Welcome to Sestra. Sestra is a women's health and wellness mobile application designed to help users track menstrual cycles, log symptoms, manage medication reminders, save reproductive health dates, and access educational wellness content.

Your health information is personal. We designed this Privacy Policy to explain, in clear language, what information we collect, how we use it, when we share it, and the choices you have.

This Privacy Policy applies to the Sestra iOS mobile application available on the Apple App Store at https://apps.apple.com/app/id6743681476.

Sestra is operated by Sestra LLC.

1. Important Health and Safety Notice

Sestra is an educational wellness tool. Sestra is not a medical device, does not provide medical diagnoses, and does not replace medical advice from a qualified healthcare provider.

Cycle predictions, phase estimates, wellness tips, symptom insights, reminders, and AI-generated responses are based on information you provide and may not always be accurate. You should always consult a licensed healthcare professional for medical questions, symptoms, diagnosis, treatment, medication decisions, pregnancy-related concerns, reproductive health concerns, or emergencies.

If you believe you are experiencing a medical emergency, contact emergency services immediately.

2. Summary of Information We Collect

3. Information We Collect

Account and profile information. When you create or use a Sestra account, we may collect full name, email address, year of birth, profile avatar or photo if uploaded, authentication provider such as email/password, Google Sign-In, or Apple Sign-In, and subscription status such as free or premium plan tier. We use this information to create your account, authenticate you, manage your profile, and provide app features.

Health and wellness information. Sestra collects health and wellness information that you choose to enter, including menstrual cycle start dates, cycle length, period duration, menstrual flow level, physical symptoms, mood, energy level, medication name, dosage, schedule, and reminder times, reproductive health screening dates, postpartum status, user-selected health goals, and care product preferences. Because this information may reveal details about your health, reproductive health, sex life, or wellness status, we treat it as sensitive personal information.

App usage and preferences. We may collect information about how you use and personalize Sestra, including app persona preference, theme and tone preferences, saved articles and videos, push notification preferences, general app usage events and screen views, and feature interactions. Analytics events are intended to be anonymized or aggregated where possible and are used to improve app functionality and stability.

AI chat information. Sestra may include an AI health chat assistant that allows you to ask wellness, cycle, and reproductive health education questions. When you use the AI chat feature, the message you type may be sent to a third-party AI provider, such as OpenAI or Google Gemini, and is used to generate a response to your question. Sestra does not retain AI chat conversations long-term. AI chat sessions are not persisted beyond the current day. AI chat responses are educational only and should not be treated as medical advice. You should avoid entering emergency medical information, highly sensitive information you do not want processed by an AI provider, or information about another person without their permission. Where required, Sestra will ask for your permission before sending your message to a third-party AI provider.

Optional location information. If you choose to use features that display nearby women's health practitioners, Sestra may request access to your device location. Location access is optional. If you do not grant location permission, map-based practitioner features may not work or may be limited. Sestra uses location information only to provide the requested map or nearby-practitioner functionality. We do not sell your location information.

Device and technical information. Through third-party SDKs and app infrastructure, we may collect crash reports, diagnostic data, app usage events, screen views, push notification tokens, device locale, device timezone, and basic device and app performance information. This information helps us schedule notifications, improve reliability, troubleshoot bugs, and understand how the app performs.

4. How We Use Information

Sestra uses your information to create, authenticate, and manage your account; calculate and predict menstrual cycle phases; display cycle-related insights, tips, and educational content; log and organize symptoms, moods, flow levels, and energy levels; schedule medication reminders; schedule period and wellness reminders; store reproductive health screening dates; personalize content based on your cycle, goals, preferences, and app persona; power AI wellness chat responses; display nearby women's health practitioners if location permission is granted; manage premium subscriptions; send push notifications you choose to enable; improve app stability and performance; detect and fix crashes or technical issues; respond to privacy, deletion, or support requests; and comply with legal obligations.

We do not use your health data for advertising. We do not share your health data with advertisers. We do not sell your personal information.

5. Legal Bases for Processing for EU, EEA, and UK Users

If you are located in the European Economic Area, the United Kingdom, or another region with similar privacy laws, we rely on legal bases where applicable, including performance of a contract, explicit consent where required, consent for push notifications and optional location features, legitimate interests for improving app stability and security, legal obligation for legal and privacy-rights requests, and consent or explicit permission where required for sending AI chat messages to a third-party AI provider.

