Privacy Policy

1. Introduction

App Branch, LLC ("App Branch," "we," "our," or "us") is a Delaware limited liability company. This Privacy Policy describes how we collect, use and protect information when you use our website (appbranch.co) and our mobile applications, including Astraea — PCOS & Period Tracker and Smart Scan X (collectively, the "Services").

Each app has its own data flows. Where the rules differ by app, this policy says so. Where an app publishes a more specific policy of its own (for example, the Astraea in-app privacy statement at pcoshealth.app/privacy), that policy controls for that app.

2. Information We Collect

2.1 Information you provide

• Contact details when you email us (name, email address, message body).
• Account profile data you choose to enter inside an app (for example, in Astraea: cycle length, symptoms, lifestyle preferences).
• Feedback, support requests and reviews you submit to us.

2.2 Information collected automatically

• Device information (model, operating system version, locale).
• App usage and diagnostic data (which screens are opened, feature interactions in aggregate).
• Crash reports and error logs.

2.3 Astraea-specific health data

Astraea processes health-related information you choose to log (menstrual cycle dates, symptoms, mood, photos of meals submitted to the Nutrition Scanner). This data is treated as sensitive personal information. By default Astraea uses anonymous authentication — no email is required — and your health log is encrypted in transit and at rest. We do not sell health data and do not share it with advertisers.

2.4 Smart Scan X documents

Documents you scan with Smart Scan X are stored on your device. If you choose to export to a third-party cloud storage provider (for example iCloud Drive or Google Drive), the document is transmitted to that provider under their own terms — App Branch does not retain a copy server-side.

3. How We Use Your Information

• To provide, maintain and improve the Services.
• To respond to support requests and other communications you send us.
• To diagnose crashes and stability issues.
• To analyze aggregate usage patterns to inform product decisions.
• To send transactional service messages (for example, important security or policy updates).
• To comply with legal obligations.

4. Service Providers (Sub-processors)

We rely on a small number of service providers to operate the Services — for example, cloud hosting, anonymous analytics and crash reporting. These providers process information only on our instructions and are bound by contractual confidentiality and security obligations. We do not authorize any of them to use your data for their own purposes.

5. Information Sharing

We do not sell, rent or trade your personal information. We share information only:

• With service providers as described in Section 4.
• When you direct us to (for example, exporting a Smart Scan X document to a cloud provider you've chosen).
• To comply with applicable law, valid legal process or enforceable government request.
• To protect the rights, property or safety of App Branch, our users or others.
• In connection with a merger, acquisition or sale of assets — in which case we will notify users before any personal information is transferred.

6. Data Security

We use industry-standard administrative, technical and physical safeguards to protect your information, including encryption in transit (TLS) and encryption at rest for sensitive fields. No method of transmission over the internet or electronic storage is 100% secure, and we cannot guarantee absolute security.

7. Data Retention

We keep personal information only as long as needed for the purposes described in this policy or to satisfy a legal obligation. You can delete your in-app data at any time from the app's settings; once deleted, we remove it from active systems and from backups within a reasonable rotation period.

8. Your Rights

Depending on where you live, you may have the following rights regarding your personal information:

• Access — request a copy of the personal information we hold about you.
• Correction — ask us to fix information that is inaccurate or incomplete.
• Deletion — ask us to delete your personal information.
• Portability — receive your information in a structured, machine-readable format.
• Objection & restriction — object to or restrict certain processing (GDPR/UK GDPR).
• Withdraw consent — where we rely on consent, you can withdraw it at any time.
• Right to lodge a complaint — with your local data protection authority.

California residents have additional rights under the CCPA/CPRA, including the right to know what categories of personal information we collect, the right to delete, the right to correct, and the right to opt out of the sale or sharing of personal information. App Branch does not sell or share personal information as those terms are defined under the CCPA/CPRA.

To exercise any of these rights, email us at support@appbranch.co. We will respond within the time required by applicable law (generally 30–45 days).

9. International Transfers

App Branch is based in the United States. If you access the Services from outside the U.S., your information may be processed in the U.S. or other countries. Where required, we use appropriate safeguards (such as standard contractual clauses) for cross-border transfers.

10. Children's Privacy

The Services are not directed to children under 13 in the United States, or under 16 in the European Economic Area, the United Kingdom and other jurisdictions where applicable law sets that higher age. We do not knowingly collect personal information from children below those ages. If you believe a child has provided us with personal information, please contact us and we will delete it.

11. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will revise the "Effective Date" above and, for material changes, provide additional notice (for example, an in-app notification) before the change takes effect.

12. Contact Us

If you have questions about this Privacy Policy, contact us at: