Privacy Policy
IRIS Women's Wellness
Last updated: July 18, 2026
1. What Data We Collect
IRIS collects only the information you choose to share with us. This includes:
- Cycle dates and period tracking data
- Daily check-in data: mood, energy, sleep, and symptoms
- Profile information: name, age, life stage, and language preference
- Cycle length and last period date
When you use the wellness scan, IRIS uses your camera to briefly capture an image of your eye area. The image is processed entirely on your device to estimate wellness indicators (energy, hydration, recovery, irritation, focus readiness, eye moisture, and similar wellness signals). The photo is immediately discarded after analysis — it is never stored, saved, or sent to any server. Only the resulting numerical wellness scores are kept.
2. Apple Health (iOS only)
If you choose to connect Apple Health, IRIS asks your permission to read the following data types to give your wellness insights more context: sleep analysis, heart rate, resting heart rate, step count, heart rate variability, and body temperature. With your permission, IRIS can also write cycle data you log in the app back to Apple Health so your records stay in one place.
Apple Health data is processed on your device and used only to personalize your wellness insights. It is never used for advertising, never sold, and never shared with third parties. You can review or revoke IRIS's Apple Health permissions at any time in the iOS Health app under Sharing → Apps, and disconnecting in IRIS stops all reading and writing immediately.
3. How Your Data Is Stored
Your health data — including cycle dates, check-ins, mood, symptoms, and scan scores — is stored locally on your device. Your most sensitive wellness information never leaves your phone unless you explicitly choose to sync it.
If you enable sync, your data is stored under a random sync ID on our own backend hosted in the EU (Stockholm) and used solely to restore your data on your devices. Your body, your data, your device.
4. Analytics & App Improvement
To improve IRIS, we collect anonymous usage events (such as which features are opened and how often). These analytics are sent securely to our own backend hosted in the EU (Stockholm). They do not include any personal health data and are linked only to a randomly generated user ID that has no connection to your name, email, or device identifiers.
Examples of what we track: app opens, feature usage counts, onboarding completion. Examples of what we never track: your mood scores, symptoms, cycle dates, or scan photos.
5. Payments & Subscriptions
If you subscribe to IRIS Premium, your payment is handled entirely by RevenueCat and the Apple App Store or Google Play Store. We never see or store your credit card details, billing address, or payment method. For details on how payment data is handled, please refer to RevenueCat's privacy policy and your app store's terms.
6. Referral Program
If you share your IRIS invite code or use someone else's, we store the code, a random user ID, and the referral's progress (app installed, onboarding completed, subscription started) so we can grant rewards. When a referred user subscribes, we confirm the subscription with RevenueCat before a reward is granted. Referral data contains no health information and is deleted with your account.
7. We Never Sell Your Data
IRIS does not sell, rent, or share your personal data with third parties for advertising or marketing purposes. Period. Your wellness information is yours alone.
We do not use your data to build advertising profiles, and we do not allow third-party trackers in the app.
8. Your Rights & Contact
You can exercise your data rights directly in the app — no email required:
- Export your data: Profile → Data & Privacy → Export data gives you a complete copy of everything stored about you (synced data, analytics, referral and community data) in a portable format.
- Delete your data: Profile → Data & Privacy → Delete data permanently removes your data from your device and from our servers. Step-by-step instructions are on our account deletion page.
You also have the right under the GDPR to access, correct, restrict, or object to processing of your data, and to withdraw consent at any time. For anything the in-app tools don't cover, contact us at support@mojjo.se. We respond within 30 days. You can also lodge a complaint with the Swedish Authority for Privacy Protection (IMY).
We're a small team and we genuinely care about your trust.
IRIS is developed by Mojjo AB, Sweden. Governed by Swedish law and the GDPR.