Privacy Policy

IRIS Women's Wellness

Last updated: October 12, 2026

1. What Data We Collect

IRIS collects only the information you choose to share with us. This includes:

When you use the wellness scan, IRIS uses your camera to briefly capture an image of your eye area. The image is processed entirely on your device to estimate wellness indicators (stress, energy, hydration, recovery, fatigue, irritation, focus readiness, eye moisture, and similar wellness signals). The photo is immediately discarded after analysis — it is never stored, saved, or sent to any server. Only the resulting numerical wellness scores are kept.

2. Apple Health (iOS only)

If you choose to connect Apple Health, IRIS asks your permission to read the following data types to give your wellness insights more context: sleep analysis, heart rate, resting heart rate, step count, heart rate variability, and body temperature. IRIS only reads from Apple Health; it never writes any data to it.

Apple Health data is processed on your device and used only to personalize your wellness insights. It is never used for advertising, never sold, and never shared with third parties. You can review or revoke IRIS's Apple Health permissions at any time in the iOS Health app under Sharing → Apps, and disconnecting in IRIS stops all reading immediately.

3. How Your Data Is Stored

Your health data — including cycle dates, check-ins, mood, symptoms, and scan scores — is stored locally on your device. It only leaves your phone if you turn on backup (sync) or “Help us understand women’s health” (see section 4), or if you share something yourself as described below.

If you enable sync, your data is stored under a random sync ID on our own backend hosted in the EU (Stockholm) and used solely to restore your data on your devices.

If you post a community tip, the text (up to 280 characters), your current cycle phase and a random user ID are stored on our server. We read every tip before it is shown to other IRIS users.

Your body, your data, your device.

4. Analytics & App Improvement

To improve IRIS, we collect usage events (such as which features are opened and how often). They are sent securely to our own backend hosted in the EU (Stockholm) and linked only to a randomly generated ID that has no connection to your name, email, subscription or device identifiers.

By default these events contain no health data. If you turn on “Help us understand women’s health” (in onboarding or Settings), your check-ins (mood, energy, sleep, stress, symptoms, bleeding, cervical mucus and lifestyle factors) and your scan scores are included as well, so we can see patterns across many users and improve IRIS. This is optional and based on your explicit consent; you can turn it off at any time in Settings, and deleting your account erases what was shared. Free-text notes and scan photos are never sent.

5. Payments & Subscriptions

If you subscribe to IRIS Premium, your payment is handled entirely by RevenueCat and the Apple App Store or Google Play Store. We never see or store your credit card details, billing address, or payment method. For details on how payment data is handled, please refer to RevenueCat's privacy policy and your app store's terms.

6. Referral Program

If you share your IRIS invite code or use someone else's, we store the code, a random user ID, and the referral's progress (app installed, onboarding completed, subscription started) so we can grant rewards. When a referred user has paid for a subscription, we confirm the payment with RevenueCat before the person who shared the code receives a reward, which is granted through RevenueCat. Referral data contains no health information and is deleted with your account.

7. We Never Sell Your Data

IRIS does not sell, rent, or share your personal data with third parties for advertising or marketing purposes. Period. Your wellness information is yours alone.

We do not use your data to build advertising profiles, and we do not allow third-party trackers in the app.

8. Your Rights & Contact

You can exercise your data rights directly in the app — no email required:

You also have the right under the GDPR to access, correct, restrict, or object to processing of your data, and to withdraw consent at any time. For anything the in-app tools don't cover, contact us at support@mojjo.se. We respond within 30 days. You can also lodge a complaint with the Swedish Authority for Privacy Protection (IMY).

We're a small team and we genuinely care about your trust.

IRIS is developed by Mojjo AB, Sweden. Governed by Swedish law and the GDPR.