Privacy Policy

Last updated: July 22, 2026

This policy covers the Primrose & Eve iOS application (the "App"), published by Quarter AI Solutions LLC ("we", "us", or "our"), the data controller for the personal data described here. It explains what data the App collects, where it is stored, who can access it, and what rights you have over it.

Primrose & Eve is a perimenopause health companion that helps you understand your patterns and walk into medical appointments prepared. Because it handles sensitive health information, we have written this policy to be specific and plain. If you have questions, see the Contact section.

1. The short version

Your health data lives on your device and in your personal iCloud account. Quarter AI Solutions never stores your health data and cannot access it. We do not sell it, share it with advertisers, or use it for any purpose other than making the App work for you.

There are exactly two times health-related data is transmitted off your device, and both happen only when you choose to start them:

When you import a lab PDF (section 5a), the PDF itself stays on your device. Text is extracted on-device using Apple's Vision framework, and only that extracted text is processed transiently to identify lab values.

When you generate a Smart GP Report (section 5b), a structured summary of your patterns and relevant clinical values is processed transiently to write the report's two AI-assisted sections.

In both cases the data is processed in real time, never stored after the request completes, and never handed to an advertiser or data broker.

Sign-in identity is managed entirely through Apple. We hold no server-side authentication record. Account deletion happens locally on your device and propagates to your own iCloud, without any server request to us. The App contains no advertising SDKs, no third-party analytics platforms, no crash reporters, and no third-party trackers of any kind. It keeps simple usage counts on your device, such as how many days you have opened it, only to understand whether its features are working. Those counts stay on your phone and are never transmitted to us or anyone else.

2. What the App collects

The App stores the following data locally on your device and, if you have iCloud enabled, in your personal iCloud account:

Profile. Optional display name (provided by Apple at sign-in if you choose to share it), birth year only (not full date of birth), the year you started experiencing symptoms (optional), your HRT status, your next appointment date and an optional label, and internal app state (such as onboarding completion and whether you have used your one free Smart Report). The display name is shown on your GP Report and nowhere else.

Symptom logs. Symptom type, severity rating, timestamp, trigger tags (e.g. stress, caffeine, poor sleep), free-text notes, and voice note transcripts. Audio is never stored. Transcription happens on-device via Apple's Speech Recognition framework and only the resulting text is saved.

Evening check-ins. Date, mood rating, sleep quality rating, energy level, hot flash count, and free-text notes.

Medications and HRT. Medication name, type (including whether it is HRT), dosage, start date, dose-change history, and active status.

Lab results. Test name, value, unit, reference range, collection date, and source (manually entered or imported from a PDF).

Provider visits. Date, provider name, visit type, and notes.

Cycle calendar. Period start and end dates, daily flow entries, cycle day events, and associated notes.

Apple Health data. With your permission, the App reads resting heart rate, step count (stored as a daily total), sleep duration, and wrist temperature from Apple HealthKit. It writes menstrual cycle events back to HealthKit. This data is read from and written to your personal Health app and is not transmitted to Quarter AI Solutions. On your device, it is also used to produce your daily Today's Context read (see section 4).

On-device usage counts. The App keeps simple counts on your device of how you use it, such as the day you first logged a symptom, first viewed a daily context, or first generated a report, and which days you opened the App. These help us understand whether the App's features are working. They contain no health details, are stored only on your device, and are never transmitted off your device.

HealthKit data use policy. Primrose & Eve strictly complies with Apple's HealthKit requirements. We do not use or disclose any data gathered through HealthKit to third parties for advertisement, data mining, or commercial monetization purposes. HealthKit data is processed entirely on your device and inside your personal iCloud private zone, and is never shared with Quarter AI Solutions servers or any third party.

The App does not store, transmit, or use your email address, phone number, location, IP address, or browsing activity. If Apple shares your name with the App through Sign in with Apple, that name is stored locally for personalization only and is never sent to Quarter AI Solutions. See section 3 for sign-in specifics.

3. Sign in with Apple

The App uses Sign in with Apple for account creation and authentication. When you sign in, Apple provides a subject identifier: a pseudonymous string unique to you and this App. This identifier is stored in your device's Keychain and used to anchor your data in your personal iCloud CloudKit container. We do not maintain a separate server-side authentication database, and Quarter AI Solutions does not receive your Apple ID or any other Apple account information.

At sign-in, Apple may pass your name and either your real email or a private relay email to the App on your device. The App stores only your name (for personalization on your GP Report) and discards the email immediately. Neither the email nor any Apple account information is ever transmitted to Quarter AI Solutions servers.

