Privacy Policy
Last updated: 2026-05-20 · Effective date: 2026-07-15
1. Who we are
AsterKit ("we", "us", "the app") is a privacy-first period tracker published by Ryan Michael Gonzalez, trading as AsterKit. Contact: support@asterkit.app.
2. What we collect
Nothing about your cycle. All period, symptom, mood, and notes data you enter is stored only on your device, encrypted at rest by the operating system's keychain (iOS) or KeyStore (Android). We have no servers that receive, hold, or process this data. We cannot read it, recover it, or transfer it. Uninstalling the app permanently deletes it.
Purchase validation. When you purchase the app or start the free trial, our payment provider RevenueCat receives an anonymous Apple/Google receipt token and a randomly-generated device identifier so it can confirm your purchase across reinstalls. This token is not linked to your name, email, or any personal identifier. RevenueCat does not receive cycle data.
The legal basis for processing the purchase token is the performance of a contract (App Store §3.1 / Play Developer Distribution Agreement): we need receipt validation to fulfill your purchase.
No analytics, no advertising, no crash reporting, no social login, no tracking.
3. Children's privacy (COPPA)
AsterKit is designed for users 13 and older. A parent or guardian must complete parental verification before the trial begins. We do not knowingly collect personal information from children under 13. Because the app transmits no cycle data to any server, no personal data deletion request is required; uninstalling the app permanently removes all locally stored data from the device. To report a suspected under-13 user or to request deletion of any RevenueCat purchase token associated with the account, contact support@asterkit.app.
4. Your rights (GDPR / CCPA)
Because cycle data never leaves your device, your right to access, correct, or delete it is fulfilled by using the app's built-in controls and uninstalling. Go to Settings → Delete all cycle data to permanently remove all entries from this device.
For the anonymous purchase token held by RevenueCat, you may request deletion by emailing support@asterkit.app with the original Apple/Google order ID — we will forward the request to RevenueCat for processing within 30 days.
RevenueCat retains anonymous purchase tokens for up to 10 years to support restore-purchase and refund requests. You can request earlier deletion of your RevenueCat record by emailing support@asterkit.app with your original Apple or Google order ID. We will forward the request to RevenueCat; they respond within 30 days.
5. Data security
Cycle data: AES-encrypted by the device OS (iOS Keychain / Android KeyStore) and excluded from iCloud and Android auto-backup.
Purchase tokens: transmitted to RevenueCat over TLS 1.2+.
6. Sub-processors
RevenueCat, Inc. — Receipt validation, trial/entitlement tracking
Data: Anonymous purchase token, anonymous device ID
Contact for deletion: privacy@revenuecat.com
Apple App Store / Google Play — Payment processing
Data: Handled entirely by the store
7. Changes to this policy
Material changes will be announced in-app at least 14 days before they take effect.
8. Jurisdiction
Governed by the laws of the State of Texas, USA. Disputes resolved in the courts of Travis County, Texas, USA.
9. Contact
support@asterkit.app