1. Who is responsible
Thomas Roth
Hitzendorf 9
8151 Hitzendorf
Austria
Email: support@tami-cycle.com
2. Privacy in the app
No Tami account is required. You do not need to provide us with your name, email address, or an account password to use the app.
Tami does not operate cloud storage for your cycle history. The app includes no advertising, analytics trackers, or third-party crash-reporting services.
We do not sell personal data or share cycle history with advertisers or data brokers.
Website hosting, app-store services, exported backups, and support email involve separate processing, explained below.
3. Information stored on your device
Tami stores information locally to provide its features, including:
- Period start and end dates, flow, and spotting.
- Optional symptom and intimacy entries.
- Cycle and period-length settings, averages, and estimates.
- Calendar information, history, and summaries derived from your records.
- Reminder preferences and scheduling information.
- Privacy Lock preferences and other app settings.
- Onboarding and free-access status.
- Purchase and subscription information needed to manage access.
- Terms acceptance and separate consent records, including wording versions and timestamps.
- Limited local diagnostic or action-history records used for app reliability and troubleshooting.
Cycle history, consent records, and local diagnostic records are not automatically sent to us.
Logging symptoms, spotting, and intimacy is optional. Making a feature available does not require you to use it.
4. Consent and terms acceptance
Before entering cycle information, you are asked separately to accept the Terms of Use and explicitly consent to local processing of your period records and any symptom or spotting logs you choose to enter.
Both choices start unchecked. Linking to or reading the Privacy Policy does not itself record consent.
Intimacy logging requires separate explicit consent before the first entry can be saved. Declining intimacy consent does not prevent use of other features for which consent is active.
Tami stores acceptance and consent versions and timestamps locally. You can review the documents and manage consent in Settings under “Privacy and consent.”
5. Purposes and legal bases
Cycle, symptom, spotting, flow, and intimacy information is processed to provide the tracking, history, estimates, and logging features you choose to use.
For consent-based processing of this information, the legal bases are Article 6(1)(a) GDPR and, for health or sex-life information, explicit consent under Article 9(2)(a).
Subscription administration and necessary service-related processing rely on Article 6(1)(b). Applicable legal obligations may require processing under Article 6(1)(c).
Necessary support, security, fraud prevention, and website operation may rely on legitimate interests under Article 6(1)(f). Support processing may also rely on Article 6(1)(b) where needed to answer a service-related request.
Terms acceptance is separate from consent to sensitive-data processing.
We do not request sensitive records for routine support. If resolving a request requires additional sensitive information, we will explain what is needed and establish the applicable basis before processing it.
6. Withdrawal and deletion
Consent can be withdrawn in Settings under “Privacy and consent.”
Withdrawing consent does not affect the lawfulness of processing carried out before withdrawal.
Withdrawing cycle/health consent deletes all locally stored period, cycle, symptom, flow, spotting and intimacy records, onboarding tracking inputs, and derived estimates, averages and summaries. Related reminders are cancelled, and tracking and new backup exports remain unavailable until consent is granted again.
Withdrawing only intimacy consent deletes intimacy records and related derived data. Other consented cycle features and records remain available.
Granting consent again starts with empty data for the deleted categories. You may explicitly restore a previously exported backup after granting the required consent. Restoring a backup does not itself grant consent, and intimacy records are not imported without active intimacy consent.
Unrelated settings, necessary records of consent withdrawal or Terms acceptance, and subscription-access information may remain because they are not part of the deleted tracking categories.
Deletion cannot be undone within Tami. Previously exported backups remain wherever you saved them and must be deleted separately. Tami cannot remotely delete those files or recover your backup password.
Withdrawing consent, deleting local data or uninstalling Tami does not cancel an app-store subscription. Manage or cancel your subscription through the app store where you subscribed.
Tami does not hold a server copy of your cycle history and cannot retrieve or remotely delete it.
7. Manual encrypted backups
You can create a password-encrypted .tami backup and save it to a location you choose.
Backups contain the cycle history and daily logs eligible for export. The Backup screen explains what is included. Export is unavailable without active cycle/health consent, and intimacy entries are excluded without active intimacy consent.
Device-specific settings, permissions, and subscription access remain associated with the relevant device or app-store account.
You may save a backup locally or use a storage service of your choice. If you use a cloud service or share the file, that provider’s terms and privacy policy apply.
Tami does not receive your exported backup or save its password. We cannot recover a forgotten password or decrypt a backup for you.
