Privacy Policy
Last updated: July 20, 2026
This Privacy Policy explains how Grow Labs LLC (“Grow Labs,” “we,” “us,” or “our”) handles your information when you use the Conceiva mobile application and related services (the “Service”). By using Conceiva, you agree to the practices described here. For UK and EU data-protection law, Grow Labs LLC is the data controller.
1. Where your data lives
Conceiva is built to keep your sensitive information with you. The cycle and health data you log, your onboarding answers, and your settings are stored locally on your device. Conceiva has no accounts or passwords, and your data is not sent to our servers as part of normal use. Specific, clearly labeled features are the exceptions: AI chat, optional photo analysis, importing from your Oura account, and (if you opt in) pseudonymous analytics, and each is described below.
2. Information we collect
a. Information you provide (stored on your device)
- Profile: your name (if you enter one), birth year, and cycle details such as cycle length, period length, cycle history, and last period start.
- Cycle & health logs: period, intercourse, cervical-mucus, symptom, temperature, LH-test, and pregnancy-test logs.
- Onboarding answers: such as how long you have been trying to conceive and your cycle-related preferences.
- Support messages: what you send us when you contact support.
b. Data from your Oura account (only if you authorize it)
If you choose to link your Oura account, you authorize Conceiva, through Oura's secure OAuth sign-in, to read daily readiness temperature data from Oura's API. Conceiva imports overnight temperature you already recorded; it does not communicate with, or control, any hardware. The imported temperature is used to spot the shift around ovulation and inform your cycle chart. Your Oura access tokens are stored in your device's keychain, and imported temperature is held with your other on-device data. You can disconnect Oura at any time in Conceiva's settings; disconnecting clears the saved tokens and deletes the Oura-derived data Conceiva holds. To fully revoke Conceiva's access to your Oura account, you can also remove it at your Oura account (cloud.ouraring.com). Ōura Health Oy is based in the EU.
c. Apple Health (if you enable it)
If you grant access, Conceiva can read overnight temperature data you already recorded in Apple Health. This import is read-only: Conceiva reads the temperature you approve and keeps it on your device alongside your other data.
d. Usage analytics (only if you turn it on)
If you enable “Share usage data,” Conceiva sends limited, pseudonymous product analytics to PostHog, hosted in the United States (us.i.posthog.com), such as: which screens you open, which features you use and how you move through the app (for example taps, navigation between screens, and whether you add, edit, or delete an entry, but never the contents of what you log), onboarding step progress, and app version and platform. A random device identifier groups events from the same install. We do not attach your name or email, and we never send your detailed cycle, intercourse, symptom, temperature, or test logs. Analytics is off until you opt in, and you can turn it off at any time in Settings.
e. Subscriptions and diagnostics
- Subscriptions: purchases are processed by the Apple App Store; we receive subscription status, not your full payment-card details.
- Diagnostics: basic crash and performance information to keep the app working.
3. How we use your information
- To provide Conceiva's core features, interpreting your logged cycle history, test results, and temperature trends to estimate your fertile window and ovulation and to show your daily conception-chance view.
- To power AI chat and optional photo analysis when you use them.
- To operate, secure, maintain, debug, and improve the Service.
- To process subscriptions and prevent fraud and abuse.
- To provide support and respond to you.
- To comply with legal obligations.
We do not sell your personal information or your health data, and we do not use your health data for advertising.
4. AI chat and photo analysis
If you use Conceiva's AI chat, your message and a summary of your Conceiva data (such as your cycle dates, logged symptoms, and test results) are sent, through our backend, to OpenAI in the United States so the assistant can give you a personalized answer. If you use optional photo analysis (LH test strip or cervical-mucus photos), the image you choose is sent the same way. Our backend is hosted on Railway (conceiva-production.up.railway.app); it relays these requests and does not retain your photos server-side. The first time you use either feature, Conceiva asks for your explicit agreement before anything is sent, and if you don't agree, nothing is sent. We do not use these features to advertise to you or to sell your data. If you don't use these features, this data isn't sent.
5. How we share information (our processors)
We share information only as needed to run Conceiva, with service providers acting on our behalf:
- Ōura Health Oy (EU): source of the temperature data you authorize us to import.
- OpenAI: powers AI chat and optional photo analysis (via our backend).
- PostHog: pseudonymous product analytics, only if you opt in, hosted in the United States.
- Apple App Store: subscription payments.
- Railway: cloud hosting for our backend, which relays AI requests and the Oura sign-in.
We may also disclose information if required by law, to protect rights and safety, or in connection with a business transfer. Each provider is bound by contractual confidentiality and security obligations.
