Privacy notice for the Fertilita app

This notice applies to the Fertilita app for iPhone and Android. Part B below covers the website fertilita.app.

Last updated: 14 November 2026

The key points

• Fertilita is not yet available in the app stores. Part A describes processing in the app once it is published. We will add features we unlock later to this notice before they become available.
• We already process the email addresses on our waitlist (section 4), messages to our support (section 8) and technical data when you visit this website (Part B).
• Fertilita stores your health information, documents and photos encrypted on your device. Fertilita has no cloud storage and no syncing of this data.
• To sign you in and check your access, we process account, device and timing information on our servers. Health information does not pass through our servers.
• The app contains no analytics or advertising software and no tracking.
• You can request deletion of your account at any time via fertilita.app/account-deletion or by email to data@fertilita.app.

1. Who is responsible

Burak Er Dr.-Eckener-Platz 1b 63263 Neu-Isenburg Germany Email: data@fertilita.app We have not appointed a data protection officer. For any privacy question, you can reach us at data@fertilita.app.

2. What stays on your device

What you record in Fertilita is stored by the app on your device. This includes in particular:

• your treatment journey, treatment steps and appointments,
• medications and doses,
• cycle information, findings, test results and details about your cryo reserve,
• journal entries, mood and reflections,
• documents, scans and photos, for example of pregnancy tests,
• treatment costs,
• questions for your clinic,
• your profile, such as an optional first name, your language and your treatment phase.

This data is encrypted on your device. The key is kept in your device's protected key storage. We have no access to this data, and it is not transferred via our servers.

Fertilita doesn't offer its own cloud backup or cross-device recovery of this data. The encrypted local data files are configured to be excluded from the operating system's supported backups, and the key is bound to this device. This does not guarantee exclusion from every backup or transfer method. If you lose your device, delete the app or set up a new device, this data may be lost. Signing in or restoring a purchase does not restore this data.

Camera and photos: The app opens the camera or your photo library only when you choose to, for example to capture a test or a document. The images are stored encrypted in the app. Originals in your photo library stay there.

App lock with Face ID or fingerprint: If you turn on the app lock, your operating system checks your biometrics. Fertilita only receives the result of whether unlocking succeeded.

Reminders on this device: The app schedules local reminders and alarms through your operating system. They may appear on your lock screen. You decide in the app and in your device settings how much a reminder shows.

Exports and sharing: When you create a PDF report or share content, you decide where it goes, for example to your clinic, by email or to a files app. Copies you pass on this way are subject to the terms of the recipient or service concerned. We can't retrieve or delete them.

Exchange rates: When you convert costs into another currency, the app fetches public exchange rates from the European Central Bank. Only the currency and date are sent, never amounts or health information. As with any request over the internet, the European Central Bank sees your IP address.

3. Your Fertilita account

You can complete onboarding without signing in. To use the app, you need valid access (see section 4). You need a Fertilita account for account-based features, such as unlocking access through the waitlist or deleting your account. If you use a Fertilita account, we process:

• your email address,
• an internal account ID,
• information about your sign-ins and sessions, such as time and sign-in method,
• technical security information needed for secure sign-in.

Signing in by email: We send you a confirmation code by email. We use the email service Brevo to send it. Brevo receives your email address, the code and the message. The email contains no health information.

Your account is stored by our service provider Supabase. Our Supabase project is located in the Frankfurt am Main region (EU). Legal basis: we process this information to provide your account and the app to you (Art. 6(1)(b) GDPR).

4. Your access, subscriptions and purchases

You buy access to Fertilita through Apple's App Store or Google Play. Payment, receipts, cancellation and refunds are handled by the respective store. We don't receive payment details such as card numbers.

To check whether your access is active, we use the service RevenueCat. For this, RevenueCat receives:

• your internal Fertilita account ID and, where applicable, earlier or temporary IDs of the same installation,
• information about your purchases and subscriptions from the store, such as product, term, trial and status,
• receipts or purchase tokens, transaction and product identifiers, prices, currency and offer information needed to match purchases with the store,
• technical device and app information, such as operating system, device model, app and SDK version, language and store country; on iOS, also the available vendor device identifier (IDFV) and the tracking authorization status,
• your IP address, which is visible when a connection is made.

The app doesn't ask for tracking permission and doesn't use an advertising ID. The app does not send treatment entries, diagnoses, medications, documents or journal content to RevenueCat. Account and purchase information does, however, reveal that you use Fertilita.

Cancelling: You cancel a subscription in the settings of your App Store or Google Play account. Deleting your Fertilita account does not cancel a subscription or a free trial.

Waitlist: Before launch, you could join our waitlist through the sign-up form on our earlier preview website. The waitlist is closed; we are not accepting new entries. We promised the people on the waitlist one year of Fertilita Premium free of charge. We process your email address to keep this promise: if you sign in with this address, we link the entry to your account and unlock your access for one year from the day you redeem it. You can redeem the promise until and including 1 February 2027. So that access isn't granted more than once, the entry is kept even after you delete your account. We delete entries that were not redeemed no later than three months after the redemption deadline, and redeemed entries no later than three months after the free year of access has ended, unless we exceptionally still need them to handle a claim. For this, your address is stored with Supabase (for unlocking access) and with Brevo (our email delivery service). We only send you promotional emails if you have consented to them. If you don't want any emails from us or would like your entry deleted, a message to data@fertilita.app is enough; deleting the entry also ends the promise. Legal basis: performance of a contract (Art. 6(1)(b) GDPR); for keeping the waitlist entry after account deletion, our legitimate interest in granting access only once (Art. 6(1)(f) GDPR).

