Metryst Privacy Policy
Last updated October 10, 2026
Metryst is an iPhone app made by Cladose LLC, an Illinois limited liability company ("Cladose", "we", "us"). This policy explains what information Metryst collects, how we use it, who receives it, how long we keep it, and the choices and rights you have.
The short version. Metryst handles very personal information, including records of intimate encounters and menstrual periods. We use it only to run Metryst for you. We do not sell it, we do not use it for advertising, and we do not include third-party advertising or tracking code in the app. Your records are encrypted on your iPhone and on our servers, but Metryst is not end-to-end encrypted: our systems hold the keys and can decrypt your synced records in order to back them up, restore them to a new iPhone and deliver what you choose to send to a linked partner.
Some of this information is "consumer health data" under laws such as Washington's My Health My Data Act. Our separate Consumer Health Data Privacy Policy describes that data specifically.
In this policy and in Metryst, "records" means the Events (intimate encounter records), Periods (menstrual period records), unavailable dates and timeline markers you create in Metryst, including their details, answers and notes, and any of these a linked partner sends you that you accept.
Who can use Metryst
Metryst is only for adults aged 18 and older. We do not knowingly collect information from anyone under 18. If you believe a minor is using Metryst, contact privacy@cladose.com and we will delete the account.
Information we collect
Information you enter in the app
- Intimate encounter records ("Events"): the date and, if you choose, the time; activities, positions, locations and other details you select; your answers to built-in and custom questions; and notes you write.
- Menstrual period records ("Periods"): start and end dates you record, and cycle settings you choose. Period forecasts are calculated on your iPhone from your records.
- Unavailable dates: date ranges you mark as unavailable, with an optional reason.
- Timeline markers: titles, dates and notes you add.
- Your customizations: custom activities, positions, locations and questions, and your settings.
- Profile and partner details: your first name (required) and last name (optional), and the names or labels you give to partners.
Account and sign-in information
- When you sign in with Apple, we receive an account identifier from Apple and, if Apple provides it, an email address (often an Apple private relay address).
- Session and device identifiers used to keep you signed in and to sync between your devices.
- Confirmation that you meet the age requirement. This is kept on your iPhone.
Partner linking and sharing
If you link your account with a partner's account, we store the link, invitations, and the items you choose to send or receive, together with their status (for example, waiting for review, accepted or declined).
Metryst has no messaging, chat, profiles, search or directory, and no way to contact someone who has not linked with you. A linked partner sees only your name as you entered it, whether your Premium covers them, the status of items you send, and the records you choose to send. They cannot see your email address, your account details, or any record you have not sent.
Purchases
Subscriptions are sold by Apple. We receive transaction identifiers and subscription status (for example, trial, active, renewed, expired or refunded) so we can turn Premium on or off. We do not receive your payment card details.
Service facts and usage statistics
- Service facts (always collected): facts needed to run the service, such as when your account was created or deleted, subscription changes, partner link and sharing actions (for example, "a share was sent" or "a share was accepted", never what was shared), and error reports that contain no record content (for example, "a sync failed").
- Usage statistics (only if you turn them on): a small set of facts such as onboarding steps completed, whether you have created your first partner or first Event (recorded once, not each time), one "active today" mark per day, which app features you used on a given day, and paywall views and plan selections. These are off unless you choose "Share usage stats" during setup or in Settings. You can turn them off at any time.
Neither of these includes the content of your records. Both are linked to your account through a random identifier, so we treat them as personal information, not anonymous data.
Support and email
If you email us, we receive your email address and whatever you include in your message. Support requests never attach your records automatically.
Our website
This website uses no cookies, analytics, advertising or forms. Our hosting provider processes standard technical information, such as IP addresses, to deliver pages.
How we use information
- To provide Metryst: store, sync, back up and restore your records; show your history, insights and forecasts; and deliver what you choose to send to a linked partner.
- To provide Premium and process subscriptions through Apple.
- To keep Metryst secure, prevent abuse, and investigate and fix errors.
- To respond to your support and privacy requests.
- If you turn on usage statistics, to understand which features are used so we can improve Metryst.
- To comply with the law.
We do not sell personal information, use it for targeted advertising, build advertising profiles, or share it with data brokers. We do not use location-based targeting (geofencing).
Where your information is stored and how it is protected
- On your iPhone, your records are kept in an encrypted database, protected by iOS data protection. You can also turn on App Protection (Face ID, Touch ID or passcode).
- Records travel to our servers over encrypted connections and are stored encrypted with keys we manage. Those keys are stored separately from the encrypted data. Because we manage the keys, our systems can decrypt your synced records. Access is limited to what is needed to run and support the service.
- Our servers are located in the United States.
- No system is perfectly secure. If a security incident affects your information, we will notify you and the authorities as required by law.
Who receives information
- A partner you link with receives only what you choose to send, plus your name as you entered it. Once your partner accepts an item, they keep their own copy. Deleting your account does not delete a copy your partner already accepted.
- Service providers that process information for us under our instructions: Supabase (database, server functions and account services), Apple (Sign in with Apple and App Store purchases), Cloudflare (hosting for this website) and Zoho (email). Their service agreements with us limit their use of information to providing their services to us.
- Legal requirements: we disclose information only when required by valid legal process, such as a subpoena or court order. Where the law allows, we will try to tell the affected user first.
- Business transfer: if Cladose is involved in a merger or sale of assets, information may transfer to the new owner, who must continue to protect it as described in this policy.
How long we keep information
| Information | How long |
|---|---|
| Your records and account data | Until you delete them or your account. After you delete your account, they are removed from our active systems promptly and in any case within 30 days, and expire from backups within 6 months. |
| Usage statistics (if turned on) | 12 months, then deleted. Totals that are not linked to any account may be kept. |
| Error reports | 90 days. |
| Subscription and service facts | While your account exists; deleted with your account. |
| Account-deletion record | A minimal record that a deletion request was made and completed (no record content, names or notes), kept for 24 months to document the request. |
Your choices and rights
- See and export your data: Settings, then Account, then Export My Data.
- Correct your data: edit any record or your profile in the app.
- Delete your data: delete individual records in the app, or delete your whole account in Settings, then Account, then Delete Account. Deleting your account does not cancel an Apple subscription; manage that in your Apple Account settings.
- Usage statistics: turn them on or off at any time in Settings.
- Withdraw consent: you can withdraw your consent to our collection of your records by deleting your account, and stop sharing at any time by not sending items or by ending a partner link.
- Request by email: you can also ask us to confirm what we hold, provide a copy, list the third parties that received your information, or delete it, by emailing privacy@cladose.com. We may need to verify that the request comes from you. We respond within 45 days (we may extend once by up to 45 days and will tell you if we do). These requests are free.
- Appeal: if we decline a request, you can appeal by replying to our decision or emailing privacy@cladose.com with "Appeal" in the subject. We will answer in writing within 45 days and explain how to contact your state's Attorney General if you disagree.
We will not treat you differently for exercising these rights.
Changes to this policy
We will post changes on this page and update the date above. If we make a material change, we will tell you in the app before it takes effect, and we will ask for your consent again before using your information for a new purpose.
Contact
Cladose LLC
Privacy: privacy@cladose.com
Support: support@cladose.com
Security reports: security@cladose.com