Our privacy approach
Pregvia works without an account or a sync server operated by us. Pregnancy records are stored locally; optional nearby sharing, exports, Apple services have the separate data flows explained below.
We do not sell personal data or use advertising tracking. We do not automatically send your records to employers, insurers or clinicians. The app does not upload records to an AI service or analyse reports using AI.
Data controller and contact
Yize Sun is the operator of Pregvia and the data controller for the app and support website.
Contact address: Preussenstr. 7, 80809 Munich, Germany
For privacy questions, GDPR or EEA rights requests, or data-related concerns, contact martin.yize.sun@gmail.com.
Data stored on your device
Local data includes due date, parent role, tasks, calendar events, prenatal appointments, administrative progress, contact notes and drafts, bookmarks, language and appearance choices. Current health recording is limited to weight and fetal movement. Older blood-pressure, sleep, water, symptom, mood and journal records may remain stored even though these features are disabled.
In iOS versions supporting care-country selection, your selected care country and country-specific progress, appointment references and midwife contacts are stored locally. Changing the care country preserves existing records and country history; it does not move those records to the new country or erase them.
Voice recordings and their titles, dates, durations and story references are stored on the device. Microphone access is requested when you start recording. Recordings are not included in nearby sync and are not uploaded to our servers. Recordings and their metadata may be included in system backups, including iCloud, depending on your iPhone settings. Recovery depends on a completed backup or your chosen transfer process; the app does not guarantee recovery. Check your recordings on the new phone before erasing the old one.
Apple Health
This version does not connect to Apple Health, request HealthKit permission, or read or write Apple Health data. Weight and fetal movement are recorded manually and stored locally in the app.
Disabling the connection does not delete existing manual records or change data in Apple Health. This update does not actively revoke system permissions granted to earlier versions; you can manage them in the iOS Health app or Settings.
Usage analytics
This version does not send usage events or installation identifiers to TelemetryDeck, even if analytics was enabled in an earlier version. The analytics switch is unavailable, and events are not collected for later transmission.
Earlier versions could send a random installation identifier, parent role, screen and purchase events, language, theme and Premium status when the option was enabled. Disabling the feature does not delete previously transmitted data; contact us about that data.
Rating-prompt eligibility dates and request attempts remain on the device. The app does not receive your star rating. Apple's beta-testing and diagnostic services are separate, as explained below.
Purchases and subscriptions
Apple handles iOS purchases, billing and subscription management. We do not receive your card details, bank credentials or Apple ID password. The app verifies store entitlements and keeps local access status, product/store information and expiry/verification times.
A paired partner can receive a signed Family Premium pass containing family/device identifiers, purchaser display name, store, product and validity dates, not payment credentials. A pass lasts at most 14 days and renews through eligible nearby sync. We may receive sales and transaction reports made available by Apple. Deleting the app or unpairing does not cancel a store subscription.
Shared Family space
Nearby pairing is optional and uses Google Nearby Connections on iOS, with encrypted Bluetooth/Wi-Fi transport. During discovery, compatible nearby devices can see your chosen name before pairing, parent role and technical device/connection identifiers. Use a nickname and verify the matching code on both phones before accepting.
Paired phones exchange due date, task completion and scheduling, administrative step status, custom calendar event titles, times and notes, profile information and a signed Family Premium pass. New custom events created while paired enter sync, along with edits and deletions of already shared events. Editing or deleting a private event from before pairing does not make it shared. This does not recall copies already sent by an older version. Prenatal appointments share only their type, title, time and location, including existing appointments when you pair or update an already paired app. Later edits and cancellations also sync. Appointment notes and checkup-understanding notes remain private, as do health records, journals, bookmarks and recordings. Do not put private medical information in shared titles, locations or custom-event notes.
In iOS versions supporting independent care-country selection, during pairing and reconnection, phones exchange their selected care country and compatibility information to determine whether records can sync. Either parent can change the country on their own phone without changing the other phone. All record synchronization pauses while countries differ; existing copies remain on each phone. Record synchronization resumes when both phones select the same supported country and reconnect. This does not send pregnancy records to a server operated by us.
Sync requires both phones nearby, with the sharing page or care-country settings open on each phone. Each keeps its own copy. Unpairing stops future sync but cannot erase the other phone or immediately revoke a pass on an offline phone.
