Calda — Privacy Policy

Last updated: April 18, 2026

CrashBytes ("we", "our", or "us") operates the Calda mobile application, a menopause and HRT tracker available on the Apple App Store (iOS) and the Google Play Store (Android). Calda is built around a privacy-first principle: your health data stays on your device. This policy explains exactly what that means.

Health Data Stays On Your Device

The sensitive information you enter in Calda — including but not limited to the following — is stored only on your device and never transmitted to CrashBytes servers:

  • Menopause and perimenopause symptoms (hot flashes, mood, sleep quality, etc.)
  • Menstrual cycle data
  • Hormone replacement therapy (HRT) medications, dosages, and schedules
  • Medication adherence and reminders
  • Personal notes and journal entries
  • Insights and analysis generated from your data

We do not sell this data. We do not share this data. We do not have access to this data. It exists only in Calda's local database on your phone.

Health Connect Integration (Android)

On Android, with your explicit permission, Calda reads the following data types from Google Health Connect to enrich your symptom tracking:

  • Sleep sessions
  • Heart rate
  • Steps
  • Menstruation records

These reads happen on-device. Calda does not transmit Health Connect data off your device. You can revoke any of these permissions at any time via Android Settings → Apps → Health Connect → Permissions, and the app will continue to function without them.

Analytics (Firebase Analytics)

We use Google Firebase Analytics to understand how people use Calda in aggregate. We send only non-sensitive app interaction events — for example:

  • Which screens are visited
  • Which features are used (but not the underlying symptom or medication data)
  • Purchase events (Pro upgrade) — product ID only, no payment details
  • App performance metrics, device type, and OS version

We never send any health data, symptom content, medication names, cycle information, or Health Connect readings to Firebase. Analytics data is pseudonymous and cannot be tied back to you.

Crash Reporting (Firebase Crashlytics)

Firebase Crashlytics collects crash reports so we can fix stability issues. A report includes:

  • Device state at the time of the crash
  • Device model and OS version
  • Stack trace information

Crash reports do not contain personally identifiable information and do not contain the contents of your symptom or medication records.

Push Notifications (Firebase Cloud Messaging)

Medication and symptom reminders are scheduled locally on your device. We use Firebase Cloud Messaging only for rare operational push notifications, such as notifying users of a security update. We do not send your health data to FCM, and we never target notifications based on the contents of your records.

In-App Purchases

Pro subscriptions and in-app purchases are processed entirely by Apple (App Store) or Google (Google Play Billing). We do not collect, process, or store any payment information, credit card numbers, or billing details.

Information We Do NOT Collect

  • Your real name, email, phone number, or mailing address
  • Your precise or approximate location
  • Your contacts or address book
  • Photos, camera, or microphone access
  • Advertising identifiers (we do not serve ads and have disabled Android's AD_ID)
  • Account or login information (no accounts required to use Calda)
  • Any data from integrated health services beyond the specific Health Connect types listed above

Data Storage and Security

Your health data is stored in Calda's local database on your device, protected by the operating system's application sandbox. Analytics and crash data are stored on Google Firebase servers and are subject to Google's Privacy Policy. We do not operate any servers that hold your personal health information.

Not A Medical Device

Calda is a consumer wellness tracking tool. It is not a medical device, does not provide medical advice, diagnosis, or treatment, and is not regulated under HIPAA (CrashBytes is not a covered entity). Always consult a qualified healthcare professional for medical decisions, including HRT and menopause management.

Children's Privacy

Calda is intended for adults and is rated 18+. We do not knowingly collect any information from children.

Third-Party Services

  • Apple — App Store distribution and purchases on iOS
  • Google (Google Play Services, Google Play Billing, Health Connect) — Play Store distribution, purchases, and on-device health data access on Android
  • Google Firebase — Analytics, Crashlytics, and Cloud Messaging

Your Rights

You can:

  • Use Calda entirely offline — none of your health data leaves your device
  • Delete the app to remove 100% of your local health records
  • Revoke Health Connect permissions via Android system settings
  • Opt out of analytics by disabling background app refresh or resetting your advertising ID in system settings
  • Request deletion of any trailing analytics or crash data by emailing [email protected] — see our data deletion page for full instructions
  • Export your data to CSV or PDF from within the app for your own records

Changes to This Policy

We may update this privacy policy from time to time. Changes will be posted on this page with an updated revision date. Material changes will be announced in-app.

Contact Us

If you have questions about this privacy policy, contact us at:

Email: [email protected]
Website: crashbytes.com