Privacy Policy
This Privacy Policy explains how the Sharky mobile app (“Sharky”, “we”, “us”) handles your information. Sharky is a general wellness and meal-planning app that helps you plan meals around your menstrual cycle. It does not provide medical advice, diagnosis or treatment.
Some of the information you can share with Sharky is about your health, so we explain plainly what we collect, why, and the choices you have.
1. Who is responsible for your data
The data controller is:
Chrouqi AbdelfattahVia Cisa Sud 38
Santo Stefano di Magra (SP), La Spezia
Italy
Email: support.sharky@gmail.com
Sharky may be presented under the brand name Brothers Media Agency.
2. Information Sharky uses
Information you enter in the app
| Category | Examples |
|---|---|
| Profile | Your first name, dietary needs (for example vegetarian or gluten-free), cuisines you like, your goals. |
| Cycle information (health data) | Date your last period started, typical cycle and period length, cycle regularity, the period days you log, whether you use hormonal contraception. |
| Symptoms and wellbeing (health data) | Symptoms and period experiences you select during onboarding, what makes eating harder for you during your cycle, and daily check-ins with your mood, energy level and symptoms, together with the cycle day or phase Sharky estimated for that check-in. |
| Food and planning | Your meal plan, favorite recipes, shopping list, and recipes you add yourself (title, ingredients, steps, a link if you enter one). |
You choose what to enter. Cycle, symptom, mood and energy information is only processed when you provide it.
A profile photo and photos you attach to your own recipes stay on your device. They are not uploaded.
How Sharky uses health information
Sharky uses the cycle and wellbeing information you provide to:
- estimate where you are in your cycle and show cycle context;
- personalize your meal plan and recipe suggestions;
- provide wellness features such as check-ins and your calendar;
- sync this information with your account, only if you choose to allow it (see section 3).
Cycle estimates are approximate. Sharky is not a medical service and is not a method of contraception.
Account information (optional)
You can use Sharky without an account. If you create one, you sign in with Apple or Google. We receive an account identifier and, depending on the provider and your choices, an email address (Apple may give us a private relay address). We do not receive your Apple or Google password.
Purchase information
Subscriptions are bought through Apple. Apple processes the payment; we never see your card details. Our subscription provider RevenueCat receives purchase records (such as product, purchase date, renewal status and an app-specific customer ID) so Sharky can tell whether your subscription is active.
Notifications
If you allow notifications, reminders are scheduled locally on your device. We do not send push notifications from a server.
What we do not do
- We do not sell your personal data.
- We do not use your data for advertising, and Sharky contains no advertising or third-party analytics SDKs.
- We do not use your health data to make automated decisions with legal or similarly significant effects.
3. Where your data is stored
On your device. Everything you enter is stored on your device so the app works offline.
With your account, if you choose. If you create an account, your meal plan, favorites, shopping list and your own recipes are saved with your account so you can restore them on another device.
Your cycle information, symptoms and check-ins are saved with your account only if you allow it. Sharky asks you once, with two options: “Allow cloud sync” or “Keep this data on this device”. Declining does not limit your access to Sharky. Until you choose, this data stays on your device. You can change your choice anytime in Settings → Privacy & data. If you switch to “on this device only”, new changes stay on your device; data already saved with your account remains there until you delete your account (see section 7).
4. Why we use your data, and our legal bases
| Purpose | Legal basis (GDPR) |
|---|---|
| Creating your meal plan and showing cycle-based guidance | Performance of our contract with you (Art. 6(1)(b)). For health data, your explicit consent (Art. 9(2)(a)), which you give by entering this information to receive the service. |
| Saving cycle and wellbeing data with your account | Your explicit consent (Art. 9(2)(a)), given through the cloud sync choice. You can withdraw it anytime in Settings. |
| Your account, sign-in and restoring data on a new device | Performance of contract (Art. 6(1)(b)). |
| Managing your subscription | Performance of contract (Art. 6(1)(b)). |
| Answering support requests | Performance of contract or our legitimate interest in helping you (Art. 6(1)(f)). |
| Complying with legal obligations (for example tax records) | Legal obligation (Art. 6(1)(c)). |
Withdrawing consent does not affect processing that happened before you withdrew it.
5. Service providers
We use these providers to run Sharky. They process data on our behalf and only for these purposes:
- Supabase: account sign-in and storage of the data you choose to save with your account. This data is stored in the European Union (Frankfurt, Germany).
- RevenueCat: subscription status.
- Apple and Google: sign-in (if you choose them). Apple also handles App Store purchases.
Some providers, such as RevenueCat, Apple and Google, may process data outside the European Economic Area. Where this happens, the transfer relies on safeguards recognized under the GDPR, such as an adequacy decision or the European Commission’s Standard Contractual Clauses.
6. How long we keep data
- Data on your device stays until you delete it, sign out (which removes your account data from the device), or delete the app.
- Data saved with your account is kept while your account exists, and is deleted when you delete your account.
- Support emails are kept as long as needed to help you, and then deleted.
- Purchase records are kept by Apple and RevenueCat as required for billing and legal purposes.
7. Deleting your account
You can delete your account anytime in Sharky: Settings → Account → Delete account. This permanently deletes your account and the data saved with it, then removes it from your device. Deleting your account does not cancel an Apple subscription. You can cancel it in your Apple ID subscription settings.
8. Your rights
Under the GDPR you have the right to access your data, correct it, delete it, restrict or object to its processing, receive it in a portable format, and withdraw consent at any time. To exercise these rights, email support.sharky@gmail.com. We will reply within one month.
You also have the right to lodge a complaint with a supervisory authority. In Italy this is the Garante per la protezione dei dati personali (garanteprivacy.it).
9. Security
Data saved with your account is transmitted over encrypted connections and protected by access rules, so each account can reach only its own data. No method of storage or transmission is completely secure, but we work to protect your information and limit what we collect.
10. Children and eligibility
Sharky is not designed for children. Where applicable law requires consent or authorization from a parent or legal guardian for the processing of a minor’s personal data, a minor may use Sharky only with that consent or authorization. If you believe a minor has provided personal data without the required consent, contact us and we will delete it.
11. Changes to this policy
If we change this policy, we will update the effective date above. If the changes are significant, we will tell you in the app.
12. Contact
Questions about privacy: support.sharky@gmail.com