Privacy Policy

Effective date: October 16, 2020 | Last reviewed: May 14, 2026

This privacy policy applies to Lilly Tracker (the "App"), a menstrual cycle and ovulation tracking application developed by SMSROBOT LTD. This policy explains how we collect, use, store, and protect your personal information when you use the App or visit our website at www.menstrualcycle.app (the "Site"). By using Lilly Tracker, you confirm that you have read, understood, and agree to this privacy policy in its entirety. If you do not agree, please do not use the App or Site.

Introduction
A Note About Children
Data Controller
Information We Collect
How We Collect Data
Where We Store Data
How We Use Your Information
Disclosure of Your Information
Third Party Sites
Third Party Suppliers
Your Rights
Data Security
Advertisements
Changes to This Policy
Contact

1. Introduction

SMSROBOT LTD ("we," "us," or "our") is committed to protecting and respecting your privacy. This privacy policy sets out the basis on which we will process any personal information we collect from you, or that you provide to us through Lilly Tracker. Please read this policy carefully so you understand how we handle your personal information.

Lilly Tracker is a health-tracking application that logs sensitive personal data including menstrual cycle dates, ovulation predictions, basal body temperature, symptoms, moods, intercourse logs, and birth control information. We take the privacy and security of this data extremely seriously. We do not sell, rent, or share your personal health data with third parties for their own use.

            Key point: Your cycle data — period dates,
            temperatures, symptoms, moods, notes, and birth control logs —
            belongs to you. We store it securely, encrypt it during cloud
            backup, and never share it with advertisers or other third parties.
            You can request deletion at any time.
        

2. A Note About Children

We recognize we have a special obligation to protect personal information we obtain from children. We do not and will not knowingly collect information from any unsupervised child under the age of 13. If we become aware that a child under 13 has provided us with personal information without parental consent, we will delete that information. In certain jurisdictions, prior written permission or other verifiable consent may also be required from a parent or guardian for children under the age of 18.

Lilly Tracker is designed for individuals who have started menstruating and is not intended for use by children under 13. If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately at support@smsrobot.com.

3. Data Controller

For the purpose of data protection law, the data controller is:

SMSROBOT LTD
The Black Church, St. Mary's Place
Dublin 7, Ireland
Company Registration Number: 522641
Email: support@smsrobot.com

As the data controller, we are responsible for deciding how your personal information is collected, stored, and used. We comply with applicable privacy laws, including the General Data Protection Regulation (GDPR) within the European Union and the Privacy and Electronic Communications Regulations (PECR) in the UK.

4. Information We Collect

We respect your right to privacy and will only process personal information you provide to us in accordance with applicable privacy laws. The kinds of data we may process include:

4.1 Account Information

If you create a cloud backup account, we collect and associate with your account the information you provide during registration, including your email address and password. This account is used solely for the purpose of backing up and restoring your cycle data across devices.

4.2 Your Cycle Data (Your Data)

Our backup services are designed as a simple and personalized way for you to store your private information. This includes:

Period dates — start and end dates of each menstrual period
Cycle predictions — ovulation dates, fertile window calculations, predicted next period dates
Symptoms — logged symptoms such as cramps, bloating, acne, nausea, headaches, and 25+ others
Moods — logged moods such as happy, anxious, tired, irritable, and 35+ others
Basal body temperature — daily BBT readings
Intercourse logs — dates and whether protected or unprotected
Personal notes — free-text notes you add to your cycle diary
Birth control data — pill/patch/ring schedules and confirmation logs
Test results — pregnancy test and ovulation test results
Flow intensity — light, medium, or heavy flow logs

We store, process, and transmit Your Data to make cloud backup possible. This includes your profile information as well as metadata such as file size, upload time, and usage activity.

4.3 Personal Information You Provide

When you use the App, you may provide:

Your name (first and last name)
Your sex
Your contact details (email address and/or mobile phone number)
Your birth date
Your screen name and profile picture (for the Girl Talk community forum)
Data you provide to us via Facebook or which you make publicly available on Facebook

4.4 Technical Information

We automatically collect certain technical information when you use the App, including:

Internet and/or network connection details (including your IP address, Media Access Control (MAC) address)
Operating system, browser type, or other software details
Hardware information (including computer hardware or mobile device model)
Mobile device details (including your mobile device type and number, mobile carrier details, and unique mobile device ID)
Details of your use of our Services including traffic data, location/geographical data (based on IP address, not GPS), Service resources accessed, time spent, crash reports, and connection drop reasons

5. How We Collect Data

We collect and process data about you through the following means:

Directly from you: Data you provide when setting up the App, logging cycle information, creating a backup account, contacting support, or participating in the Girl Talk community forum
Automatically: Technical data collected through the App and third-party services such as Google Analytics and AdMob, and data you provide to us via Facebook
Through the App's functionality: Cycle data, symptoms, temperatures, and other health information you choose to log

6. Where We Store Data

We store the data that we collect from you on servers located in Ireland. However, this data may be transferred to, and stored at, a location outside the European Economic Area (EEA). It may also be processed by staff operating outside the EEA who work for us or for one of our suppliers. Such staff may be engaged in the performance of our obligations from any contracts entered into with you and the provision of support services.

By submitting your personal data, you agree to this transfer, storing, or processing. We will take all steps reasonably necessary to ensure that your data is treated securely and in accordance with this privacy policy. When data is transferred outside the EEA, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses approved by the European Commission.

