Your cycle is yours.
Last updated: 6 November 2026
Two Tides is a cycle tracker for two. This policy explains what data the app collects, why, who helps us process it, and the rights you have. Cycle data is health data, and we treat it with that level of care.
Short version
- We never sell your data, show ads, or use tracking or analytics tools.
- Nothing is shared with your partner or bestie until you switch it on, one data type at a time.
- You can export all your data and delete your account in the app at any time.
- Your data is stored in the EU (Ireland).
Who we are
Two Tides is made by Ladari Labs OÜ, a company registered in Estonia. We are the data controller for your personal data. Contact us at support@ladarilabs.com.
What we collect
Your account
- Name and email address, from Sign in with Apple, Google Sign-In, or an email sign-in link. We never store a password.
- Pronouns, if you add them.
- When you gave consent to processing your health data, and which version of the consent you agreed to.
- Your notification settings, and whether you opted in to product emails (off by default).
Your cycle and health data
- Period start and end dates, flow, symptoms, mood, energy, libido, feelings, and notes you write.
- Your cycle profile: average cycle and period length, regularity, typical symptoms, contraception, medical conditions you choose to add, and an optional age range (used only to adjust typical cycle ranges).
- Your care preferences: how you like to be supported.
- Which person logged each entry.
Connections
- Who you're connected with, and which data types you share with each person.
- Managed profiles: you can track a cycle for someone else, but only after you confirm they agreed. That person can claim the profile later and take control of it.
Subscriptions
- If you subscribe, your purchase status and expiry date. Payments are handled by Apple. We never see your card details.
What we don't collect
No location, no contacts, no Apple Health data, no advertising ID, no analytics, and no crash-reporting tools.
Why we use it
| Purpose | Data | Legal basis (GDPR) |
|---|---|---|
| Running your account and the app | Account data | Contract (Art. 6(1)(b)) |
| Tracking and predicting your cycle | Cycle and health data | Your explicit consent (Art. 9(2)(a)) |
| Sharing with people you connect with | Only the data types you switch on | Your explicit consent (Art. 9(2)(a)) |
| AI assistant (premium) | See "AI assistant" below | Your explicit consent (Art. 9(2)(a)) |
| Subscriptions | Purchase status | Contract (Art. 6(1)(b)) |
| Product emails | Email address | Consent, only if you opt in (Art. 6(1)(a)) |
You can withdraw consent at any time by turning sharing off or deleting your account. Withdrawing doesn't affect processing that happened before.
Sharing with your partner or bestie
Sharing is opt-in for each data type: period dates, cycle phase, mood, energy, symptoms, libido, and notes. Everything starts switched off. You can pause or stop sharing at any time. Your medical conditions, age range, and full cycle profile are never shared.
AI assistant
Premium users can ask the in-app assistant questions. To answer, we send your messages to Anthropic's Claude model. With them we send a short summary: your name, your current phase and cycle day, your predicted next period, your average cycle length, whether you use hormonal contraception, recent mood and symptoms, and your care preferences. If someone shares data with you, we include only what they share. We don't store your conversations on our servers. Anthropic processes the request on our behalf and doesn't use it to train its models.
Who helps us run Two Tides
| Service | What for | Where |
|---|---|---|
| Supabase | Database, sign-in, sign-in emails, server functions | EU (Ireland) |
| Apple | Sign in with Apple, payments, home screen widgets | Worldwide |
| Google Sign-In, if you choose it | Worldwide | |
| RevenueCat | Managing subscriptions (receives an anonymous user ID and purchase data) | USA |
| Anthropic | AI assistant (premium only) | USA |
When data goes to the USA, it's protected by the EU-US Data Privacy Framework or the EU's Standard Contractual Clauses.
On your device
The app keeps your data on your phone so it works offline, and syncs it to our servers when you're signed in. Home screen widgets show your current phase, and your partner's if they share it. Reminders are scheduled on your phone. We don't collect a push notification token.
How long we keep it
We keep your data while you have an account. When you delete your account, we delete your account and all your cycle data, including managed profiles you created, from our servers. Entries you logged for someone else stay with them, without your name attached. Apple and RevenueCat keep purchase records as required for tax and accounting. To have your RevenueCat record removed too, email us.
Your rights
You have the right to access, correct, export, and delete your data, to restrict or object to processing, and to withdraw consent. In the app, go to Settings → Privacy to export or delete. For anything else, email support@ladarilabs.com.
You can also complain to a data protection authority, such as the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon, aki.ee), or the one where you live.
Age
Two Tides is for people aged 16 and over.
Security
Data is encrypted in transit and at rest. Access rules on our database make sure each person can only see their own data, plus what others choose to share with them.
Changes
If we change this policy in a way that matters, we'll tell you in the app before it takes effect.