Export and sharing
CSV, PDF and ZIP exports, including selected M4A recordings, are created locally according to your selection. Due date and pregnancy week are added only when pregnancy summary is selected, not when exporting only weight, fetal movement or recordings. The files are not password-protected. Review them before sharing; selected recordings or free-text entries may also contain private information.
Exporting creates a temporary local copy. Choosing a destination in the system share sheet can send it to another person, app or cloud-storage provider. That copy follows the recipient's practices and is not erased when you later remove the original record. Audio can contain other people's voices; share it only with their permission.
Third-party services
On iOS, Apple provides distribution, purchases and the native rating prompt. Google Nearby Connections provides the nearby transport library, not a Google account or a cloud family-record service. Usage analytics is disabled in this version. No advertising or social-login SDK is used.
TestFlight is independent of the app's usage analytics: Apple can share tester details, usage, crash diagnostics and submitted feedback with us for beta testing. If you email support, we receive your address and message, including attachments you choose to send, through our email provider. Please remove private medical details from screenshots and do not send recordings or reports unless needed.
Opening external links contacts their providers. Our support/privacy website uses GitHub Pages, whose hosting service logs visitor IP addresses for security. The site itself has no analytics scripts, forms or tracking cookies. Apple, Google, GitHub, TelemetryDeck and your chosen sharing services have their own privacy notices; provider processing may occur outside the EEA.
Retention and deletion
Local records remain until removed using available controls or until app data is deleted. Disabling a feature, restarting tasks or stopping pregnancy tracking is not an erase-all operation. Older disabled health/journal records can remain stored without a current in-app editor. Offloading the app keeps its data. The app has no single control that erases every category.
Paired phones, exported files and device backups are separate copies. Deleting a synced event marks it deleted for sync; an internal copy may remain. Unpair before removing data you do not want shared again. Device backups may include app data and recordings depending on your settings. Deleting a recording in the app does not immediately erase existing copies in earlier backups; those are managed through system backup settings. Keychain security material can outlive an app installation. We cannot remotely erase these copies.
Turning analytics off does not delete past events. Their retention depends on the provider and our service configuration; contact us about deletion. Support correspondence is kept as needed to handle the request and applicable legal obligations. Apple, GitHub and other chosen providers manage their own copies under their policies.
Legal basis for processing
Usage analytics is disabled in this version.
Where we process personal data under GDPR, we use it to provide requested services or support (Article 6(1)(b)), for optional analytics with consent (Article 6(1)(a)), and for necessary security and troubleshooting based on legitimate interests (Article 6(1)(f)). Legal obligations may require limited retention (Article 6(1)(c)). You can withdraw consent for future optional processing without affecting earlier lawful processing.
Recording and nearby sharing are choices, not requirements for reading reference content. These features do not send your local health database to us. Do not send sensitive health records to support when a description of the app problem is sufficient.
GDPR and EEA privacy rights
Where GDPR applies, you may request access, correction, erasure, restriction or portability and may object to processing based on legitimate interests. You may withdraw consent and lodge a complaint with a data-protection supervisory authority, including where you live or work. These rights depend on the processing and applicable conditions.
Contact martin.yize.sun@gmail.com. We can address data we hold, such as support correspondence, but cannot remotely access, recover or erase your local records or your partner's copies. Revoking Apple Health permission does not delete data in Apple Health; manage that data there.
Your choices
You can read reference content without pairing, microphone access or usage analytics. You can manage permissions in iOS, remove available records and bookmarks, export selected data, or unpair. Deleting or offloading the app, stopping tracking and cancelling a subscription are different actions; see Retention and deletion.
For privacy questions, contact martin.yize.sun@gmail.com.
Children
The app is intended for pregnant users, people planning pregnancy, and adult supporters. It is not directed to children, and we do not knowingly collect personal information from children.
Medical disclaimer
The app provides general pregnancy information, organization tools, and country-specific planning information for the care countries available in your installed version. It does not provide medical diagnosis, treatment, emergency support, or professional medical advice.
For medical questions, contact a doctor, midwife, clinic, or qualified healthcare provider. In an emergency, contact local emergency services immediately.
Contact
For privacy questions, support requests, or data-related concerns, contact martin.yize.sun@gmail.com.
Provider notices and further information
These links explain the providers' practices. Opening them visits an external website. For details about the retention and transfer arrangements that apply to data we process, contact us.
Changes to this notice
We update this notice when data practices change. Check the date above and the privacy notice in your installed app. New data uses requiring permission will not be authorised merely by updating this page.