June Privacy Policy

Effective date: 20 August 2026

What June stores, and where

Everything you enter — periods, symptoms, notes, your profile answers — is stored in a local database on your device. That local copy is the app's source of truth, and it is not stored in iCloud by June.

If you sign in (offered only after purchase, with Sign in with Apple), your cycle history — periods, symptoms, settings, and your guided-chat sessions — is also backed up to June's servers, tied to your account, so signing in with the same Apple ID on a new phone restores it, along with your subscription. The backup is stored on Google Cloud infrastructure (EU/US), encrypted at rest. Backup is on by default for signed-in users and can be turned off in Settings. If you never sign in, nothing you enter is uploaded anywhere.

Deleting the app deletes the data on your phone. In the app, at any time and without contacting anyone, you can also export all of it (Settings → Export my data), delete the server backup (Settings → Delete server copy), erase everything on your phone and our servers (Settings → Delete everything), or delete your whole account (Settings → Delete my account), which removes your account, your backup, your photo, and your sign-in from our servers.

What leaves your device

1. Purchase processing. Subscriptions are handled entirely by Apple through the App Store. We receive Apple's standard transaction information (which product was bought, when). We never see your payment details.
2. Usage analytics. June records which onboarding screens were viewed and completed, and purchase events — screen identifiers and timings only. Analytics events never contain your answers, your cycle data, or any information about your body. This is enforced in the app's code, not just by policy.
3. Ad measurement. June advertises on Meta (Facebook and Instagram), and the app includes Meta's measurement SDK so we can tell which ads bring people to June. When you subscribe, Meta receives: the fact that a subscription was purchased, its price and currency, an anonymous identifier for your app install, your device model and settings (operating system, language, time zone, screen size), your IP address, your country (from your device's region setting), and — if you gave us an email address or a name — scrambled (hashed) versions of them. If you allow tracking when iOS asks, your device's advertising identifier is included too; if you decline, it is not.

   Meta never receives anything about your cycle, your symptoms, your body, or how you use the app. Not the data, and not in the names of the events either. The app is built so that only two events — "a subscription was purchased" and "a discounted subscription was purchased" — can reach Meta at all, and every outgoing value is checked against a list of health terms before it is sent. This is enforced in code, not by policy.

   Meta uses this to measure and target advertising, including showing ads to people similar to our subscribers. You can limit this in iOS Settings → Privacy & Security → Tracking, and in your Facebook and Instagram ad settings.

   We also use Apple's SKAdNetwork and Aggregated Event Measurement, which report installs and purchases in aggregate without identifying you.

   If you live in Washington State, sharing this information with Meta requires your separate consent under the My Health My Data Act. June asks for it separately, and you can withdraw it at any time in Settings.

4. Ask June messages. Ask June is the one feature where health-related text leaves your device — it cannot work otherwise. When you send a message, that message and a short summary of your current cycle context (for example your cycle day and phase) are sent to be processed, and the reply comes back to your phone. This is transient: the service that handles it stores nothing, our processing provider is called with retention switched off, and no transcript is kept on any server. Your conversations are stored only on your device. The single thing we do write is a per-day message counter tied to an anonymous identifier, used to prevent abuse — it contains no health data and nothing that identifies you.
5. Backup — only if you sign in. For signed-in users, your cycle history (periods, symptoms, settings, and guided-chat sessions) is backed up to our servers as described above: tied to your account, stored on Google Cloud infrastructure (EU/US), encrypted at rest. It exists for one purpose — restoring your data when you sign in on a new phone. It is never sold, never shared with third parties, and never used for advertising or analytics. You can turn backup off in Settings, and delete the server copy, everything, or your whole account in-app at any time.

What June never does

• No health data in analytics, advertising, or attribution of any kind. Nothing about your cycle, your symptoms, or your body ever reaches an advertising or analytics company — this is the promise the whole app is built around, and it is enforced in code.
• No selling or licensing of your personal data. We do share the purchase and device information described in section 3 above with Meta for ad measurement; under some state laws that sharing is itself defined as a "sale", so we say plainly that it happens rather than hiding behind the word.
• No reading of Apple Health / HealthKit. June does not request access to it.
• No location tracking, no contact list access, no microphone or camera access.
• Notifications are generated on your device from your local data.

Your rights

You exercise your rights directly, in the app, without asking us: read everything via Export, correct anything by editing it, and erase everything via Delete — including the server side. Nothing requires a request to us, but if you'd rather ask, we'll do it for you at the address below.

Questions: [email protected]

Data deletion

To delete all June data: open June → Settings → Delete everything — this erases your data from your phone and from your server backup. Then delete the app. To remove just the backup, use Settings → Delete server copy; to remove your account entirely (account, backup, photo, and sign-in), use Settings → Delete my account. To ask us to remove anything connected to a purchase (the transaction records described in section 3), email [email protected] from any address and we will confirm within 30 days.

Health disclaimer

June provides informational forecasts based on the dates you log. It is not a medical device, does not diagnose any condition, and must not be used for contraception.

Changes

We will post any changes to this policy at this URL with a new effective date. Material changes will be announced in the app.