You may withdraw consent where processing is based on consent. Withdrawing consent does not affect processing that occurred before withdrawal.

6. Sensitive Health Data

Sestra collects and stores health and reproductive wellness information only to provide app features you choose to use. Sensitive health data may include menstrual cycle data, symptoms, reproductive health screening dates, postpartum status, medication reminder details, health goals, and care product preferences. We do not use sensitive health data for advertising, third-party marketing, or sale to data brokers.

7. Third-Party Services We Use

Sestra uses trusted third-party services to operate the app, including Firebase / Google for Firestore database, authentication, analytics, crash reporting, and cloud messaging; Google Sign-In and Apple Sign-In for account login; Apple StoreKit for in-app purchases and subscription management; OpenAI or Google Gemini for AI chat responses; Cloudinary for avatar image storage and hosting; Google Maps SDK for practitioner map views; and Notifee for local notification scheduling. Third-party services may process information according to their own privacy policies and terms. We encourage you to review their policies.

8. Data Sharing

We may share information with service providers that help us operate Sestra, such as cloud storage, authentication, analytics, crash reporting, AI response generation, subscription management, avatar hosting, maps, and notifications. These providers are authorized to process information only as needed to provide their services to Sestra.

When you use the AI chat assistant, the message you submit may be sent to OpenAI or Google Gemini to generate a response. Sestra does not retain AI chat conversations long-term.

We may disclose information if required to comply with applicable law, legal process, regulatory requests, enforce our terms, protect our rights, investigate fraud or security issues, or protect users or the public. If Sestra LLC is involved in a merger, acquisition, financing, reorganization, bankruptcy, or sale of assets, user information may be transferred as part of that transaction, subject to this Privacy Policy or a policy with materially similar protections.

Sestra does not sell your personal information. Sestra does not share health data with advertisers.

9. Analytics and Crash Reporting

Sestra may use Firebase Analytics and Firebase Crashlytics to understand app performance, diagnose bugs, and improve reliability. Analytics data is intended to be anonymized or aggregated where possible. Crash reports may include technical details about the device, app version, operating system, and events leading to a crash. We do not use health data for advertising analytics.

10. Push Notifications and Local Reminders

Sestra may send reminders for periods, medications, reproductive health dates, and other wellness features if you enable notifications. You can manage push notifications through your iOS system settings. Some reminders may be scheduled locally on your device through Notifee. For local notifications, reminder scheduling data does not leave your device through Notifee.

11. Subscriptions and Payments

Sestra may offer free and premium subscription tiers. In-app purchases are processed through Apple StoreKit. Sestra receives information needed to confirm your subscription status, such as whether you are on a free or premium plan. Sestra does not receive or store your full payment card number. Subscription management, billing, refunds, and cancellation are handled through Apple and your Apple account settings.

12. Data Storage

Sestra stores user data in Google Firebase Firestore on servers located in the United States. Stored data may include account information, cycle profiles, check-ins, medications, saved content, period logs, and related user data. Local device data may be stored temporarily using local cache technology, such as MMKV. Local cache data is cleared on logout and account deletion.

13. Data Retention

We retain your personal information for as long as your account remains active or as long as needed to provide Sestra's services. When you delete your account, Sestra permanently deletes your Firestore documents across relevant collections, including users, users_data, cycleProfiles, checkIns, medications, savedContent, periodLogs, and users_checkin_data. Local device cache is cleared on logout and account deletion. AI chat sessions are not retained long-term and are not persisted beyond the current day. We may retain limited information if required by law, for fraud prevention, dispute resolution, security, tax, accounting, or legitimate business recordkeeping purposes.

14. Account Deletion

You can delete your account in the app by going to Profile > Settings > Delete Account. When you delete your account, Sestra will delete your account and associated app data from Firestore, including profile data, cycle data, check-ins, medications, saved content, period logs, and related user records. Deletion is intended to be permanent and cannot be undone.

15. Your Privacy Choices

You have control over many types of information in Sestra. You can view most of your information directly in the app; edit your profile, cycle data, period logs, daily check-ins, medication reminders, and preferences at any time; delete your account and associated data in the app under Profile > Settings > Delete Account; enable or disable notifications through your iOS notification settings; allow, deny, or revoke location access through your iOS privacy settings; and limit certain analytics, tracking, or device-level data sharing through your iOS privacy settings. Where applicable, Sestra honors your device privacy settings.

