Privacy Policy
Last updated: 2026-08-07
WeFertility is a private coordination tool that helps a small, invite-only group manage the logistics and costs of a fertility journey together. This policy explains what we collect, why, and how it's protected.
TL;DR
- We collect your account details and the tasks, costs, fertility-related notes, and files you choose to record.
- We do not sell or share your data, run ads, or use third-party analytics.
- Your data is stored in a Supabase Postgres database with row-level security; only people you've invited to your workspace can see it.
- You can initiate permanent account deletion inside the iOS app from Tools → Circle & settings → Account → Delete account.
What we collect
| Category | Examples | Why |
|---|---|---|
| Account | Email, full name, password (hashed). If you sign in with Apple or Google, the provider's email and identifier. | Sign in, identify you to your group |
| Workspace data | Categories, tasks, due dates, dependencies, assignees, FYI participants | Core app functionality |
| Financial data | Cost amounts, payment method (cash / card last 4 only), reimbursement amounts | Spending rollups and CSV export |
| Files and photos | PDFs, photos, scans, and Office files you attach to tasks (≤ 25 MB each) | Stored in a private Supabase Storage bucket; only your workspace can read them |
| Health-related content | Fertility, medical, medication, appointment, and wellness details you choose to put in tasks, notes, or files | Organize and coordinate your fertility journey |
| Device tokens | Apple Push Notification Service (APNs) tokens you grant when you accept push permission | Send task assignment + due-date reminder pushes |
| Onboarding answers | The optional questionnaire shown the first time you sign in (e.g. "who you are in this journey") | Personalization only; never used for permissions or sharing |
| Authentication | Session tokens, password-reset tokens | Keep you signed in across visits |
| Billing (admins only) | Subscription status and purchase identifiers. Payment details are handled by Apple and RevenueCat and are not stored by us. | Run the admin subscription that covers the whole workspace |
We do not collect:
- Payment card numbers (only the last 4 digits, voluntarily entered)
- Full financial account information
- Device identifiers for advertising
- Location data
- Contacts or microphone recordings
How we use it
Only to provide the app you're using:
- Show you your tasks, calendar, spending, and documents.
- Share data with the people you've explicitly invited to your workspace.
- Send transactional email (password reset, invite links) via Supabase.
- Send push notifications when someone assigns you a task or a due date approaches (you choose to enable this).
- Generate a private iCalendar (.ics) feed URL keyed by a rotating per-user token so you can subscribe to your tasks in Apple Calendar, Google Calendar, or Outlook. Rotating the token in Settings revokes the old URL.
- For admins on a paid plan: charge the recurring subscription that covers the whole workspace through Apple's in-app purchase system, administered with RevenueCat.
Apple Calendar two-way sync (optional)
If you opt in on iOS, the app uses Apple's EventKit to mirror your due-date tasks into a dedicated "WeFertility" calendar on your device. Edits you make in Apple Calendar (specifically the event date) sync back to WeFertility. This runs entirely on your device — no extra data leaves your phone to enable it.
Third-party processors
- Supabase — hosted Postgres database, authentication, storage, and Edge Functions for the entire backend.
- Lovable — application hosting (Cloudflare Workers under the hood).
- Apple Push Notification Service — relays push notifications to your iPhone, only after you've granted permission.
- Apple and RevenueCat — process and administer iOS subscriptions. Apple handles payment details; WeFertility receives subscription status and purchase identifiers needed to provide access.
- Resend (optional) — relays feedback messages from the in-app "Send feedback" form to the team's admin inbox.
- Apple / Google — if you sign in via Sign in with Apple or Google, the provider sees that you authenticated with us, and we receive an email + opaque identifier from them. No other profile data is exchanged.
Who can see your data
- You: anything assigned to you.
- Workspace admins and partners with "all tasks" access: everything in the same workspace.
- Lovable / Supabase (our hosting providers) for infrastructure operation only. See their privacy policies at lovable.dev/privacy and supabase.com/privacy.
- No one else. We don't sell, rent, share, or otherwise disclose your data.
Storage and security
- Data is stored in a managed Postgres database (Supabase) inside a single project tenant.
- Postgres Row Level Security restricts every row to the user(s) who should see it.
- Passwords are hashed using bcrypt before storage.
- Transport is TLS 1.2+.
Your rights
You can:
- Access the data you've entered. Visible inside the app.
- Edit or delete any task, project, or financial record from within the app.
- Delete your account from Tools → Circle & settings → Account → Delete account. Your sign-in and personal profile are permanently removed. If other members remain, shared circle records stay with the circle and transfer to another administrator; if you are the only member, the entire workspace is deleted.
For users in the EU/EEA, UK, or California: you have additional rights under GDPR / UK GDPR / CCPA including the right to portability, restriction, and lodging a complaint with your supervisory authority.
Children
WeFertility is intended for adults coordinating their own fertility journey. We do not knowingly collect data from anyone under 18.
Changes
We'll update this page when something changes. Material changes will be announced in-app.
Contact
Questions or privacy requests: support@wefertility.app