Restoring a backup replaces current cycle history as explained in the app’s confirmation screen. Restoration requires active cycle/health consent but does not itself grant consent. Intimacy records are not imported without active intimacy consent.
After a backup restore, Tami keeps one temporary local copy of your previous tracking data so you can undo the restore for seven days. After seven days, the copy cannot be restored and is deleted when you next launch Tami or open Backup and restore. It is also deleted when you successfully undo the restore, remove the copy, clear cycle data, or withdraw cycle/health or intimacy consent. A later restore replaces the previous undo copy.
App-managed temporary copies are different from encrypted .tami backups exported to storage you select. Previously exported backups remain wherever you saved them and must be deleted separately. Tami cannot remotely delete those files or recover your backup password.
8. Device backups and removal
Operating-system backups and device transfers are separate from encrypted .tami backups that you deliberately export to a location you choose.
Android: Tami’s Android release configuration disables automatic app backup and excludes its app files, databases and preferences from Android cloud-backup and device-transfer extraction. Some device manufacturers may offer migration mechanisms outside Android’s configured backup and transfer system, so behaviour may vary outside those mechanisms.
iOS: Tami’s iOS version is not yet available. Platform-specific backup and file-protection information will be added before its release.
Create a manual encrypted backup if you want a copy you can explicitly restore. Clearing app storage or uninstalling normally removes active local data, but platform behavior can vary. Tami cannot recover local history for you.
Withdrawing consent, deleting local data or uninstalling Tami does not cancel an app-store subscription. Manage or cancel your subscription through the app store where you subscribed.
9. Privacy Lock and reminders
Optional Privacy Lock uses supported device authentication to restrict access through the app interface.
Authentication is handled by your device. Tami receives the authentication result, not your device PIN, password, fingerprint, or face data.
Privacy Lock does not encrypt the stored cycle database. Local data security also depends on your device and operating system.
Reminders are scheduled on your device. Depending on notification settings, their content may appear on the lock screen or connected notification surfaces.
Manage reminders in Tami and notification visibility in your device settings. Related reminders are cancelled when the consent needed for them is withdrawn.
10. App stores and subscriptions
Your app store processes installation, purchases, payments, and subscription services under its own terms and privacy policy.
Tami does not receive your full payment-card or bank details. The app may receive and locally store information needed to manage subscription access, such as the purchased product, transaction identifiers, subscription status, and relevant dates.
Purchase or financial records made available to us through an app store are used for subscription administration, support, accounting, and applicable legal obligations.
On Android, purchases are handled through Google Play. Google separately processes Google-account, installation, purchase and payment information under the Google Privacy Policy and Google Payments Privacy Notice. Provider details for additional platforms will be included when those versions become available.
Withdrawing tracking consent does not cancel a subscription.
11. Support communications
We use IONOS SE’s Mail Basic service to receive, store and send support emails. IONOS processes this information on our behalf under a data processing agreement. Its published Mail Basic subprocessor list identifies 1&1 Mail & Media GmbH and Open-Xchange GmbH, both based in Germany, as EU service providers.
If you contact us by email, we receive your email address, message, attachments and technical email information. Email transmission may also involve your own email provider. Please avoid sending sensitive cycle or intimacy information unless necessary for your support request.
The app’s local tracking consent does not automatically cover sensitive information sent by email. If resolving a request requires additional sensitive information, we will explain what is needed and establish the applicable legal basis before processing it.
12. Website hosting and visitor statistics
The tami-cycle.com website is a static site hosted through IONOS Deploy Now. IONOS documents Deploy Now as using geo-redundant storage, SSL and DDoS protection. IONOS states that its CDN option and Site Scan malware-scanning product are not available for Deploy Now.
IONOS processes technical information to deliver and secure pages and produce visitor statistics. This includes requested pages or files, referring pages, browser and operating-system information, device type, access time, and IP address.
IONOS states that IP addresses used for visitor statistics are anonymized after transmission. IONOS has reported that SiteAnalytics is enabled by default for Deploy Now and uses no cookies. We have not verified which collection method IONOS uses for this particular site.
Provider-operated hosting statistics are separate from scripts included in our website code. The website code itself contains no advertising or analytics scripts, third-party fonts, embedded video, maps, social widgets, advertising cookies or third-party advertising pixels. Its external links do not transmit your local cycle history. IONOS hosting statistics are separate from the app and do not provide us with your local cycle history.
IONOS states that hosting visitor data is retained for eight weeks. This period is not stated here as the retention period for access logs or security logs, whose Deploy Now retention remains unconfirmed.
