Effective date: 24 September 2026 (replaces the 15 September 2026 version — changes: section 2 lists the newer things you can record — the private diary, the body map, "What helped?" answers, circle check-ins, meal plans and grocery lists; new section 2A explains the anonymous, counts-only aggregates behind "You're not alone" and "What helped?"; section 5 covers Circles and the causes we point to; section 4 confirms the diary is never sent to the AI)
Provider: Eira Health Pty Ltd (ACN 700 811 507) ("Eira", "we", "us"), a company registered in New South Wales, Australia
Contact: hello@eirawellness.app · https://eirawellness.app
Eira is a wellness and cycle-tracking app. Because the information you record in Eira is deeply personal, this policy is written to be read — plainly, without legal fog. It describes exactly what we collect, why, who can see it, and the control you keep.
This policy covers everyone who uses the Eira app or visits eirawellness.app. Eira Health Pty Ltd is the data controller. We handle personal information in accordance with the Australian Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs), and where they apply to you, the EU/UK GDPR and other regional privacy laws.
Account information. Your email address and sign-in credentials, managed by our authentication provider. If you sign in with Apple or Google, we receive the identifier and email your provider shares.
Health and wellness information you choose to record. This is sensitive information, and we treat it that way. It may include: your selected health tracks (e.g. menstrual cycle, PCOS, pregnancy, menopause); period dates and flow; daily check-ins — mood, energy level, hours slept, water intake, symptoms with intensity ratings, food and lifestyle tags, and any personal notes you write; intimacy and emergency contraception logs; fertility signs (cervical fluid, basal body temperature); medications and supplements you tick off; items you plan in the weekly planner and health appointments you enter; per-track health context you write (surgeries, medications, upcoming procedures, doctor's advice); food preferences and allergies; pregnancy due dates or postpartum dates; documents you upload (such as doctor letters or results); where it hurts on the body map, with an intensity; your answers to "What helped?" the morning after a rough day; the meals you plan and the grocery-list items you tick; and, if you use them, your circle check-in answers and your private diary pages.
Opening questionnaire answers. When you start, Eira asks a small set of questions chosen by why you're here — for example your usual cycle length and bleed days, contraception method, endometriosis diagnosis stage, how long you've been trying to conceive, birth type and feeding for postpartum, HRT use, birth year, preferred language, and the symptoms that affect you most. Every question can be skipped, answers exist solely to make Eira's guidance fit you, and you can view, change or remove any answer later in Settings.
Sharing settings. If you use Partner Support, we store the connections you create, the share codes, and exactly which tracks you have chosen to share with each person.
Technical basics. Device and session identifiers needed to operate the app and diagnose errors, and — if you allow notifications — a push notification token that lets us deliver them to your device. We do not currently run advertising or third-party marketing trackers in the app.
Crash reports and usage analytics — never your health data. To keep Eira working we use crash reporting (Sentry) and product analytics (PostHog), both configured to store data in the European Union. These are engineered so your health information structurally cannot enter them: analytics events carry only numbers and true/false flags (never free text, never symptom names, never dates you logged), crash reports are stripped of request data before sending, and neither receives your name or email — only a random identifier. What we learn is things like "the check-in screen crashed on iOS" or "the walkthrough was completed", never "what she logged".
What stays on your device. If you turn on App Lock, Face ID / fingerprint / passcode checks are performed entirely on your device by Apple or Google — your biometric data never reaches us and we could not receive it if we wanted to. If you add a planned day or an appointment to your phone's calendar, that event is written by your device into your own calendar; we do not read your calendar. Notification wording is deliberately generic — lock-screen messages never include your name, cycle phase, or symptoms.
We collect this information directly from you. We do not buy data about you, and we do not collect from data brokers.