You are not required to use the AI chat feature. If you do not want your chat message sent to a third-party AI provider, do not use the AI chat feature.

16. Rights for California Residents

If you are a California resident, you may have rights under the California Consumer Privacy Act, as amended by the California Privacy Rights Act. These rights may include the right to know what personal information we collect, use, disclose, or share; access personal information we maintain about you; request deletion of personal information; correct inaccurate personal information; opt out of the sale or sharing of personal information; limit certain uses and disclosures of sensitive personal information; and not be discriminated against for exercising your privacy rights.

Sestra does not sell personal information. Sestra does not share personal information for cross-context behavioral advertising. Sestra does not use sensitive personal information for purposes that require a separate "Limit the Use of My Sensitive Personal Information" link.

To exercise California privacy rights, contact us at info@sestrahealth.com. We may need to verify your identity before responding to your request.

17. Notice at Collection for California Residents

Sestra may collect identifiers such as name, email address, and authentication provider; personal characteristics such as year of birth; sensitive personal information such as health, menstrual cycle, reproductive wellness, and medication reminder details; internet or electronic activity such as app usage events and screen views; geolocation data if permission is granted; audio, visual, or similar information such as profile avatar/photo; commercial information such as subscription status and plan tier; and inferences and preferences such as persona preference, health goals, and saved content. Sources may include you, authentication providers, app usage, your device, and Apple StoreKit. We use these categories for account creation, login, support, app functionality, cycle predictions, reminders, wellness insights, app improvement, analytics, troubleshooting, nearby practitioner map features, profile personalization, premium access management, and in-app recommendations. We retain these categories as described in the Data Retention section.

18. Rights for EU, EEA, and UK Users

If you are located in the European Economic Area, United Kingdom, or another region with similar privacy laws, you may have the right, subject to applicable law, to access your personal data; correct inaccurate personal data; delete your personal data; restrict certain processing; object to certain processing; withdraw consent where processing is based on consent; request data portability where legally required; and lodge a complaint with your local data protection authority. Sestra currently does not offer a self-service export tool inside the app. However, where required by law, you may contact us to request a copy of your personal data in a portable format.

To exercise these rights, contact us at info@sestrahealth.com.

19. International Data Transfers

Sestra LLC is based in the United States, and user data is stored in Google Firebase Firestore on servers in the United States. If you use Sestra from outside the United States, your information may be transferred to, stored in, or processed in the United States or other countries where our service providers operate. Privacy laws in those countries may differ from the laws in your country. Where required by applicable law, we rely on appropriate safeguards for international data transfers, such as contractual protections with service providers.

20. Security

We use reasonable administrative, technical, and organizational safeguards designed to protect personal information. These safeguards may include secure cloud infrastructure, access controls, authentication protections, and encrypted transmission where supported. However, no method of data transmission or storage is completely secure. We cannot guarantee absolute security. You are responsible for maintaining the confidentiality of your login credentials and for keeping your device secure.

21. Children's Privacy

Sestra is not intended for users under 13 years of age. We do not knowingly collect personal information from children under 13. If we learn that we have collected personal information from a child under 13, we will take steps to delete that information. Sestra's content is designed for adult women and includes health and reproductive wellness topics. The App Store rating reflects the nature of this content.

22. Automated Processing

Sestra may use automated processing to generate cycle predictions, phase estimates, reminders, personalized tips, and AI chat responses. These automated features are used only to provide wellness functionality inside the app. Sestra does not make decisions that produce legal or similarly significant effects about you.

23. Do Not Track and Global Privacy Controls

Some browsers or devices may send "Do Not Track" or similar signals. Because Sestra is an iOS mobile application and does not sell or share personal information for cross-context behavioral advertising, these signals may not apply to most app functionality. Where legally required and technically feasible, we will honor applicable privacy preference signals.

24. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. If we make material changes, we may notify you through the app, by email, or by updating the "Last Updated" date at the top of this Policy. Your continued use of Sestra after an updated Privacy Policy becomes effective means you acknowledge the updated Policy.

25. Contact Us

For privacy questions, requests, or concerns, contact Sestra LLC at info@sestrahealth.com.

Company: Sestra LLC
App: Sestra
App Store URL: https://apps.apple.com/app/id6743681476