4. Where data is stored

On your device. All App data is stored locally using Apple's SwiftData framework. It remains on your device even if you have iCloud disabled.

In your iCloud account. If you are signed into iCloud, the App uses Apple CloudKit to sync your data across your own devices. This data is stored in your personal iCloud account in a private container, encrypted by Apple, and is not accessible to Quarter AI Solutions. Apple's iCloud terms and privacy policy govern this storage.

On-device processing. The App's statistical engine, including chi-square tests with false-discovery-rate correction, bootstrap confidence intervals, time-of-day distribution analysis, cycle phase and premenstrual window comparisons, before-and-after medication effect calculations, and Apple Health correlations, runs entirely on your device. These analyses produce the patterns shown on the Insights screen and in the standard sections of your GP Report. No data is transmitted off your device to perform them.

Today's Context. The daily context read at the top of the home screen is generated entirely on your device. It combines your recent sleep, resting heart rate, and wrist temperature (from Apple Health) with your cycle position and the patterns already found in your own record. It produces a short, plain-language read, never a score or a prediction, and never involves a network request. The simple usage counts described in section 2 are likewise stored only on your device.

On Quarter AI Solutions servers. None. We do not run an authentication server, a database, an analytics store, or any other backend that holds your data. The two transient processing flows described in section 5 are the only network requests the App makes that carry your data, and they retain nothing after the request finishes.

5. Third-party processing: lab import and Smart GP Reports

There are two optional features that transmit health-related data off your device. Each runs only when you actively initiate it.

5a. PDF lab import

When you import lab results by photographing or selecting a PDF:

On-device text extraction. The PDF's text is extracted on your device using Apple's Vision framework. The PDF binary itself never leaves your device.

Lab value identification. The extracted text (not the PDF, and nothing else from your records) is sent to a Quarter AI Solutions Worker hosted on Cloudflare (Cloudflare, Inc., United States), and from there to Anthropic's API (Anthropic, PBC, United States) to identify individual lab values, units, and reference ranges. This text is processed in real time. Under Anthropic's commercial API terms, data submitted via the API is not used to train their models and is not retained after the request completes.

The identified results are returned to your device for your review before anything is saved. This feature is optional. You can always enter lab results manually instead.

5b. Smart GP Reports

The Doctor's Report is free and unlimited, and is assembled entirely on your device. You can also generate a Smart GP Report, which adds two AI-assisted sections to the standard report: a short analysis of factors that may be driving your symptoms, and a list of suggested questions for your doctor. These two AI-assisted sections are generated once per device.

When you generate a Smart GP Report:

What is transmitted. A structured summary is sent to a Quarter AI Solutions Worker on Cloudflare, and from there to Anthropic's API. The summary contains:

From your profile, your derived age in years (not your full date of birth), your HRT status, and the number of years since your symptoms started.

From your medications, the name, type, dose, unit, frequency, and days on the medication for each one you are actively tracking.

From your labs, up to your eight most recent results, including test name, value, unit, reference range (low and high), and collection date.

Aggregated statistics derived from your tracking: the total days you've logged; your average daily hot flash count and severity; your average sleep quality and mood distribution; the 14-day-window symptom trend (percent change versus the prior window); your top 5 most-logged symptoms; trigger and protective correlations with their sample counts, risk ratios, and statistical-significance flags from the false-discovery-rate test; next-day (lag) effects; Apple Health correlations between hot flash rates and your resting heart rate, sleep, steps, and wrist temperature; the menstrual-day-versus-other-days comparison; and, if applicable, your HRT before-and-after hot flash averages with the percent change and days on the medication.

A randomly generated per-install identifier is also sent and used solely to enforce a per-day rate limit. It is generated locally on first launch, has no relationship to your Apple ID, your iCloud account, or any other identifier, and cannot be linked back to you.

What is not transmitted. Your raw daily logs, free-text notes, voice-note transcripts, evening check-in notes, provider-visit notes, cycle entries, and individual symptom timestamps are not sent. Neither is your name, your full date of birth, nor your Apple identifier.

Retention. The summary is processed in real time to produce the report sections and is not stored after the request completes. Under Anthropic's commercial API terms, it is not used to train their models and is not retained after the request.

This feature runs only when you tap to generate a report. The standard (non-Smart) sections and all other report content are assembled entirely on your device with no network request.

6. Service providers

The following third parties are involved in delivering the App:

Apple Inc. (United States): CloudKit sync, HealthKit integration, StoreKit (for managing any subscription from a previous version of the App), on-device Speech Recognition, and on-device Vision text recognition. Your iCloud data is governed by Apple's Privacy Policy and iCloud Terms and Conditions.

