Privacy
Your cycle. Your phone. Nobody else’s.
Quiet Moon has no account and no server. The app never connects to the internet, so there is nothing of yours for us to receive, see or sell. This page says what the app keeps, where, and the only ways it can leave your phone.
What leaves the phone
| What | Sent? | Where it lives |
|---|---|---|
| Your days and periods | Never | One encrypted file on your phone. Its key is kept by the phone’s own keystore and is never synced. |
| Your plans and notes | Never | The same file. |
| Your PIN | Never | Stored only as a hash, inside that file. |
| Usage and crashes | Never | Not collected. The app has no analytics and no crash reporter. |
| An export | Only if you share it | A file locked with a passphrase you choose, sent where you choose. |
| A summary for an appointment | Only if you share it | One page as a PDF, made on your phone. It is not encrypted, so it goes where you send it. Day notes and plans are never in it. |
| Your year as a picture | Only if you share it | Dots, colours and numbers, with no word about what they mean. |
Locks
- A PIN of 4 to 6 digits. The app locks after a minute in the background.
- A forgotten PIN cannot be recovered, because it never left your phone. The only way back in is to delete everything and bring back an export you made earlier.
- Fingerprint unlock, if you turn it on.
- An optional second PIN, for when someone makes you open the app. It opens an empty app. Nothing on the lock screen shows that a second PIN exists.
Off until you turn it on
- Your phone’s calendar (Android). The Month page can show which days already have something on. The app can only read the calendar, never change it, and nothing from it is saved.
- A lock screen sky (Android). The app paints your wallpaper to follow your cycle. The picture carries no words or numbers, and it is forgotten when you turn it off.
- A second moon. A second person on the same phone gets their own encrypted file and their own PIN. Neither PIN opens the other’s.
- Check a date (Android). Text you select in another app and send to Quiet Moon is read once to find a date, and never saved.
Notifications
Notes are made on your phone; there is no push server. By default a note reads “A small note for today.” and says nothing about cycles. You can choose Discreet (the app calls itself Moon Notes), Plain (it says what it means) or Off.
Backups and a new phone
The app is left out of Android’s automatic backups, so your data is not copied to a Google account. Moving to a new phone is done with an export: an encrypted file you make yourself, with a passphrase of 10 characters or more that the app never keeps. If the passphrase is forgotten, nobody can open that file.
What the app will not do
No ads. No “pregnancy mode”. No partner mode. The app never changes what it says based on what it has guessed about you.
This website
No cookies, no analytics, no third-party scripts or fonts. If you pick a sky on the home page, your browser remembers that one choice on your own device (a local setting called “sky”); it is never sent to us.
Changes
If the app ever keeps or sends something new, this page changes first.