Privacy Policy

• We collect what you enter so SwyftHer can show your record, count patterns and create summaries.
• No ads. No third-party analytics. We do not sell, rent or trade your information.
• Our staff console shows account details only. It never shows your health records.
• You can download everything or permanently delete your account at any time.

This policy covers the SwyftHer website, web app and mobile app. SwyftHer is for adults 18 and over in Canada. We handle personal information in line with Canada’s Personal Information Protection and Electronic Documents Act (PIPEDA) and its fair information principles. Depending on where you live, a provincial privacy law may also apply.

For questions about privacy or this policy, use the contact form.

Account details. Your email address, display name, password (stored only as a one-way hash), province or territory if you choose to give it, language, time zone (taken from your browser or device), whether you want email reminders, your plan, the date you confirmed you are 18 or older, when you last signed in, and whether and when you agreed to the Ask my health consent text.

Health records you enter.

• Daily logs: bleeding, pain entries (body area, intensity, duration and impact), symptoms and their severity, mood, energy, sleep and notes.
• Medications: names, doses, types, schedules, and start and stop dates.
• Questions you want to ask, and the answers you record.
• Appointments: date, clinician name and type, reason and notes.
• Summaries you create, and any share link you make for one.
• Care plans: what the clinician said, follow-up dates and the steps you track.

Apple Health imports. If you upload an Apple Health export, we read the file once and save only the supported records (such as bleeding, sleep and cycle symptoms) to your logs. We do not keep the file.

Messages you send us. When you use the contact form we keep your email address if you give it, your subject and your message. If you are signed in, the message is linked to your account.

Billing. Only if you subscribe to Premium. Stripe collects your payment details on its own page. We keep your subscription status, billing interval, renewal date and a Stripe customer reference. We never see your full card number.

Waitlist. If you joined the SwyftHer waitlist, we keep your email address and, if you chose to give them, the condition you selected and whether you were open to an interview.

Security records. Data exports, account deletions and every change made in the staff console are written to an audit log with the time and the IP address of the request. Audit logs never contain health data.

On the web, SwyftHer uses one cookie to keep you signed in. It is an httpOnly cookie, which scripts on the page cannot read. We do not use advertising or analytics cookies, and no outside tracking or analytics services run on this website.

The website also stores a few small settings in your browser, such as which homepage headline you see and whether you closed a notice. They stay in your browser.

• To run SwyftHer for you: store your records, show your history, count patterns, create summaries and compare the weeks before and after a visit.
• To send account emails, such as a welcome email, password resets and changes, account deletion, and reminders if you turn them on.
• To reply to messages you send us.
• To process Premium payments, if you subscribe.
• To keep SwyftHer secure, for example with audit logs and limits on repeated requests.
• To show crisis resources when a note you save, or a question you ask, matches a crisis phrase. This is a plain text match on our server. No one is notified.

We do not use your health records for advertising, and we do not use them to train AI models. Emails from SwyftHer never contain health information: no symptoms, pain, cycle data, medication names, appointment reasons, clinician names or care plan steps.

• We do not show ads.
• We do not run third-party analytics or tracking.
• We do not sell, rent or trade your personal information or health records.
• We do not give your records to employers, insurers or data brokers.
• We do not hand over member data on informal requests. See how we respond to legal requests.

A few outside services process information for us. Each receives only what it needs for its job:

• Resend sends account emails. It receives your email address and the email itself. Emails never contain health details.
• Stripe handles payment, only if you subscribe to Premium. It receives your email address and the payment details you enter on its page. It never receives your health records.
• Anthropic writes Ask my health answers, only if you turn that feature on. It receives your question and a summary of counts from your logs (no notes and no day-by-day record), plus your active medications, open questions and open care plan steps. SwyftHer does not store your questions or the answers.

We also use hosting and database providers to run SwyftHer’s servers. They store information on our behalf and may not use it for their own purposes. Some providers may process information outside Canada, including in the United States, where it may be subject to the laws of that country.

• Share links you create. On Premium you can create a link to a summary. Anyone with the link can see that summary until it expires or you revoke it. Links expire after a set number of days, and you can revoke one at any time.
• Legal requests. We disclose member data only when valid legal process requires it, and we narrow requests to what the law requires. We tell you first unless the law prohibits it. Read the law enforcement requests page and the transparency report.

The SwyftHer staff console shows account details only, such as your email, display name, plan, account status, time zone, reminder choice and billing status. It does not show logs, symptoms, pain entries, medications, questions, appointments, summaries or care plans. Every change made in the console is written to an audit log.

• Your records stay in your account until you delete them or delete your account.
• Deleting your account permanently removes your account and every record in it, including messages you sent us while signed in. It cannot be undone.
• Audit log entries, which never contain health data, are kept to protect the security of the service.

• See and copy your data. Download every record as one file from the privacy centre in your account.
• Correct it. Edit or delete any entry in the app. To change the email on your account, contact us.
• Delete it. Delete your account at any time from the privacy centre.
• Withdraw consent. Turn off Ask my health or email reminders in Settings at any time.
• Ask or complain. use the contact form. You can also contact the Office of the Privacy Commissioner of Canada.

Passwords are stored only as one-way hashes. Your web session is kept in an httpOnly cookie. Changing your password signs out your other sessions, and you can sign out of every device at once. Staff tools are limited to account details, and staff actions are logged.

No system is perfectly secure. If a breach of your information creates a real risk of significant harm, we will tell you and report it to the Privacy Commissioner of Canada, as PIPEDA requires.

SwyftHer is not for anyone under 18. If we learn that an account belongs to someone under 18, we will close it and delete its records.

When we update this policy, we post the new version here with a new “Last updated” date. If a change affects how we use your information in a significant way, we will tell you by email or in the app before it takes effect.