MORA — Privacy Policy

Last updated: September 30, 2026

MORA is a period, fertility and pregnancy tracker. What you log about your body is personal, so this policy says plainly what MORA stores, where, who can see it, and how to delete it.

The short version: MORA has no ads, no analytics and no tracking. We never sell or share your data for marketing. Your diary is stored in your account so you can restore it and, if you choose, share it with a partner. Data from Apple Health never leaves your phone.

1. Your account

You sign in with Apple. We receive a user ID and an email address. If you choose "Hide My Email", this is an Apple relay address. We also receive your name if you choose to share it. The account is used only to keep your data safe between devices and to connect you with a partner. Sign-in runs on Google Firebase Authentication.

2. What MORA stores in your account

Your account lives in Google Firebase (Cloud Firestore). It holds:

• Your calendar diary: period days and flow, symptoms, mood, notes and intimacy entries.
• Pregnancy mode: due date and pregnancy status, if you turn it on.
• Partner links: invite codes and which partner or trusted person is connected.
• A notification token, so reminders and partner notifications can reach your phone.
• A recovery copy. If you clear your calendar, the previous version is kept in one recovery slot so you can undo the deletion. It is removed when you delete your account.

Some things stay only on your phone and never reach our servers: app settings, the app lock code, your own questions for the doctor, pregnancy tools (weight log, kick counter, contraction timer), postpartum mood checks, and everything read from Apple Health.

Access to your account data is limited to your own signed-in account and to the people you connect (see section 5).

3. Apple Health

Connecting Apple Health is optional. If you allow it:

• MORA writes your period days (menstrual flow) to Apple Health.
• MORA reads your sleep, to show sleep next to your cycle.

Data read from Apple Health is used only on your phone. It is never uploaded to our servers or sent to the AI assistant. It is never used for advertising and never shared with anyone. You can turn access off at any time in the Health app → Sharing → Apps → MORA.

4. The AI assistant

When you ask the assistant a question, MORA sends it to the DeepSeek AI model through our own server (a Cloudflare Worker). The request contains:

• your question and the recent conversation;
• a short summary of your last 30 logged days (dates, period days, symptoms and how many intimacy entries);
• your pregnancy week, if pregnancy mode is on.

The request does not include your name, email or account ID. Our server passes the request on and does not store it. DeepSeek processes it to generate the answer under its own privacy policy, and its servers may be located outside your country, including in China. If you do not want this, simply don't use the assistant. The rest of MORA works without it.

5. Partner and trusted person

Sharing happens only if you create an invite code and the other person enters it.

• A partner sees your calendar, cycle phases and forecasts. They never see your mood or notes.
• A trusted person sees the same, minus intimacy entries.

Either of you can disconnect at any time in Settings. Access stops immediately.

6. Notifications

Reminders and partner notifications are delivered through the Expo push service and Apple Push Notification service. They carry only the notification text.

7. What we do not do

• No advertising, and no advertising or analytics SDKs.
• No tracking across other apps or websites.
• No selling, renting or sharing of your data with data brokers or marketers.

8. Deleting your data

• Settings → Delete account deletes your account and your data stored in it, including the recovery copy, and clears the diary on your phone.
• Deleting the app removes everything stored only on the phone.
• Data already written to Apple Health stays there until you delete it in the Health app.

9. Security

Data travels over encrypted connections (HTTPS). Firestore security rules allow each account to read only its own data and data shared with it through a partner link. You can also lock MORA with a code or Face ID.

10. Children

MORA is not intended for children under 13 and we do not knowingly collect their data.

11. Not medical advice

MORA's predictions, fertile days and insights are estimates based on what you log. MORA is not a medical device, does not diagnose, and must not be used as contraception. Always consult a doctor about your health.

12. Changes and contact

If this policy changes, we will update this page and the date at the top.

Questions or requests: nemibro1992@gmail.com