Pregnancy privacy policy
Pregnancy collects nothing. It has no internet access, keeps your record on your phone, and shares nothing with anyone. What you record leaves your phone only when you move it.
Who we are
Pregnancy is made by Orionian, the app studio of Intelliworks Inc. In this policy, “we” means Orionian and Intelliworks Inc., and “the app” means Orionian Pregnancy.
What the app collects
Nothing. The app doesn't collect, record or share any personal data or any data about how you use it. In particular, it has:
- no internet permission, so Android doesn't let it connect to anything, us included;
- no account or sign-in;
- no analytics, crash reporting, advertising or advertising IDs;
- no third-party services. Its only libraries are Android's own (AndroidX), Kotlin's, and Google Play Billing, which lets you buy Pregnancy Pro through the Play Store app.
Because the app has no way to send data, we never receive any data from it. A pregnancy and how it ended are sensitive, and in some places they carry legal risk; a request to us for your data would get nothing, because we have nothing.
What stays on your phone
The app keeps these, in its private storage, which other apps can't read:
- Your record, one file: for each pregnancy, how you dated it and every earlier date, how many babies, your height and starting weight if you gave them, weights, symptoms, moods and notes by day, appointments with their questions and reminders, kick and contraction timing sessions, blood pressure and glucose readings, your hospital bag list and birth preferences, your care team's instructions and phone number as you typed them, and, if you recorded one, the date a pregnancy ended and how (a birth, a loss, or “I'd rather not say”). After a birth, if you choose to add them for the keepsake book: your baby's first photo, name, time of birth, weight, length and a few words.
- Bump photos you pick with Android's photo picker, copied into the app's storage. The app sees only the pictures you pick, never the rest of your photos.
- Settings: whether screenshots are allowed, whether the lock is on and how soon it asks again, whether notifications show on the lock screen, whether the contraction timer shows on the lock screen, your units, the reminder new appointments start with, and whether the Quick Settings tile has been offered, and which app icon you chose with Pro; and, kept apart, which reminders have been said.
- Whether you have Pro, copied from Google Play so Pro works without a connection. It isn't backed up: on a new phone, Google Play says again what you own.
A report for your care team, or with Pro the keepsake book, is made only when you ask for one, and kept in the app's cache, where each new file replaces the last.
You can delete any entry, any session, a whole pregnancy, or, when a pregnancy ends, everything from it. To delete everything, clear the app's storage in Android settings or uninstall the app. A copy in your Google backup (below) is managed in your Google account's backup settings.
Backups and files
What you record leaves your phone only in these ways, each one yours to choose. We never receive any of it.
- Google backup. If backup is on in your phone's settings, Android saves your record and settings to your Google account only when the backup is end to end encrypted with your screen lock, so only you can open it (Android 9 and later). Without a screen lock, Pregnancy isn't in the backup. Bump photos never go there. Android 8 can't encrypt backups that way, so there only the app's settings can go.
- Phone to phone. When you set up a new Android phone and choose to copy apps and data from this one, your record, settings and bump photos come along (Android 9 and later), straight from one phone to the other. On Android 8 only the app's settings come along.
- A backup file, with your record and bump photos, sealed with a passphrase you choose (AES-256-GCM, with a key made from the passphrase by PBKDF2 with 600,000 rounds) and saved wherever you pick on Android's save screen. Without the passphrase no one can open it, Orionian included, and a forgotten passphrase can't be recovered.
- Things you share or hand to another app: the report for your care team (a PDF), the keepsake book (a PDF, with Pro) and a contraction session as text go through Android's share sheet to the app you pick, and the keepsake book through Android's print screen to the printer you pick; Add to calendar gives an appointment's date, time, title and place to your calendar app; Call opens your phone app with your care team's number filled in. Each happens only at your tap, and what that app does with it is up to it and you.
- Orionian Cycle. If you record that a pregnancy has ended and choose to tell Orionian Cycle, the app hands Cycle on the same phone the date and how it ended, nothing else. Cycle asks you before saving it.
Permissions
The app asks Android for these, and nothing else:
- Notifications (asked the first time an appointment reminder or a timer needs it): appointment reminders and the timers' notifications.
- Run at startup: to set appointment reminders again after your phone restarts. It's off until a reminder is ahead.
- Promoted notifications (no prompt): lets Android show the contraction timer as a live update while you time. A switch in Settings turns it off.
- Biometrics: the optional lock, with your fingerprint, face or screen lock. Android handles it; the app never sees your fingerprint or face.
- Google Play billing (
com.android.vending.BILLING), to buy Pregnancy Pro. It lets the app ask the Play Store app on your phone what you own and open its purchase screen.
It doesn't ask for internet, location, camera, microphone, contacts, calendar, phone, storage or photos permissions.
On your screen
By default the app stays out of screenshots, screen sharing and the recent apps view. Notifications use neutral words and are hidden on the lock screen unless you choose otherwise; while you time contractions, the lock screen shows only “Timer” and the running time, unless you turn that off. The home screen widget shows your weeks and days, and Pro's three widgets your weeks, the days to your due date or this week's size; after a pregnancy ends they show nothing about a pregnancy. Pro's Plain icon shows three stars and nothing about a pregnancy.
Third parties
The app shares nothing with anyone, because it has nothing to share and no way to send it. It contains no third-party services. Android's backup, share sheet, print screen, photo picker and calendar work as described above, under your control.
If you buy Pregnancy Pro, Google Play handles the purchase, the payment and any refund, under Google's own privacy policy. Google gives us a record of each order, such as its date, price and the buyer's region, so we can keep our accounts and help with refunds. We never see your payment details, and the order says nothing about what you record in the app.
You get the app through Google Play, which handles your Play account and downloads under Google's own privacy policy.
Children
The app is meant for adults and doesn't knowingly collect anything from anyone.
Changes to this policy
If the app ever changes what it keeps or where it goes, this page changes first, with a new effective date, before that version is released.
Contact
Questions about this policy: hello@orionian.com.