6. Your consent choices
- Usage analytics is off until you opt in (“Share usage data,” in onboarding or Settings) and can be turned off any time. When it is off, Conceiva does not send your product-analytics events.
- Oura import runs only after you explicitly authorize it through Oura's sign-in, and you can disconnect at any time. Disconnecting deletes the Oura-derived data Conceiva holds.
- Apple Health import runs only if you grant read access in iOS, and you can revoke it any time in the Health app's sharing settings.
- AI chat and photo analysis ask for your explicit agreement before they first send your message or photo to OpenAI. If you don't agree, nothing is sent.
7. Legal bases (UK/EU users)
- Consent: for health-data processing, the Oura and Apple Health imports, AI chat and photo analysis, and optional analytics. You may withdraw it at any time.
- Contract: to provide the Service you sign up for, including subscriptions.
- Legitimate interests: to secure, maintain, and improve the Service, balanced against your rights.
- Legal obligation: where the law requires processing.
8. Data security
We protect your information with technical and organizational safeguards. Your data stays on your device, in Conceiva's private app storage, which is protected by your device's built-in app data protection, which encrypts app storage at the file level and ties it to your device passcode. Sensitive credentials such as your Oura access tokens (if you link Oura) are kept in your device's keychain. Data sent to our backend or providers is encrypted in transit (HTTPS). No system is perfectly secure, but we work to protect your data and respond promptly to incidents.
If a data breach affects your personal data and the law requires it, we will notify you and the relevant authorities without undue delay.
9. Data retention
On your device: your data stays until you delete it in the app or remove the app.
Photos: images you submit for photo analysis are processed to produce the result and are not retained on our servers.
Analytics, if you opt in: we retain product-analytics data (held by PostHog) for up to 2 years, after which it is deleted. If you delete your data in the app or ask us to, we remove your analytics records sooner.
Deletion requests: when you delete your data in the app we erase it from your device, opt out and reset your analytics identifier, and request erasure of the server-side analytics record tied to your device identifier. Server-side deletion is actioned within one month; copies in routine backups are overwritten within 90 days. We keep limited records only where the law requires it.
10. Your rights and how to use them
Depending on where you live, you may have the right to access, export, correct, delete, restrict, or object to processing of your data, and to withdraw consent. Conceiva gives you direct controls:
- Export (Art. 15 / 20): Settings → “Your data” → Export my data gives you a structured JSON copy of what Conceiva stores on your device.
- Delete (Art. 17): Settings → Delete all my data wipes your on-device data, opts out and resets analytics, and requests erasure of server-side analytics records tied to your device identifier.
- Withdraw consent: disconnect Oura or Apple Health, or turn off analytics, in Settings; to withdraw consent for health-data processing, delete your data (Settings → Delete all my data), since Conceiva needs that data to function.
You can also email [email protected] to exercise any right. UK and EU users may also complain to their local data-protection authority (in the UK, the ICO).
To protect your data, we may need to verify your identity before acting on a request, usually by confirming it comes from the email you contact us with. We respond within one month. If we need more time or cannot act on a request, we will explain why.
11. Children's privacy
Conceiva is intended for adults who are trying to conceive. We apply a region-aware minimum age, checked at onboarding: 16 in the US, 18 in the UK, and the applicable digital-consent age (13 to 16) elsewhere in the EU/EEA. We do not knowingly collect data from children below the applicable age; if you believe a child has provided us data, contact us and we will delete it.
12. International data transfers
Grow Labs LLC operates from the United States, and some providers (for example, analytics, backend hosting, and AI processing) process data in the United States, while Oura is based in the EU. Where we transfer personal data out of the UK or EEA, we rely on appropriate safeguards such as the UK IDTA or EU Standard Contractual Clauses.
13. United States
Grow Labs LLC is based in the United States, at 8 The Green, Suite A, Dover, DE 19901. If you live in the US, the following applies in addition to the rest of this policy.
Your health and cycle data is never sold and never shared with advertising networks. We do not sell your personal information, and we do not sell your consumer health data. We will not share or sell your consumer health data without your separate, valid authorization.
Your choices and rights. Depending on your state, you may have the right to know what we collect, to access or delete your data, to correct it, and to limit the use of sensitive information. You can export or delete your data in the app (Settings, then Your data) or email [email protected]. We will not discriminate against you for exercising these rights.
14. Changes to this policy
We may update this Privacy Policy from time to time. When changes are material, we will update the “Last updated” date and, where appropriate, notify you in the app.
15. Contact us
Grow Labs LLC
Email: [email protected]