Opening the full policy from the app visits this website and involves the website processing described here.
Provider information:
IONOS information about data processing by web-hosting products
IONOS information about SiteAnalytics
13. Other platform processing and recipients
Your app store, device manufacturer, or operating-system provider may process installation, crash, performance, or device information under its own policies and your settings.
Depending on your use of Tami, relevant information may also be handled by:
- IONOS SE for Deploy Now website hosting and Mail Basic support email.
- 1&1 Mail & Media GmbH and Open-Xchange GmbH as documented EU subprocessors for IONOS Mail Basic.
- Google for Google Play distribution, account, purchase and payment processing.
- Storage or sharing providers you choose for exported backups.
- Professional advisers or authorities where necessary for legal obligations or legal claims.
We do not automatically provide these parties with your local cycle history.
14. International processing
Local tracking data: cycle history is processed on your device and is not automatically uploaded to us or a Tami server.
Support email: IONOS SE provides Mail Basic under a data processing agreement. Its published Mail Basic subprocessor list identifies 1&1 Mail & Media GmbH and Open-Xchange GmbH in Germany. Email transmission may also involve your own email provider and routing infrastructure, so we do not promise that every email is processed only within the EU/EEA.
App stores: Google separately processes Google-account, installation, purchase and payment information for Google Play and may process it outside the EEA. Google describes its use of adequacy decisions, the EU–US Data Privacy Framework and Standard Contractual Clauses in its data-transfer framework information.
User-selected backup storage: if you save or share an exported .tami backup through a storage provider, that provider’s processing locations and international-transfer safeguards depend on the provider you choose.
Website hosting: We use IONOS Deploy Now. IONOS states that hosting visitor data is processed within the EU/EEA and is not transferred to third countries.
15. Retention
- Local records remain until deleted or removed through app or device controls, subject to platform restoration behavior.
- Withdrawing cycle/health consent deletes the affected tracking categories and app-managed temporary copies. Withdrawing only intimacy consent deletes intimacy records and related derived data. Unrelated settings, necessary consent or Terms records, and subscription-access information may remain.
- After a backup restore, the temporary undo copy can be restored for seven days. After that period, the undo option expires and the copy is deleted when you next launch Tami or open Backup and restore. It is also deleted when you successfully undo the restore, remove the copy, clear cycle data, or withdraw cycle/health or intimacy consent. A later restore replaces it.
- Exported backups remain wherever you saved them until you delete them.
- Local acceptance and consent records remain in app storage until removed through applicable app or device controls.
- We retain routine support correspondence for up to 12 months after your request is resolved, then delete it. Correspondence needed for a legal obligation or to establish, exercise or defend legal claims may be retained longer where necessary. Following deletion, IONOS may retain provider copies for up to seven days and email logs for up to 28 days.
- Purchase and business records are retained as necessary to administer access and meet applicable accounting or legal obligations. App stores apply their own retention rules.
- IONOS states that hosting visitor data is retained for eight weeks. This period is not stated here as the retention period for access logs or security logs, whose Deploy Now retention remains unconfirmed.
16. Security
Local storage reduces the cycle information shared with us but does not guarantee absolute security.
Deletion removes records from Tami’s active database and makes them unavailable through the app. It does not guarantee secure overwriting of residual bytes in device storage.
Use a device passcode, install operating-system updates, and protect your backup files and passwords. Review notification visibility if you share your device.
Backup encryption protects exported backup contents. Privacy Lock restricts access through the app. Neither should be understood as a guarantee that all device data is inaccessible.
17. Your rights
Depending on the processing involved, you may have rights of access, correction, deletion, restriction, portability, objection, and withdrawal of consent.
Local records and consent can be managed directly in Tami. For information held by us, contact support@tami-cycle.com. We may request proportionate information to verify a request but will not ask for unnecessary cycle history.
You may lodge a complaint with the Austrian Data Protection Authority or another competent supervisory authority.
18. Estimates and age
Tami calculates cycle information and estimates from your records. These are for personal tracking, not diagnosis, treatment, or contraception.
Cycles can vary. Estimates do not establish exactly when a period or ovulation will occur.
Tami is intended for adults aged 18 and over. If you believe someone under 18 has sent information to us through support, contact us so we can assess and handle it appropriately.
19. Changes and contact
We update this policy when features, providers, or data practices change and revise the publication date when the updated policy is published.
Where required, we provide an in-app notice or request renewed consent before relevant changes. Routine launches and cosmetic wording changes do not automatically require new consent.
Privacy and support questions:
support@tami-cycle.com