Two features show what other Eira users logged: "You're not alone" (for example "6 in 10 women on the PCOS track logged fatigue this week") and the anonymous line under "What helped?" (for example "7 in 10 users who answered about cramps said a heat pack helped"). These are computed on our servers once a day from everyone's logs as counts of people. The rules are fixed in code: nothing is shown for a track or symptom until at least 20 people are behind it; a line is dropped if fewer than 5 people are behind it; every figure is rounded to "N in 10"; a person counts once however often they log; and no note, name, date or individual entry is ever part of it. There is no way to get from these figures back to a person, including you. Until enough people are logging, "You're not alone" shows published population figures with their sources instead.
Your diary is yours alone. Diary pages and the prompts you write are stored so you can read them back on your devices. They are never sent to the AI, never shown to a partner, a circle or anyone else, and never part of any aggregate. The same is true of the body map, "What helped?" answers and check-in notes except where this policy says otherwise (the aggregates above use counts only; the body map and "What helped?" counts appear in your own Insights and, if you generate one, your own Doctor summary).
We use your information only to run Eira for you: to show your cycle status and forecasts; to build your daily wellness plan; to compute patterns from your own logs; to generate AI reflections, insights, wellness plans, document summaries, and doctor-visit summaries you request; to power the sharing you explicitly configure; and to secure and improve the service.
Where the GDPR applies, our lawful bases are: performance of our contract with you (providing the app); your explicit consent for processing health data — given when you choose to record it, and withdrawable at any time by deleting the data or your account; and our legitimate interests in securing and improving the service. Where the Australian Privacy Principles apply, we collect sensitive information only with your consent and only for the functions described here.
Some features send your relevant data to our AI provider, Anthropic, to generate the output you requested (for example a daily plan, an insight narrative, or a plain-language summary of an uploaded document). What is sent is limited to what the feature needs. Under our arrangement with Anthropic, this content is processed to produce your output — it is not used to train AI models. Eira's AI is deliberately constrained: it never diagnoses and never gives advice about medications, dosing, surgery, or procedures. Pattern statements shown to you are computed from your own logs, not invented by the model. Your diary, your "What helped?" answers and your body-map ratings are never sent to the AI provider; the AI only receives the data the feature you tapped needs, as listed in the app's own description of each feature. Anything AI writes is general information, it can be wrong, and it never overrides advice from your doctor, midwife, dietitian, nutritionist, exercise professional, psychologist or pharmacist.
You. By default, only you.
People you choose, only what you choose. The only information that ever leaves your account for another person is information you recorded yourself and then chose to share. Partner Support shows a person you connect exactly the tracks you've shared with them — enforced on our servers, not just hidden in the interface. They see supportive guidance, never your raw daily logs unless a shared feature displays a specific element. You can change or revoke any person's access at any time, effective immediately, and revocation also clears AI-generated content that was based on the shared data.
Circles. A circle is a small private group (up to six people) you join with a code. Each member chooses what the circle sees of her day — phase, mood, symptoms, a daily note — and can turn each off at any time; reactions, chat messages and weekly check-in answers are visible to the circle's members only. Leaving a circle removes you from it immediately; blocking someone hides you from each other inside it.
Things you share yourself. "Cycle in review", the grocery list and the Doctor summary have Share or Copy buttons that hand text to your phone's own share sheet. What you send, and to whom, is entirely your choice and happens on your device; we do not see or keep a record of it.
Causes we point to. If Eira features a charity, tapping "Donate on their website" opens that charity's own site in your browser. We do not process donations, take any part of them, or tell the charity anything about you.
Our service providers (processors). We use a small set of infrastructure providers to run Eira, each bound to process data only on our instructions: Convex (database and backend), Clerk (authentication), Anthropic (AI processing, as described above), Expo (app builds and push notification delivery — Expo handles the notification text and your device token, which is why notification wording is deliberately generic and never includes health details), Sentry (crash reporting, European Union), PostHog (product analytics, European Union), and Cloudflare (website hosting, networking, and email routing). If we add providers, we will update this policy before they handle your data.
