Misan Privacy Policy (GDPR & CCPA Compliant)

Last updated: [21st August, 2025]

Misan (“we,” “our,” or “us”) values your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, store, and protect your information when you use the Misan mobile application (“App”) and related services.

By using Misan, you agree to the practices described in this policy.


1. Information We Collect

We may collect:

  • Account Information (optional): Name, email, or phone number if you register.
  • Health Data: Menstrual cycle details, fertility information, moods, symptoms, and notes you log.
  • Device Data: Device type, operating system, app usage patterns.
  • Location Data (optional): Only if you enable location features (e.g., finding clinics or pharmacies).

2. Legal Basis for Processing (GDPR)

If you are in the European Union (EU) or United Kingdom (UK), we rely on the following legal bases under GDPR:

  • Consent: When you provide health data, enable location, or opt in to notifications.
  • Contract: To provide services when you create an account or use the app.
  • Legitimate Interests: For improving our services, ensuring security, and preventing misuse.
  • Legal Obligations: If required to comply with applicable laws.

3. How We Use Your Information

  • Provide accurate period, ovulation, and fertility tracking.
  • Deliver personalized health insights and educational content.
  • Improve app performance and features.
  • Provide customer support.
  • Send reminders/notifications if enabled.

We never sell personal or health data to third parties.


4. Data Storage & Security

  • All health data is encrypted at rest and in transit.
  • We implement industry-standard security protocols.
  • Data is stored on secure servers, potentially outside your country of residence, with safeguards for international transfers.

5. Sharing of Information

We may share limited information:

  • With service providers who support our operations (e.g., hosting, analytics).
  • If required by law or regulation.
  • With your explicit consent, e.g., exporting or sharing your data.

6. Your Rights Under GDPR

If you are in the EU/UK, you have the right to:

  • Access your data.
  • Rectify inaccurate or incomplete data.
  • Erase your data (“Right to be Forgotten”).
  • Restrict processing in certain circumstances.
  • Data Portability: Request your data in a portable format.
  • Withdraw Consent at any time without affecting prior lawful processing.
  • Lodge a Complaint with your local Data Protection Authority.

To exercise these rights, contact us at support@misanhealth.com.


7. Your Rights Under CCPA (California)

If you are a California resident, you have the right to:

  • Know what categories of personal data we collect and why.
  • Request access to the personal data we hold about you.
  • Request deletion of your personal data (subject to legal exceptions).
  • Opt-out of the sale of personal data (note: we do not sell personal data).
  • Non-discrimination for exercising privacy rights.

To exercise these rights, contact us at support@misanhealth.com.


8. Children’s Privacy

Misan is not intended for users under 13 (or the minimum legal age in your country). We do not knowingly collect data from children.


9. Data Retention

We retain your data only as long as necessary to provide our services or comply with legal obligations. You may request deletion at any time.


10. Changes to This Policy

We may update this Privacy Policy periodically. Updates will be posted here with a new “Last Updated” date.


11. Contact Us

For questions or privacy requests:

Misan Health
📧 support@misanhealth.com
🌐 www.misanhealth.com

If you are in the EU/UK, you may also contact your local Data Protection Authority.