The Sisterhood App - Privacy Policy

Last updated: November 2, 2026

The Sisterhood ("the app") is a free fitness app for Android published by Code7G ("we", "us"). Most of the app - your workouts, food log, steps, reminders, streaks, quests, profile and settings - runs and stays entirely on your device. This policy explains what data leaves your device, why, and the choices you have.

If you have questions, contact us at coder.7g@gmail.com.

1. DATA THAT STAYS ON YOUR DEVICE

The app has no accounts and no sign-in. The following is stored only on your device and is never sent to us or to any third party:

- Profile: the name, bio, picture and account title you choose.

- Training: your workouts, exercises, sets, personal records, training plan, the workouts you save to reuse ("My workouts") and history.

- Food log and calorie goal: the foods you log, your meals and the meals you save to reuse, the water you drink and your water goal, and the body details you enter to calculate your calorie goal (sex, birth year, height, weight, activity level and goal).

- About you (optional, asked at setup and editable in Settings): your fitness goal, experience, where and on which days you train, and any health concerns you tick (such as knees, lower back, pregnancy or heart / blood pressure). They are used only on your device, to adapt your plan and swap or mark exercises, and never for analytics or advertising.

- Steps: your daily step counts, step goal, and the distance and calories estimated from them.

- Recorded workouts: sessions imported from Health Connect (activity, time, distance, active calories, heart rate and the name of the app that recorded them).

- Progress: XP, levels, streaks, quests, the in-app currency (Discipline), cosmetics and reminders.

- Period tracking (only if you turn it on): the days of your periods and their flow, spotting, whether your cycles are regular, vary or are in perimenopause, and any symptoms and moods you choose to log (see section 2).

If you uninstall the app or clear its data, all of this is permanently deleted. We cannot restore it, because we never had a copy.

2. STEP TRACKING, WORKOUTS, PERIOD TRACKING AND HEALTH CONNECT (OPTIONAL)

Step tracking is off until you turn it on. When you do, the app reads your daily step count from one of two sources you choose:

- Health Connect (Android's health data hub, which can include steps from a watch or other apps).

- Your phone's step counter, which requires the "Physical activity" permission.

If you connect Health Connect, you can also allow - each one separately, in Health Connect's own screen - the app to:

- read exercise sessions, distance, active calories burned and heart rate, so workouts your watch or other apps record are added to your workout history as verified workouts (they earn XP, count for quests and keep your streak), and heart rate measured during a workout you logged in the app is shown with it;

- write exercise sessions, so the workouts you log in the app appear in Health Connect for your other fitness apps.

The app reads Health Connect only while it is open. Only sessions from the day you connected onward are imported.

Step data is used only to show your daily steps against your step goal, estimate distance and calories burned, add those calories to your daily calorie budget, and give in-app rewards (step goal XP, step quests, and keeping your training streak on a training day when you reach your step goal). Workout data is used only for your workout history, calorie budget and the same in-app rewards. Step and workout data is stored only on your device. It is never sent to us, to Google (other than Health Connect itself, which runs on your device), or to any third party, and it is never used for advertising or sold.

The use of information received from Health Connect adheres to the Health Connect Permissions policy (https://support.google.com/googleplay/android-developer/answer/12991134), including the Limited Use requirements.

You can turn step tracking off at any time in the app's Steps screen, and remove any of the app's access in Health Connect or in your phone's settings.

Period tracking (optional)

Period tracking (Profile → Cycle) is off until you set it up. When it's on, the app keeps the days of your periods and their flow, and - only if you log them - symptoms and moods. It uses them only to show your calendar, predict your next period from your own history, send the optional reminders you choose, and show an optional training tip on the Home screen around your period. Period data never earns rewards, is never sent to analytics, crash reports or ads, and never leaves your device (unless you choose to share a summary yourself, e.g. with your doctor, through your phone's share sheet) except into Health Connect if you turn that on. The app does not show a fertile window, and its predictions are not a method of contraception.

If you connect period tracking to Health Connect (a separate permission, asked only from the Cycle screen), the app can read menstruation data - the period days your other health apps recorded, from the last year - and write menstruation data - the period days you log in the app, so your other apps agree. Reads and writes happen only while the app is open.

Reminder notifications about your period are private on the lock screen: they show only "The Sisterhood - a reminder for you" until the phone is unlocked.

"Turn off and delete all cycle data" in the Cycle screen deletes every period, symptom and mood stored in the app at once, and removes the period records the app wrote to Health Connect (records from other apps stay theirs).

3. FOOD LOOKUPS (OPEN FOOD FACTS)

When you scan a food barcode or QR code, type a barcode, or tap "Search online", the app asks the Open Food Facts database (openfoodfacts.org, run by the non-profit Open Food Facts association) for that product, over an encrypted connection. Only the barcode or the words you searched for are sent, together with the app's name and version. Your food log, calorie goal, body details, steps and any account or device identifier are never sent. A product you then log is saved on your device, so later lookups of it need no connection.

To show a product's small photo, the app downloads it from Open Food Facts' image server (images.openfoodfacts.org) when that product appears in a list. Like any download, this request reaches their server with your device's IP address; nothing else is sent. A product's photo is kept on your device once the product is logged, and deleted with the product.

Barcode scanning uses Google's code scanner, which runs inside Google Play services: the camera image is processed on your device by Google Play services, and the app itself never gets camera access or images - only the scanned code.

Fasting. If you use fasting mode, the start and end times of your fasts and the plan you chose are stored only on your device, like your food log, and are never sent to us or anyone else.