5. Partner access

Partner access is not available yet. Before we unlock it, we will add the information it requires to this notice.

6. Reminders via our servers

Reminders via our servers are not available yet. The app currently schedules reminders only locally on your device (section 2). Before we unlock reminders via our servers, we will update this notice.

7. Technical logs and errors

When the app communicates with our servers, technical logs are created, such as IP address, time, service called and result. Our service provider Supabase stores such logs for secure operation. Depending on the plan, Supabase keeps these logs for no longer than seven days. Our own server functions only log brief status information and no health information.

Fertilita contains no crash reporting tool of its own and no analytics software. If you have allowed your device to share diagnostic data with app developers, Apple or Google provide us with aggregated crash reports. Legal basis: our legitimate interest in a secure, working service (Art. 6(1)(f) GDPR).

8. Support

When you write to us, we process your message and your email address to reply to you. Our mailbox is run on Zoho Mail. Please don't send us health information unless we ask for it in a specific case. Legal basis and retention period: if your request concerns your access, a subscription, your account or a contract with us, we process it to perform the contract (Art. 6(1)(b) GDPR). For other requests, we rely on our legitimate interest in answering enquiries (Art. 6(1)(f) GDPR). We delete your messages once your request has been dealt with, as a rule no later than twelve months after the last message. We only keep them longer if a legal obligation requires it or we need them for a specific further purpose, for example to clarify a claim.

9. Service providers and other recipients

We don't pass your data on to advertising partners or data brokers, and we don't sell it.

The following service providers process data on our behalf:

Acting under their own responsibility:

• Apple and Google as operators of the app stores and payment,
• the European Central Bank when public exchange rates are fetched.

10. Transfers outside the EU

Some service providers are based in the USA or may access data from there, for example for support or operations. Even though our Supabase project is located in Frankfurt, logs, support access or subcontractors may be located outside the EU. With Supabase and RevenueCat, the EU Standard Contractual Clauses have been agreed for this purpose; they form part of these providers' data processing agreements. Vercel, the website's hosting provider, is certified under the EU-US Data Privacy Framework. You can request a copy of the safeguards at data@fertilita.app.

11. Deleting your account

Deletion directly in the app isn't available yet. You can request deletion of your account via fertilita.app/account-deletion or by email to data@fertilita.app. Before deleting anything, we check that the request comes from you.

What happens then: We delete your account, your sign-in identities and your sessions on our servers.

What remains:

• Data on your device. You can delete it in the app or uninstall the app; on iOS, entries in the system keychain may remain.
• Subscriptions and purchases with Apple or Google. Cancel them there. The stores manage purchase receipts.
• The waitlist entry, see section 4.
• Technical logs and backups of our service providers until their periods expire.
• Copies you exported or shared yourself.

12. How long we keep data

We only keep data as long as we need it for the respective purpose or are legally required to keep it. Specific periods are given in the relevant sections.

13. Your rights

You have the right to

• access your data (Art. 15 GDPR),
• rectification (Art. 16 GDPR),
• erasure (Art. 17 GDPR),
• restriction of processing (Art. 18 GDPR),
• data portability (Art. 20 GDPR),
• object to processing based on legitimate interests (Art. 21 GDPR),
• withdraw consent with effect for the future (Art. 7(3) GDPR).

To exercise these rights, write to data@fertilita.app. You can view, change, export and delete data stored only on your device yourself in the app.

You can also lodge a complaint with a data protection supervisory authority, for example the Hessian Commissioner for Data Protection and Freedom of Information.

14. No automated decisions

We don't make automated decisions about you and don't create profiles for advertising or analytics.

15. Obligation to provide data

You are not legally or contractually obliged to provide us with data. Without an email address, however, we can't provide you with an account.

16. Minimum age

Fertilita is intended for adults.

17. Changes

If the app or the law changes, we update this notice. You can always find the current version at fertilita.app/privacy.

---

Part B: Website fertilita.app

What this website doesn't do

This website sets no cookies and uses no analytics, advertising pixels, heatmaps or third-party embeds. Fonts are served from this website.

Hosting

When you open a page, the server processes technical data such as your IP address, the time and the page requested, in order to deliver the website securely. Hosting provider: Vercel Inc., 440 N Barranca Ave #4133, Covina, CA 91723, USA. Legal basis: our legitimate interest in a secure website, Art. 6(1)(f) GDPR.

Account deletion form

The form on the account deletion page only prepares an email in your own email app. The website itself sends and stores nothing in the process.

Contact form

When you write to us using the contact form, we process your email address and your message in order to reply to you. The website stores neither. A server function at our hosting provider Vercel receives the details and sends them as an encrypted email to our mailbox at Zoho Mail (Zoho Corporation B.V., Netherlands). We set your email address as the reply-to address. We then handle your message like other support requests (Part A, section 8). To prevent abuse, Vercel processes technical data such as your IP address; the form sets no cookies. The legal basis and retention period are as set out in Part A, section 8.