Moonstrate

Privacy policy

Moonstrate keeps your cycle data on your phone and sends nothing to us. This page says exactly what that means, and it also covers the few places where Blanket Fort Labs does handle a little information: our two websites (moonstrate.app and blanketfortlabs.app), our newsletter, support payments, and support email.

Last reviewed 2026-10-15. Blanket Fort Labs LLC, 5441 S Macadam Ave # 4140, Portland, OR 97239, United States. Questions to support@moonstrate.app.

The short version

  • The app has no account and no server. What you log stays on your phone, encrypted.
  • Your data never leaves your control. It stays on your phone and in your own iCloud or Google Drive, never with us. On iPhone at Strong and Stronger, a spare key is kept in your iCloud Keychain unless you turn it off. Anything else, like an export file, goes only where you send it.
  • We collect no analytics, run no ads, and include no third-party tracking code.
  • Our websites set no cookies and load nothing from anyone else.
  • If you join the newsletter, we hold your email address and nothing more, and we never share or sell it.
  • If you support us with money, Apple or Google handles a tip in the app and Stripe handles one on our websites. We never see your card.

The app

What the app stores

Everything you enter: period days and flow, symptoms, moods, notes, what you tried and how it went, reminders you turn on, and your settings. It also stores the encryption keys that protect that data, each locked by your PIN or passphrase or by your recovery code, in the phone's secure storage. Your PIN, passphrase, and recovery code themselves are never stored.

All of it lives in an encrypted database on your phone. There is no Moonstrate account, no login, and no server of ours that ever receives it. We cannot see your data, and we cannot hand it to anyone, because we do not have it.

Where your data can go

  • Export. You can export your history to a file. The file is always encrypted with a passphrase you choose (or a PIN, at Strong), and you decide where to save or send it.
  • Backup and sync to your own cloud. If you turn it on, a copy goes to your own iCloud (on iPhone) or Google Drive (on Android). It's encrypted before it leaves your phone, so Apple and Google see only scrambled data, and we never see it at all. Your recovery code can open that copy on a new phone, and so can your passphrase at Stronger and Strongest. Your cloud provider's own privacy policy covers your account with them.
  • The spare key. On iPhone, the Strong and Stronger security levels keep a spare key in your iCloud Keychain so your next iPhone can open the app. Apple encrypts iCloud Keychain end to end. Strongest never has one.
  • Reminders. If you turn reminders on, the phone schedules them locally. No notification is sent through any server, and the lock-screen text never mentions your cycle.
  • Links. The Learn tab cites its sources. Opening a citation opens your browser, and the site you land on sees that visit the way any website does.

What the app can read

If you choose to import a file from Clue, Flo, or Apple Health, the app reads it on your phone, keeps only your cycle records (period days, symptoms, moods, and notes), and discards the rest. From Apple Health it keeps only menstrual-flow records. It never reads weight or other body measurements. It does not read Apple Health or Health Connect directly. It asks the phone for permission only for Face ID or fingerprint unlock and, if you turn reminders on, for notifications.

What we never do

  • No analytics, no event tracking, no crash-reporting software, and no advertising.
  • No third-party code that collects anything. The app's network use can be checked by anyone, and the code is open source.
  • No selling, sharing, renting, or inferring anything about you. There is nothing on our side to sell or share.

Apple and Google show us aggregate statistics about the app, such as how many people installed it and whether it crashed. Those come from the stores under their own privacy policies and are never tied to an individual we could identify.

The tip jar inside the app

Support inside the app goes through Apple's App Store or Google Play. They process the payment, they know who paid, and we do not. We receive totals, never names.

Deleting your data

You delete it in the app, or by uninstalling. Deleting your own cloud backup removes the copy there. Because we never received anything, there is nothing to ask us to delete.

Health data laws

Several states, including Washington, give people rights over consumer health data that a company collects. Moonstrate does not collect, receive, or process your health data, so those rights have nothing on our side to act on. If you believe we hold something of yours, write to us and we will answer.

Children

The app collects no personal information from anyone, at any age. The app stores set their own age ratings and handle any purchase approvals for minors.

Our websites

moonstrate.app and blanketfortlabs.app set no cookies, run no scripts, and load nothing from third parties. Both are hosted on GitHub Pages. Like any host, GitHub sees the requests that load a page and handles them under its own privacy statement. We do not receive visitor logs.

The newsletter

The email box on either site joins the Blanket Fort Labs newsletter. We use it for company news and nothing else. Here is what happens to your address:

  • It goes to Buttondown, the service that sends the emails for us. We hold no other copy.
  • You may get a confirmation email first. Nothing is sent until you confirm.
  • Open and click tracking are turned off.
  • We never share, sell, or rent the list, and we never connect it to the app.
  • Every email has an unsubscribe link. Unsubscribing deletes your address from the list.

The newsletter is not meant for children under 13. Please do not sign up if you are younger.

Support payments

If you support Blanket Fort Labs through a payment link on either site, the payment is handled by Stripe. Stripe collects what a card payment needs, such as your email address, card details, and billing country, under Stripe's own privacy policy. We do not ask for your name, and we never see your card number. What Stripe shows us is an email address, the amount, the last digits of the card, and the country.

We keep those records as long as bookkeeping and tax rules require, then delete them. They are never linked to the app, and nothing tells us whether a supporter uses it.

Support email

If you write to us, your message sits in our mailbox until the question is settled. Ask and we delete it. Please do not send us your cycle data. We do not need it to help you.

Your rights

For anything the app holds, you already have every right: the data is yours and on your phone. For the newsletter, support payments, or email, you can ask what we hold, ask us to correct or delete it, or object to how we use it. Email support@moonstrate.app and we will answer within a month. If you are in the European Union or the United Kingdom, you also have the right to complain to your data protection authority. Our providers, Buttondown, Stripe, and GitHub, are in the United States and cover transfers under their own terms.

Changes to this policy

We will change this page when what the app or the company does changes, and the date at the top moves when we do. A change that matters will also be described in the app's release notes. We will never quietly widen what we collect.