions | European Union |
| Apple | Sign in with Apple | Subject to Apple's privacy policy |
| Google Sign-In | Subject to Google's privacy policy | |
| Anthropic | AI answers | United States |
Notifications
Period, ovulation and daily reminders are computed on your device and scheduled locally by iOS. Their content never reaches our servers.
Exercising your rights
- Access and portability: Settings → Privacy & Security → “Export my data” gives you everything as JSON.
- Deletion: Settings → About → “Delete my account”. Details: account deletion page.
- Rectification and objection: destek@gepgo.com
We answer GDPR and KVKK requests within 30 days.
Retention
- Account and username: while your account is open
- Forum posts: until you delete them or close your account
- AI messages: not stored
- Quota counters: 30 days
- On-device data: under your control until you delete the app
Children
Gepu is not directed at children under 13 and we do not knowingly collect their data. We recommend that users aged 13-18 use the app with a guardian's knowledge.
Changes
Material changes to this policy are announced inside the app. Last updated: 13 August 2026.