Cloudflare, Inc. (United States): hosts the Workers used for lab text identification and Smart GP Report generation. Content is processed in memory and not persisted. See the Cloudflare Privacy Policy.

Anthropic, PBC (United States): processes extracted lab text and Smart GP Report summaries via API. Data is not retained or used for training. See the Anthropic Privacy Policy.

We do not use advertising SDKs, product analytics platforms, crash reporting services, or social media integrations. No data is sold or shared with any party not listed above.

7. Subscriptions and payments

Primrose & Eve is free to download and use, and does not currently offer any in-app purchases or subscriptions. If you hold a subscription from a previous version of the App, it is processed entirely by Apple through StoreKit and your App Store account. Quarter AI Solutions never receives your card number, billing address, or any payment information. We receive only your subscription status (active or not) as reported by Apple on your device; you keep full access to the App whether or not it remains active. Apple's Privacy Policy governs payment processing.

8. International data transfers

If you use PDF lab import or generate a Smart GP Report, the relevant data is sent to Cloudflare and Anthropic in the United States. If you are in the European Union or United Kingdom, these constitute international data transfers.

Cloudflare relies on Standard Contractual Clauses (SCCs) adopted by the European Commission for transfers of personal data from the EU/EEA to the United States. Anthropic's transfer mechanisms are described in their Privacy Policy.

Both PDF lab import and Smart GP Report generation are based on your explicit consent (Article 6(1)(a) GDPR), given each time you initiate the feature.

9. Children's privacy

Primrose & Eve is designed for adult women navigating perimenopause, typically aged 35 and older. The App is intended for users aged 18 and over and is not directed at minors. We do not knowingly collect data from anyone under 18. If you believe we have inadvertently received data from a minor, please contact us so we can address it.

10. Deleting your data

You have full control over your data and can delete it at any time:

Delete data on this device. Settings → Your Data → "Delete data on this device" removes all your logs, check-ins, medications, lab results, cycle entries, provider visits, and custom symptoms from the device. Your Profile and sign-in identity are kept. Deletions sync to iCloud over time, but the iCloud copies are not immediately wiped by this option. To remove your iCloud data too, use "Delete Account" below.

Delete Account. Settings → Account → "Delete Account" synchronously deletes your iCloud data zone, then wipes every record on the device including your Profile, and signs you out. This is the single action that removes both your iCloud copies and your device copies at once. There is no recovery. There is no separate server request to us, because we maintain no server-side account record to delete.

iCloud data (manual). To remove synced data from iCloud yourself, go to iOS Settings → [your name] → iCloud → Manage Account Storage → Primrose & Eve, then delete the data.

HealthKit data. Cycle events written to Apple Health by the App can be deleted from the Health app directly.

Export first. Settings → Your Data → "Export My Data (JSON)" gives you a portable copy of everything before you delete.

11. Your rights

Quarter AI Solutions holds no server-side record about you. We have no authentication database, no analytics store, no profile store, and no logs that identify you. Your health data is held by Apple in your iCloud private zone and in HealthKit, not by us. Most rights regarding your data are therefore exercised directly within the App and through your Apple account.

For the two optional flows in section 5, we act as the controller for the transient in-memory processing. We retain nothing after the request completes, so your rights relate to that single processing event rather than to a stored record.

Access and portability. Export all your health data as JSON from Settings → Your Data → "Export My Data (JSON)". An access request to us would return nothing because we hold nothing.

Erasure. Delete data as described in section 10. Because we hold no records, an erasure request to us is satisfied automatically.

Correction. All data can be edited or deleted directly within the App.

Objection to optional processing. You can decline to use PDF lab import or Smart GP Reports at any time. Manual lab entry is always available as an alternative to PDF import. Choosing not to generate a Smart GP Report has no effect on symptom tracking, check-ins, or Insights.

If you are a California resident, we do not sell your personal information and do not share it for cross-context behavioural advertising.

If you are in the EU or UK and have a concern about how your data is handled, you may contact your local data protection authority. For GDPR-related requests, contact us using the details in section 13 below.

12. Changes to this policy

We may update this policy when the App's functionality changes. The date at the top of this page reflects the last revision. For material changes we will update the in-app privacy policy link, note the change in the App's release notes, and post a notice in the App on your next launch.

13. Contact

Questions about this policy? Reach us at:

contact@quarteraisolutions.com

Quarter AI Solutions LLC
2920 Burnet Ave
Cincinnati, OH 45219
United States