This page describes how GetMyMood: Period & Cycle Tracker addresses the 15 standards of the UK Information Commissioner's Office (ICO) Age Appropriate Design Code (AADC), also known as the Children's Code.
1. Best interests of the child
The app is designed to help users of all ages track their menstrual cycle in a safe, informative, and supportive way. Features are focused on health awareness and education. No design choices are made that prioritise commercial interests over the well-being of young users.
2. Data protection impact assessments
We assess privacy risks for features that process health-related data, including considering the impact on younger users. As the app evolves, we review new features for privacy implications before release.
3. Age appropriate application
Users may optionally indicate their age group during onboarding. The app accepts users aged 14 and older. The same high-privacy defaults apply to all users regardless of age. Content is appropriate for all age groups within the intended audience.
Where required by applicable law or app-store policy, the app may also use age signals provided by the app store or operating system — Apple's Declared Age Range on iOS and Google Play Age Signals on Android — to help confirm eligibility before health-data features become available. These platform mechanisms share only a coarse age range and, where applicable, a parent or guardian approval status; the app does not request or store exact birth dates. Where these checks apply, access to health-data features may be limited or paused if a required signal indicates the user is under the minimum age, if a required parent or guardian approval is pending or declined, or if a required signal is unavailable. As described on our Privacy Policy page, these age signals and any derived eligibility state are used only to determine eligibility and are never used for advertising, analytics, or profiling.
4. Transparency
Our Privacy Policy is written in clear, accessible language. We explain what data is collected, why, and how it is used. The registration screen presents two separate consent checkboxes: a required health data processing consent so users understand and agree to health data processing before creating an account, and a separate, optional health analytics consent that is unchecked by default.
5. Detrimental use of data
We do not use personal data in ways that are detrimental to users of any age. Health data is never used for individual profiling, behavioural advertising or cross-context targeting, or content manipulation. Analytics data is bucketed and pseudonymized.
6. Policies and community standards
The app does not include public community features, user-generated public content, or messaging. The optional Partner Sharing feature lets a user privately share selected cycle information with one invited partner; sharing is user-initiated, revocable at any time, and — beyond the current cycle phase and cycle day, which are always visible while sharing is active — limited to categories the user selects. There is no public or many-to-many interaction, so there are no community standards to enforce.
7. Default settings
All users, including those under 18, receive the highest-privacy defaults:
- Ads are non-personalized by default.
- Health-related analytics require separate, explicit opt-in consent at registration and are not bundled with the required data processing consent.
- No data sharing with third parties for marketing or behavioural advertising.
- No precise or device-based location tracking, and no location permissions are requested. Analytics includes only coarse, IP-derived approximate location (such as country, region, or city) used in aggregate; the IP address is not stored.
- Pregnancy likelihood display is off by default.
8. Data minimisation
We collect only the data necessary to provide the tracking service. Age group, display name, and goals are optional. Sensitive analytics values such as cycle length and period length are reported as bucketed ranges rather than exact values; a limited set of health-related analytics events — collected only with separate, optional consent — includes specific values such as the current cycle day. We do not collect persistent hardware identifiers (such as IMEI or serial numbers) or the advertising ID (the Android advertising-ID permission is blocked), and we do not use identifiers to track users across other companies' apps or websites. Analytics, in-app messaging, and crash reporting use app-scoped, resettable pseudonymous device identifiers (such as a Firebase installation identifier); for signed-in users, analytics and crash reports are additionally keyed to a hashed, account-derived telemetry identifier that cannot be reversed to the account identity and stops being used when the account is deleted. We do not collect precise location, contacts, photos, or other sensitive device data.
9. Data sharing
We do not sell, rent, or share personal data for cross-context behavioural advertising. Third-party processors, including Firebase and Google, process data on our behalf under contractual, confidentiality, and security obligations solely to operate the service. No user data is shared with data brokers or marketing partners. Separately, a user may direct us to share selected cycle information with one invited partner via Partner Sharing, as described in the Privacy Policy.
10. Geolocation
The app does not request, collect, or use precise or device-based geolocation data, and no location permissions are requested on any platform. Our analytics provider (Firebase/Google Analytics) derives approximate location (such as country, region, or city) from the IP address of analytics requests; the IP address is used transiently and is not logged or stored, and this coarse location is available to us only in aggregated reporting and is never used for profiling or targeting. Amplitude, our other analytics provider, is configured not to record IP addresses or derive location from them.
11. Parental controls
The app does not operate its own custom parental-controls system. Instead, where required by applicable law or app-store policy, it relies on the parental-approval and supervised-account mechanisms provided by the app store and operating system — Apple's Declared Age Range on iOS and Google Play Age Signals on Android. Through these platform mechanisms, the app may receive a coarse parent or guardian approval status (for example, approval pending, approved, or declined) for a supervised minor, and will limit or pause access to health-data features until a required approval is available. The app does not request or store exact birth dates and does not use these signals for advertising, analytics, or profiling.
Because all privacy settings default to the highest level for all users, no public social or messaging features exist, and the only sharing feature (Partner Sharing) is private, one-to-one, user-initiated, and revocable, the risk profile is low. We encourage users under 18 to review the Privacy Policy with a parent or guardian.
12. Profiling
We do not build individual behavioural profiles for any user. Analytics data is collected in bucketed, pseudonymized form and is not used to build behavioural advertising profiles or make automated decisions with legal or similarly significant effects. Informational in-app messages may be shown based on limited feature-usage signals, as described in our Privacy Policy; no health data is used for behavioural targeting. Health-related analytics are only collected with explicit consent and can be withdrawn at any time.
13. Nudge techniques
The app does not employ dark patterns, manipulative design, or nudge techniques that encourage users to weaken their privacy settings or provide more data than necessary. Notifications are educational reminders, including period and log reminders, and can be fully disabled. Both consent checkboxes at registration are unchecked by default, and the analytics consent is clearly marked as optional.
14. Connected toys and devices
Not applicable. The app does not connect to toys, wearables, or IoT devices.
15. Online tools
The app provides accessible privacy controls:
- Health analytics consent can be withdrawn in Settings > Account and Data.
- Account deletion is available in Settings > Account and Data.
- Individual data categories, including period history and symptoms, can be deleted separately in Settings > Account and Data.
- Ad consent can be managed where the consent form is presented.
- Data portability requests can be made by contacting support@getmymood.com.
Review schedule
This conformance assessment is reviewed when features that affect data collection, analytics, or user interaction are modified, and at minimum annually.