← Duara Support

Duara Privacy Policy

Effective 7 June 2026 · Last updated 22 June 2026

Summary: Your cycle, symptom, mood, and intimacy data are sensitive health data, and they stay private. Duara stores them on your device — and, only if you turn it on, in your own private iCloud (encrypted in transit and at rest, and end-to-end encrypted if you enable Apple's Advanced Data Protection). We have no servers that hold your health data and no way to read it. We never sell your reproductive health data and never share it with advertisers or analytics services. The free version shows non-personalised ads via Google AdMob, but the ad network never receives your health data. You can export or permanently delete everything at any time.

1. Who we are

Duara is developed by MW Supply Limited ("we", "us"). For questions about this policy or your data, contact mwsupplylimited@gmail.com.

2. The health data you enter

Duara is built around the information you choose to log: your periods and flow, symptoms, mood and energy, cervical fluid, basal body temperature, sexual activity and contraception, notes, and your cycle settings and goal. We treat all of this as sensitive health data.

This data is stored on your device. If you enable iCloud sync, it is also stored in your own private iCloud database using Apple's CloudKit — encrypted in transit and at rest (and end-to-end encrypted if you turn on Apple's Advanced Data Protection, which is optional and off by default) — so it stays in sync across your devices. That data lives in your Apple Account; we cannot access it, and we never receive a copy. We do not operate our own servers that store your health data.

We do not sell your health data, and we never share it with advertisers, data brokers, or analytics providers.

3. Health information & medical disclaimer

Duara is a general wellness and education product. It is not a medical device, does not provide a medical diagnosis, and is not a method of contraception. Its predictions are estimates and can be wrong. Duara does not replace professional medical care. See our Terms of Use for the full disclaimer.

4. Advertising (free version)

The free version of Duara shows non-personalised ads through Google AdMob. To deliver them, Google may process limited device and usage information (such as general app activity, approximate location derived from your IP address, and ad interactions). This is governed by Google's Privacy Policy.

We never send your cycle, symptom, mood, intimacy, or other health data to Google or any advertiser. Ad technology is kept strictly separate from your health data. Duara requests only non-personalised ads and does not use the device advertising identifier for cross-app tracking, so iOS does not show an App Tracking Transparency prompt. Where consent is required (for example in the EEA and UK), Google's certified consent form lets you make your choice, and you can change it any time from Me → Manage privacy choices. Subscribing to Duara Plus removes all ads.

5. Subscriptions & purchases

Duara Plus subscriptions are sold and processed by Apple through the App Store. We do not receive or store your name, payment card, or billing details — Apple handles payment. We receive only the anonymous receipt information needed to confirm whether a subscription is active.

6. Partner sharing & the couples space

Duara includes an optional private space for couples. You can connect with a partner — and, for intimate sessions, invite more than one person — and then choose, item by item, what to share. Sharing is always something you start in the foreground — never automatic, hidden, or turned on remotely — and you can change or revoke any of it at any time with one tap. Connecting alone shares nothing.

The categories you can choose to share are:

How partner data travels. Cross-device sharing uses Apple's CloudKit sharing (a shared iCloud zone — one between you and a partner, or one per intimate session shared with everyone invited to it) — it does not pass through our servers, and we cannot read it. Message text and location coordinates are written using CloudKit's encrypted fields. Content is end-to-end encrypted only when both partners have enabled Apple's Advanced Data Protection (which is optional and off by default); we therefore do not claim unqualified end-to-end encryption. Both people must explicitly accept the connection on their own device and Apple ID, and either of you can unpair unilaterally and instantly — unpairing stops sharing, removes the other person's shared data from your device, and lets each person keep their own private data. We never share your data with anyone without a specific action by you.

7. Notifications

Reminders (such as an upcoming-period reminder) are scheduled and delivered locally on your device. They are not sent through us or any third party.

8. Information we do not collect

We do not run an account system and do not collect your name, email, or contacts. Anything you share in the couples space (messages, location, calendar) travels through your own iCloud via Apple's CloudKit sharing, not our servers — we never receive or store it. We do not collect analytics about how you use the app, and we do not build advertising or marketing profiles from your health data. Apart from the advertising identifier used by AdMob in the free version (Section 4), we do not track you.

9. Your choices & rights

10. Consumer Health Data (Washington "My Health My Data" and similar laws)

For users covered by consumer-health-data laws such as Washington's My Health My Data Act, this section serves as our Consumer Health Data Privacy Policy:

11. Law enforcement & legal requests

Because your health data is stored on your device and in your own private iCloud rather than on our servers, we do not hold a copy that we could disclose, and we cannot read your data. We have designed Duara to minimise the data we hold so that there is as little as possible to ever be requested. For an extra layer of protection you can lock the app with Face ID.

12. Children

Duara is not directed to children under 13, and we do not knowingly collect personal information from them. Adolescents who menstruate may use Duara; the same on-device, private handling applies to everyone.

13. Data retention & security

Because we do not collect your health data on any server we control, we have nothing to retain or delete on our side. Your data stays on your device and in your own iCloud and can be removed at any time. On-device data is protected by your device passcode and optional Face ID lock; iCloud sync is encrypted in transit and at rest, and end-to-end encrypted when you enable Apple's Advanced Data Protection.

14. Changes to this policy

If we change how Duara handles data, we will update this page and the "Last updated" date above, and reflect material changes in the App Store privacy details for the affected version.

15. Contact

Questions about this privacy policy can be sent to mwsupplylimited@gmail.com.