No one else. We do not sell personal information. We do not share it for advertising. We do not give it to data brokers. We would disclose information only if validly required by law, and where lawful we will tell you before we do.
Your data is stored with our infrastructure providers, whose servers are located in the United States; by using Eira you consent to this cross-border handling, which we protect through the contractual and technical safeguards described here (and, where GDPR applies, recognised transfer mechanisms). Data is encrypted in transit. Access on your device is protected by your authenticated session, stored in your device's secure storage. Internally, access to production data is restricted to what is necessary to operate the service.
No system is perfectly secure. If a data breach occurs that is likely to result in serious harm, we will notify you and the Office of the Australian Information Commissioner (OAIC) as required by the Notifiable Data Breaches scheme, and other regulators where required.
We keep your information while your account is active. Deleting your account genuinely deletes it: the in-app "Delete account" action wipes your records from our systems and instructs our processors to do the same, completed within 30 days, except for minimal records we are legally required to keep. You can also delete individual entries (logs, documents, connections) at any time and they are removed immediately.
You can access and correct your data directly in the app, export your doctor summary, control every share, and delete anything — or everything — whenever you choose. Depending on where you live, you may also have legal rights to access, correction, portability, restriction, objection, or deletion (under the APPs, GDPR/UK GDPR, CCPA/CPRA and similar laws). To exercise any of these, email hello@eirawellness.app — we respond to all requests, normally within 30 days.
If you are unsatisfied with our handling of a complaint, you can contact the OAIC (oaic.gov.au) or your local data protection authority.
Period and cycle information in an app is generally not covered by HIPAA, which is exactly why laws like Washington's My Health My Data Act (MHMDA), Nevada's SB 370 and Connecticut's health-data provisions exist. This section is our consumer health data privacy notice for those laws, and we apply its substance to everyone, not just residents of those states.
What we collect and why is exactly as described in sections 2–4 — nothing further is collected about you, and consent is how data enters Eira in the first place: everything sensitive exists only because you chose to record it, and every questionnaire answer is skippable.
We do not sell consumer health data, and never will. No sale, no sharing for advertising, no data brokers, no processing for targeted advertising. Because there is no sale, no authorization to sell is ever sought.
We do not use advertising trackers, and we do not collect precise location — Eira has no location permission at all, so we cannot track visits to any healthcare facility.
Your rights: you may confirm whether we collect or share your health data, access it (including the list of processors above — that list is complete), withdraw any consent, and have your data deleted. Deletion is available directly in the app (Account → Delete account) and takes effect through us and our processors as described in section 7; you can also email hello@eirawellness.app. We will not discriminate against you for exercising any right. If we deny a request, you may appeal by replying to our response, and we will answer the appeal within the timeframe your state's law sets.
Eira is not intended for children under 16, and we do not knowingly collect data from them. If you believe a child under 16 has created an account, contact us and we will delete it.
Eira is a wellness and tracking app. It is not a medical device. Nothing in it is medical, nursing, midwifery, dietetic, nutrition, exercise or psychological advice, diagnosis or treatment, and it is not contraception. Cycle estimates and fertile-window figures are informational estimates, not a basis for avoiding or achieving pregnancy. Food and movement ideas are general ideas for healthy adults.
Your health professionals come first. Nothing in Eira overrides advice from your doctor, midwife, dietitian, nutritionist, exercise professional, psychologist or pharmacist; if Eira differs from them, follow them and tell them what you saw. Eira's Doctor summary exists so you can take your own records to a professional — it helps the appointment, it does not replace it. In an emergency call 000. The full notice is in the app under Account → "Eira and your health professionals", and in our Terms of Service, section 1A.
If we change this policy, we will post the updated version here with a new effective date, and for material changes we will notify you in the app before they take effect. We will never retroactively weaken the protections on data you have already recorded without your consent.
Questions, requests, or complaints: hello@eirawellness.app · Eira Health Pty Ltd (ACN 700 811 507), New South Wales, Australia.