7. How We Use Your Information

We use information held about you in the following ways:

To provide backup services: We collect and use personal data to provide you with reliable and secure cloud backup of your cycle information
To improve the App: We analyze anonymous usage patterns to optimize the App's performance and user experience
To present content effectively: We ensure content from our Services is presented in the most effective manner for you and your device
To communicate with you: We provide information or services you request from us, or which we feel may interest you if you have consented to be contacted for such purposes
To fulfill contractual obligations: We perform obligations from any contracts entered into with you
To enable interactive features: We allow you to participate in interactive features of our Services, such as the Girl Talk community forum
To notify you of changes: We notify you about changes to the App or this policy

Important: Any communications you have via the Girl Talk community forum may reveal your screen name, profile picture, and the content of your communications to other users. We are not responsible for the activities of other users or other third parties to whom you choose to provide your personal information via the forum.

8. Disclosure of Your Information

We may disclose your personal information in the following circumstances:

Within our group: To any member of our group, which means our subsidiaries, our ultimate holding company and its subsidiaries
Business transfers: In the event that we sell or buy any business or assets, we may disclose your personal information to the seller or buyer of such business or assets
Acquisition: If we or substantially all of our assets are acquired by a third party, personal information held by us about our users will be a transferred asset
Legal obligations: If we are under a duty to disclose or share your personal information in order to comply with any legal obligation, or in order to enforce or apply, or to protect our rights, property, or safety of our users or others

We do not sell, rent, or share your personal health data with third parties for their own marketing or analytics purposes.

9. Third Party Sites

Our Services may, from time to time, contain links to and from the websites of our partner networks, advertisers, and affiliates. These websites have their own privacy policies. If you follow a link to any of these websites, we do not accept any responsibility or liability for these policies, nor do we endorse such websites. We encourage you to read the privacy policy of every website you visit.

10. Third Party Suppliers

To be able to deliver the App and its functionalities to you, we use third-party sub-suppliers, to whom we may transfer data. These partners include:

Google AdMob: Used for in-app advertising. Google's advertising privacy policy: https://www.google.com/policies/technologies/ads/
Google Analytics: Used for anonymous usage analytics

These third parties have their own privacy policies governing the use of your data. We encourage you to review them. We only work with partners who provide sufficient guarantees to implement appropriate technical and organizational measures to protect your data.

11. Your Rights

Under applicable data protection law, you have the following rights:

11.1 Right to Withdraw Consent

You have the right to ask us not to process your personal information for marketing purposes. We will usually inform you (before collecting your data) if we intend to use your data for such purposes. You can exercise this right by contacting us at support@smsrobot.com.

11.2 Right to Deletion

You can email us at support@smsrobot.com to request that we delete your personal information from our database. We will use commercially reasonable efforts to honor your request. We may retain an archived copy of your records if required to do so by law or for legitimate business purposes.

Within the App, you can also:

Delete all local data: Settings → Period Data → Delete All Data (erases everything on your phone, returns to setup wizard)
Delete backup account: Settings → Period Data → Delete Backup Account (permanently erases cloud data)

11.3 Additional Rights (GDPR)

If you are located in the European Economic Area, you also have the right to:

Access: Request a copy of the personal data we hold about you
Rectification: Request correction of inaccurate data
Restriction: Request restriction of processing in certain circumstances
Data portability: Request transfer of your data to another service provider
Object: Object to processing based on legitimate interests
Lodge a complaint: With your local data protection supervisory authority

To exercise any of these rights, contact us at support@smsrobot.com. We will respond to your request within the timeframes required by applicable law.

12. Data Security

We take data security seriously. Here's how we protect your information:

Encryption in transit: We use encryption to keep your data private while it is being transmitted between the App and our servers
Dedicated security team: We have a team dedicated to keeping your information secure and testing for vulnerabilities
Ongoing improvements: We continue to work on features to keep your information safe

Unfortunately, the transmission of information via the Internet is not completely secure. We will do our best to protect your personal information, but we cannot guarantee the security of your data transmitted to our Services — any transmission is at your own risk. Once we receive your information, we use strict procedures and security features to try to prevent unauthorized access.

On your device: Your cycle data is stored in the App's private storage area on your phone. Other apps cannot access it. If you enable PIN protection, the App requires a 4-digit PIN every time it resumes from the background, preventing unauthorized access if someone picks up your phone.

13. Advertisements

Lilly Tracker's free version uses Google AdMob's advertising platform. AdMob may display personalized, targeted ads based on user clicks, actions, and search terms. We use device identifiers to personalize content and ads, to provide social media features, and to analyze our traffic. We also share such identifiers and other information from your device with our social media, advertising, and analytics partners.

For users in the European Economic Area, UK, and Switzerland, the App will display a consent dialog on first launch asking whether you agree to personalized ads. If you decline, only non-personalized ads (based on context, not your behavior) will be shown. You can change your choice at any time by tapping "Revoke consent" in the side menu (scroll to the bottom of the drawer).

Important: Advertisers do not have access to your cycle data, temperatures, symptoms, moods, or personal notes. The ads you see are based on general device identifiers and ad categories, not your health information.

More information: https://www.google.com/policies/technologies/ads/

To permanently remove all ads, purchase the "Remove Ads" upgrade from within the App via Google Play in-app billing.

14. Changes to This Policy

Any changes we may make to this privacy policy in the future will be posted on this page and, where appropriate, notified to you by email or through the App. We encourage you to review this policy periodically. The "Effective date" at the top of this page indicates when the policy was last updated. Your continued use of the App after any changes indicates your acceptance of the updated policy.

15. Contact

If you have any questions, comments, or requests regarding this privacy policy or our data practices, please contact us:

Email: support@smsrobot.com
Postal address:
SMSROBOT LTD
The Black Church, St. Mary's Place
Dublin 7, Ireland

You can also contact us from within the App by opening the side menu and tapping "Contact us" — this opens an email draft addressed to support@smsrobot.com with your device model, OS version, and app version pre-filled.

Published by SMSROBOT LTD | Last updated: May 14, 2026.