When.Sign inWhen.Sign inWhen. is a period tracker, so the data it holds is personal. We keep as little as we can and we never sell it. Here is the whole of it in plain words.
When. is run by Anna and Linh, based in Bulgaria, in the European Union. We are the data controller for the information described here. To reach us about anything to do with your data, email hello@getwhen.net.
We use your data to predict your cycle and keep your connected calendar in sync. That is the only purpose. We do not run ads, we do not build a profile of you to sell or target, and we never share or sell your data to anyone.
Your cycle and period data is health data, which the law treats with extra care, so we process it only on your explicit consent. You give that consent when you create your account, and you can withdraw it at any time. We process your email and run your account to provide the service you signed up for, which is our contract with you. We keep the billing records our payment provider gives us because tax law requires it. Withdrawing consent, or deleting your account, stops the processing and removes your data, except records we must keep by law.
A few services help us run When.:
Each of these sees only what it needs to do its job, under a data-processing agreement with us. Some may process data outside the European Union; where they do, they rely on standard contractual clauses or an equivalent safeguard.
We keep your data for as long as your account is open. Calendar access tokens are kept until you disconnect that calendar. When you delete your account, we remove your data from When. right away, except billing records we are required to keep for tax. The predictions we wrote to your own calendar stay there for you to keep or delete.
Connections to When. are encrypted in transit. We limit who can reach the data and we read events only from the last six months when we sync.
We use one essential cookie to keep you signed in. We run no analytics, no advertising, and no third-party trackers, so there is nothing to consent to and no banner to click through.
When. estimates your phases from the dates you log, to help you plan. These estimates have no legal or similarly significant effect on you, and you are free to ignore them. We do not use your data to make automated decisions about you.
When. is meant for adults and is not directed at children. You should use it only if you are old enough to agree to these terms where you live (in Bulgaria that is 14). If you believe a child has given us their data, email us and we will remove it.
Under GDPR you can: see the data we hold (access), correct it, delete it (erasure), get a copy to take elsewhere (portability), ask us to pause its use (restriction), object to its use, and withdraw your consent at any time. From Settings you can export everything we hold as a file and delete your account and its data yourself, and you can disconnect a calendar at any time. For anything else, email us and we will help. If you think we have handled your data wrongly, you can complain to your data protection authority; in Bulgaria that is the Commission for Personal Data Protection (cpdp.bg).
We may update this policy as the app grows. If a change is significant we will let you know. The date below tells you when we last changed it.
Email us at hello@getwhen.net and we will answer.
Last updated 2 June 2026.