Plate scan (food photos). When you tap "Scan plate", you take a photo with your phone's own camera app or pick one in the system photo picker, and the app recognises the food in it on your device, with image-recognition models built into the app (run by Google Play services' on-device machine learning). The photo is never uploaded - not to us, not to Google, not to Open Food Facts or anyone else - and no internet connection is used for it. A photo you take is kept only in the app's private cache while the scan screen is open and is deleted when you close it; a photo you pick stays in your gallery, and the app reads only that one photo, once. Only the foods you choose to log are saved, like any other food you log.

Open Food Facts' privacy policy: https://world.openfoodfacts.org/privacy

4. THIRD-PARTY SERVICES THAT COLLECT DATA

The app uses the following services, all operated by Google. Data sent to them is encrypted in transit.

Google Firebase Analytics - to understand in aggregate how the app is used, so we can improve it. It collects app interactions (for example, which screens are opened, workouts finished, levels reached, quests completed and items bought with the in-app currency), a summary of each finished workout (its type, duration, and number of exercises and sets - not the exercises or weights themselves), device and app information, and identifiers such as a Firebase app instance ID and, where allowed, your device's advertising ID. Nothing you type into the app (such as your name, bio, reminder titles or food searches) is sent. This data is pseudonymous: it is not linked to your name or email. We can see it in aggregate in the Firebase console.

Google Firebase Crashlytics - to receive crash and error reports so we can fix bugs. It collects crash logs and diagnostic information (for example device model, Android version and the app's state when it crashed) and a Crashlytics installation identifier.

Google Cloud Firestore (promo codes only) - only used when you redeem a promo code. To limit how often a code can be redeemed on one device, the app sends the code and a one-way hashed device fingerprint (derived from your device's Android ID, manufacturer and model; the original values cannot be recovered from it), and stores how many times that code was redeemed from it and when. If you never redeem a promo code, nothing is sent to Firestore.

Google AdMob (advertising) - the app shows only optional rewarded ads, and only when you choose to watch one (for in-app currency). AdMob may collect your device's advertising ID, approximate location derived from your IP address, app interactions and diagnostic information to show, measure and protect ads, and may use it for personalized ads where you have allowed this. We do not have access to or control over the data AdMob collects. See how Google uses data from apps that use its services: https://policies.google.com/technologies/partner-sites

Google Play Billing - payments for the Premium subscription and other in-app purchases are handled by Google Play. We never see your payment details; we receive only a purchase confirmation from Google Play, and the app asks Google Play whether a subscription is still active. You can manage or cancel a subscription at any time in Google Play (Payments & subscriptions).

These services are governed by Google's Privacy Policy (https://policies.google.com/privacy) and, for Firebase, Firebase's terms (https://firebase.google.com/terms).

5. CONSENT (EEA, UK AND SWITZERLAND)

If you are in the European Economic Area, the United Kingdom or Switzerland, the app shows a consent form (Google's User Messaging Platform) before ads are requested and before analytics and crash reporting are switched on. You can change your choice at any time in the app's Settings ("Privacy Options").

6. YOUR CHOICES

- Analytics and crash reports: turn them off at any time in Settings ("Share encrypted app-based usage analytics", "Share encrypted app-crash reports data").

- Ads personalization: reset or delete your advertising ID, or opt out of personalized ads, in your device settings (Settings > Google > Ads, on most devices). You only see an ad when you choose to watch one.

- Step tracking: turn it off in the Steps screen and revoke access in Health Connect or your phone's settings.

- Period tracking: turn reminders, Home tips and Health Connect sync on or off in Profile → Cycle, or turn it off and delete all its data there.

- Notifications and permissions: change them at any time in your phone's settings.

7. DATA RETENTION AND DELETION

- Data on your device is kept until you delete it, clear the app's data or uninstall the app. Period tracking keeps up to the last two years of logged days.

- Firebase Analytics data is kept according to our Firebase settings, at most 14 months for user-level data. Crashlytics keeps crash reports for 90 days.

- Promo code redemption records are kept for as long as the promo code exists.

- Because the app has no accounts, the data held by Google services is not linked to your identity. To request deletion of any data we may hold about your device, email coder.7g@gmail.com and we will do what is technically possible to remove it.

We do not sell your data. We do not share it with anyone other than the service providers listed above, acting on our behalf.

8. CHILDREN'S PRIVACY

The app is not directed at children under 13 and we do not knowingly collect personal information from children under 13. If you believe a child has provided us data, contact us and we will delete it.

9. PERMISSIONS THE APP USES

- Notifications - workout and meal reminders, quest completions.

- Run at startup (boot completed) - restore your reminders after the phone restarts.

- Vibration - haptic feedback.

- Physical activity - only if you turn on step tracking with your phone's step counter.

- Health Connect: read steps, exercise, distance, active calories and heart rate; write exercise - only the ones you allow, after you connect Health Connect.

- Health Connect: read and write menstruation - only if you turn on period tracking and connect it to Health Connect.

- Internet and network state - ads, analytics, crash reports, promo codes and food lookups.

- Advertising ID - ads and analytics (see section 4).

- Google Play Billing - in-app purchases and the Premium subscription.

The app does not request location, camera, contacts, microphone or storage permissions (the plate scan uses your phone's camera app and the system photo picker, which need none).

10. CHANGES TO THIS POLICY

We may update this policy when the app changes. The date at the top shows the latest version. Significant changes will be noted in the app's release notes.

11. CONTACT

Code7G - coder.7g@gmail.com