Sage

Effective: September 7, 2026 · Last updated: October 1, 2026

This Privacy Policy explains how Sage collects, uses, and shares information. Sage is a menopause symptom tracker available on the App Store (iPhone) and Google Play (Android).

Sage collects health information. Symptom check-ins, menopause stage, and — only if you connect it — sleep and heart-rate data are health data. We treat them as sensitive personal information and never sell them or use them for advertising.

1. Information We Collect

1.1 Health information you enter

• Symptom check-ins — which of the tracked symptoms you log and their severity. The catalog covers vasomotor (hot flashes, night sweats), sleep, mood (including anxiety and depressed mood), cognitive, energy, physical, sexual (libido, vaginal dryness), cardiovascular, skin, menstrual (irregular periods, heavy bleeding, spotting), urinary, neurological, sensory, and digestive symptoms.
• Menopause stage (perimenopause, menopause, postmenopause) and the symptom set you choose to track.
• Sleep quality rating (1–5) and lifestyle tags you choose for a check-in (caffeine, alcohol, exercise, stress, travel).

1.2 Health Connect / HealthKit (optional, read-only)

• On Android, if you grant permission, Sage reads sleep sessions and heart rate from Health Connect. On iPhone the equivalent source is HealthKit.
• Sage only reads this data. It never writes to Health Connect or HealthKit.
• Values read this way (daily sleep hours and average heart rate) are stored with your account so they can be shown alongside your check-ins and used for your AI pattern insights.
• This is entirely optional. Sage works without it, and you can revoke the permission at any time in Health Connect (Android) or Settings › Health (iPhone). Revoking stops further reads; to remove what was already stored, use the deletion route in section 7.
• Health Connect and HealthKit data is never sold, never used for advertising, and never used to train AI models. It is shared with one service provider only to provide a feature you request: when an AI pattern insight is generated, a 90-day average of your sleep hours and heart rate (never individual samples, and no name, email or account identifier) is included in the aggregated statistics sent to Anthropic, which processes it on our behalf solely to write that insight (see section 4).

1.3 Account and purchase

• Account — no sign-in is required. When you first save your setup, Sage creates an anonymous guest account on our server (Supabase): a random identifier with no email or name. Your device keeps the sign-in key for it, so your records stay with that guest account unless you delete them. If you choose to connect an account later, we also store your email address (email sign-in) or an opaque Google account identifier (Sign in with Google); on iPhone, optionally an Apple ID identifier.
• Abuse prevention — to stop the free insight being claimed repeatedly with new guest accounts, we store a salted one-way hash of your IP address (IPv6 is grouped by network prefix) with a daily count of free insight requests. The IP address itself is never stored.
• Subscription state via RevenueCat, linked to your pseudonymous Sage account identifier (the same random identifier, never your name or email). We never receive your payment or card details; the store handles the transaction.

1.4 Not collected

• No camera or photo access, no microphone, no location, no contacts
• No advertising identifiers, no ad networks, no third-party analytics SDKs
• No browsing history

2. How We Use Information

• Show your check-ins, history, and trends back to you
• Generate pattern insights that relate your symptoms to your own logged data (a paid feature)
• Process and restore subscription purchases

We do not use your health information for advertising, profiling unrelated to the app, or any purpose you have not asked for.

3. Automated Analysis

Pattern insights are generated from data already in your own account. Your health information is not used to train third-party models.

4. Third-Party Services

These are service providers processing data on our behalf under contract. We do not sell your data and we do not share health data for advertising or marketing.

5. Security

• TLS in transit, encryption at rest
• Row-level security so your rows are readable only by your account

6. Retention

Your data is retained while your account is active. When you delete your Sage data, your check-ins, menopause stage, sleep/heart-rate values, insights and profile are removed immediately. Your sign-in record is removed too, unless the same login is still used by another OOTSSU app — in that case only the Sage data is removed. A small AI usage record (dates and counts tied to the random account identifier, no health data) is kept so the free-insight limit cannot be reset by deleting and re-creating data.

7. Your Rights and Deleting Your Data

You can access, correct, or delete your information in the app, and request a copy of it by email. Delete individual check-ins in the app at any time. To delete all of your Sage data, open Sage → Me → Delete My Data (guest) or Delete Account (connected account); deletion happens immediately and the app continues with a new, empty guest account. If you cannot open the app, email ootssu@ootssu.com from the address on the account and say you want your Sage data deleted; we confirm when it is done.

8. Children's Privacy

Sage is not directed to children. We do not knowingly collect data from anyone under 16.

9. International Transfers

Data may be processed in the United States via Supabase and RevenueCat.

10. Cookies and Tracking

No cookies. No advertising identifiers. Sage does not track you across other apps or websites.

11. Changes

Material changes are announced by in-app notice or email at least 7 days before taking effect.

12. Contact

Email: ootssu@ootssu.com