Privacy Policy

Introduction

At Alure ("we," "us," or "our"), we take your privacy seriously. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application and website (collectively, the "Service").

We understand that you're trusting us with sensitive health information. We're committed to protecting that trust and giving you control over your data.

Accountability

Alure has designated a Privacy Officer responsible for ensuring compliance with PIPEDA and other applicable privacy laws. You can contact our Privacy Officer at:

Information We Collect

Account Information

When you create an account, we collect:

• Email address
• Password (encrypted)
• Display name (optional)

Health Data

Information you choose to track within the app, including:

• Menstrual cycle information
• Symptoms and mood tracking
• Lab results and hormone levels
• Metabolic markers (weight, blood sugar, etc.)
• Notes and custom tags

Usage Information

We automatically collect:

• Device information (type, operating system)
• App usage statistics (anonymized)
• Error logs and crash reports

How We Use Your Information

We use your information to:

• Provide and maintain the Service
• Generate insights and visualizations from your health data
• Send you important updates about your account or the Service
• Improve and optimize the app experience
• Respond to your support requests
• Detect and prevent fraud or abuse

We do not: Sell your health data, share it with advertisers, or use it for marketing purposes.

How We Share Your Information

Your health data belongs to you. We never sell or rent your personal information. We only share data in these limited circumstances:

With Your Consent

When you explicitly choose to export and share your data (e.g., with your healthcare provider).

Service Providers

We work with trusted third-party services (like cloud hosting providers) who help us operate the Service. These providers are contractually obligated to protect your data and only use it for the purposes we specify.

Legal Requirements

We may disclose information if required by law, court order, or to protect our rights, safety, or the rights and safety of others.

Data Security

We implement industry-standard security measures to protect your data:

• End-to-end encryption for data in transit
• Encrypted storage of sensitive health information
• Regular security audits and updates
• Secure authentication and password protection

While we strive to protect your information, no method of transmission over the internet is 100% secure. We encourage you to use strong passwords and protect your account credentials.

Your Rights and Choices

You have the right to:

• Access: Request a copy of your personal data
• Correct: Update inaccurate or incomplete information
• Delete: Request deletion of your account and data
• Export: Download your data in a portable format
• Opt-out: Unsubscribe from non-essential communications
• Withdraw Consent: Withdraw your consent at any time

To exercise these rights, visit your account settings or contact us at [email protected].

Data Retention

We retain your account and health data for as long as your account is active. If you delete your account, we will permanently delete your personal information within 30 days, except where we're required by law to retain certain information.

Children's Privacy

The Service is not intended for children under 13. We do not knowingly collect personal information from children under 13. If you're a parent or guardian and believe your child has provided us with personal information, please contact us immediately.

International Users

Alure is based in Canada. If you're accessing the Service from outside Canada, your information may be transferred to, stored, and processed in Canada where our servers are located. By using the Service, you consent to this transfer.

Changes to This Policy

We may update this Privacy Policy from time to time. We'll notify you of significant changes by email or through the app. Your continued use of the Service after changes are posted constitutes acceptance of the updated policy.

Breach Notification

In the event of a data breach that poses a real risk of significant harm, we will:

• Notify affected individuals as soon as feasible
• Report to the Office of the Privacy Commissioner of Canada
• Keep records of all breaches for 24 months

Complaints

If you have any concerns about our privacy practices, please contact our Privacy Officer. If we are unable to resolve your concern, you may file a complaint with the Office of the Privacy Commissioner of Canada at:

Contact Us

If you have questions about this Privacy Policy or how we handle your data, please contact us: