Femometer Privacy Policy

1. Data Usage

1.1 If you are a Femometer user without an account created

Your personal information and menstrual cycle tracking data will only be stored on your device, to which Femometer has no access. However, Femometer cannot guarantee the security of your data storage. In case of data loss due to the loss or replacement of your mobile phone, or any other reason, Femometer cannot provide you with data recovery services.

In addition, if you don’t have an account created, Femometer will only receive data provided by your device while using Femometer, such as your IP address, type of operating system (Android or iOS), device type and model, network provider, etc. Such information helps us identify application failures so that we can solve problems for you. It also helps us continuously optimize Femometer the application.

However, if you are using a third-party service (such as iCloud) for the backup, you may have transferred all your personal data stored on your device onto this third party. If this is the case for you, please read the privacy policy of this third-party service carefully to ensure the security of your personal data.

1.2 If you are a Femometer user with an account created

We will collect and store the following data you have entered:

•Personal information: including your nickname, age and profile picture. You can choose not to provide such data.

•Cycle data:the health data you have entered, such as your cycle time, length of menstruation, bleeding and other log items supported by the application.

Since you have created a Femometer account, Femometer will help store the data you have locally entered on a cloud server. You can log in to your account on any device and synchronize your data. Femometer will also process such data in order to provide intelligent analysis, notifications and reminders sending, as well as other services.

Femometer may also use your menstrual cycle tracking data and create anonymous information for academic and clinical research purpose. However, we guarantee that we will notify you before such research starts and we will not use your data without your consent and authorization. We also guarantee that the data will not be associated with you or make you personally identifiable in any way possible.

You may revoke your consent at any time and ask Femometer to delete your account. Once your account is deleted, all your data will be destroyed at the same time.

Femometer will not share your personal data with any third-party service providers, unless when it needs to do so to provide you with the features you request, such as sharing data with Apple Health Center.

1.3 Others

When you send a message to our service team or contact us by any means, we will keep a record of our communication and the information you’ve submitted (including your email address), in order for us to respond to your enquiry and provide assistance.

In addition, our application has the feature of log uploading. The upload needs to be initiated by you. The uploaded logs help us solve the program problems for you remotely. Femometer will not trigger this feature by itself.

2. Data Security

We will adopt various security measures to avoid the abuse, alteration or loss of personal data within our reach, as well as follow the best practices of the industry and open principle that are known by the users when transferring or storing your data. While we cannot eradicate the abuse, loss and alteration of information, we will reasonably prevent such problems from occurring.

2.1 How we transfer and store personal data

In the Femometer application, your password will be stored using the one-way hash encryption method. We will not be able to decrypt it. All your data will be encrypted using the HTTPS before being transferred between your device and the Femometer server. Your profile picture, test strips, examination reports and other file data will be stored securely in our file storage service. Other data you’ve logged will be stored securely in our structured storage service. Such data can only be accessed by your logging in to your Femometer account.

2.2 Femometer’s safety lock feature

Femometer allows users to enable the password lock feature. Once enabled, a unique PIN or TouchID (iOS) will be activated, so that:

•it is ensured that only you can obtain your data via your mobile phone;

•after your phone is lost or stolen, the program will automatically log you out of your account if the number of unsuccessful attempts made exceeds the allowed incorrect entries.

3. The EU General Data Protection Regulation (GDPR)

We will comply with the laws and regulations stipulated by the GDPR. For users in the EU, we will inform them the relevant matters at the most prominent position in the Femometer application when they log on for the first time and ask if they authorize Femometer to use their data in order to provide them with services. Femometer will only collect the relevant data of the users and provide the relevant services after obtaining the authorization and consent from the users.

4. Third-Party Applications

4.1 Apple Health

Femometer will not exchange any personal data of yours (including read and write) with Apple Health without your authorization. You may cancel the authorization for Apple Health to read or write at any time. You can adjust the read or write access to your data between Femometer and Apple Health in the Settings of Apple Health.

4.2 Google Fit

Femometer will not exchange any personal data of yours (including read and write) with Google Fit without your authorization. You may cancel the authorization for Google Fit to read or write at any time. You can adjust the read or write access between Femometer and Google Fit in the Settings of Google Fit.

4.3 Sensors Data

Femometer uses the data statistics and analysis services provided by Sensors Data. Such services can help us understand how users interact with our application and how to optimize the user experience. Sensors Data uses your identifier for advertising (Apple’s IDFA or Google Play’s ID), as well as modified IP address of your mobile device and modified address of your MAC for data statistics, which guarantees that the data will not be associated with you or make you personally identifiable in any way possible. By using our services, you expressly agree to the use and processing of the said collected data.

4.4 Amazon S3 File Data Storage

Femometer uses the file storage services provided by Amazon S3. Such services are used to store the profile pictures, test strip photos, examination report photos and other file data uploaded by users. Users can only access the user data stored on Amazon S3 by logging in to the Femometer application and applying for the access tokens to our application server. All data stored on Amazon S3 are encrypted using HTTPS while being transferred or accessed.

4.5 Amazon EC2  Structured Data Storage

Femometer uses the structured storage services provided by Amazon EC2. Such services are used to store all the non-file information users have logged in the application, such as personal information and health data. Users can only access the user data stored on Amazon EC2 by logging in to the Femometer application and calling the API of our application server. All user information access APIs have strict authentication and access control. All data stored on Amazon EC2 are encrypted using HTTPS while being transferred or accessed.

5. Emails

Femometer will use the contact details in your personal information and send you text messages or emails when necessary. Content generally includes operational health knowledge or notifications pushed, or some promotional information that may be of interest to you.

In order to provide such services, Femometer may forward your email address and other data to third-party providers for them to send the emails or text messages. Such service providers include Google, which may process your email address and send you messages via email, and Yunpian, which may process your mobile number and send you text messages.

The privacy policies for these services can be found on the websites of their companies. They both comply with the general privacy policies and the privacy laws and regulations where they provide the relevant services.

6. About

BONGMI LIMITED reserves the right to revise this Privacy Policy at any time. When, among other things, the relevant laws and regulations, our data collection, use practice and service features change, we will also make the corresponding adjustment. When we believe that there are major revisions, we will notify you via the application, website or email.