Privacy Policy | Narrated

1. Who we are

Narrated (narrated.health) publishes menopause information, offers a free private report, and provides an app where you log your day and get back a score, a reading and a summary you can take to your doctor. Public pages can be read without an account or an email address. This policy explains what is collected when you choose a private service.

Data controller

Narrated is the data controller for personal data collected through narrated.health, including your report and your daily log. Contact: contact@narrated.health.

2. What we collect, and why

The free report

The report uses the symptoms, cycle information, age range, current medication, goals and optional words you enter, together with your email, first name and region. We store them as a private report so it can be emailed to you, kept in your account, and used to set up your app. Health information is special category data, so we ask for a separate explicit opt-in before storing it.

Your daily log

In the app you tap how you slept, your energy and your mood, each from 1 to 5. You tap the symptoms that showed up: hot flush, night sweats, woke in the night, brain fog, anxious, aches, low mood, heavy day, and whether you had a period. You tap what you did: moved, ate well, wound down, got outside, had a drink. You can add a note in your own words, and you answer a short check-in once a month. We store those taps as your log. They build your score, your readings, your patterns and your Doctor Prep sheet, and they do nothing else. Nothing you log is used to build anything for anybody else.

Your daily reading

Your score and the lines under it are worked out on your own device from your own taps. The reading in words is written by an AI service run by Google, called Gemini. If you agree to it, we send your last ten days of taps and your note to that service and it sends back one short reading. We do not send your name, your email or anything that identifies you. If you do not agree, or you switch it off later, Narrated writes the reading itself from the same numbers and the app works exactly as before. There is more on this in section 6.

Apple Health, on iPhone only

If you are on an iPhone and you switch it on, Narrated can read three things from Apple Health: sleep, steps and workouts. It is read only. We use it to fill in your log for you so you have less to tap, and we store the values we read on your day in our database, exactly like a tap you made yourself. We never write anything back into Apple Health, never read anything else from it, never use it for advertising, and never share it. We do not put it in iCloud; Apple Health itself stays on your phone and under your control, and you can turn our access off at any time in the iPhone Health app or in Settings. Turning it off stops future reads and you can delete what was already stored.

Your account

Your email, first name, region and time zone, so you can sign in, so your days roll over at your midnight and not ours, and so we can email you your report. We also record which consents you gave, when, and to which version of the terms.

Payment

Narrated is free and we take no payments. If you paid for a membership before 19 September 2026, Stripe processed it: your card details went straight to Stripe and never touched Narrated servers. We keep the amount, currency and Stripe reference for those payments, and whether they were refunded, because tax law requires it.

Emails we send you

We log which emails were sent to you and whether delivery succeeded, being your report and service emails about your account, so we can tell what you did or did not receive. The weekly letter is separate: if you subscribe, or tick the letter box on your report, we store your address, where you subscribed, the symptom you told us affects you most so your first letters fit, and which letters have been sent. Unsubscribing is one click and stops all sends.

The Where Am I tool

Stores nothing. Your answers are read in your browser to show a result and are not sent to us. The only thing recorded is that the tool was completed, with no answers attached.

Analytics and technical logs

We run our own light analytics: which pages are read, which page a visit started on, which site sent you, and which step of the report or sign-up was reached. It uses a random id kept in your browser, not a cookie, and no advertising or tracking company is involved. We do not use Google Analytics. Once you give us your email, for example with your report, those steps are linked to it so we can see where people get stuck and help them. Analytics never include your answers or your log. You can turn it off on this device in section 10. Vercel, our host, also counts page views without cookies. Like every website we process standard server logs (IP address, browser type, pages requested) for security, rate limiting and error monitoring; these are kept short-term and are not used for profiling.

3. Our lawful bases

Your explicit consent, for storing the health information in your free report and your daily log. This is special category data under Article 9 of the UK and EU GDPR, and explicit consent (Article 9(2)(a)) is the condition we rely on.
Your separate explicit consent, for sending your log to the Gemini service to write your reading, and for reading Apple Health. You can say no to this and keep everything else.
Performance of our contract with you, for running your account and your app.
Legal obligation, for keeping payment and tax records.
Our legitimate interests, for security, fraud prevention and keeping the service working.

4. Who sees your information

You. Your report and your log are yours: they are not shown to other members, and Doctor Prep exists so you can choose exactly what to show your doctor. A small number of Narrated staff can see records where they need to in order to run the service, support you, or resolve a payment or safety issue, and are bound by confidentiality.

These are the companies that handle data for us. Each one works on our instructions under a written data processing agreement, and none of them may use your data for their own purposes.

Supabase. our database and sign-in. Holds your account, your report, your log, your readings and your consents.
Vercel. hosting and content delivery for the site and the app.
Google (Gemini API). writes your daily reading and your weekly read-back, only if you opted in. What we send: the last ten days of your sleep, energy and mood scores, the symptoms and activities you tapped, and your note if you wrote one. What we do not send: your name, your email, your account id, or anything else about you. Google states that data sent to the paid Gemini API is not used to train or improve its models, and is not retained beyond short-term processing and abuse monitoring. We do not use the free tier for your data.
Stripe. held card details for memberships sold before 19 September 2026. We take no payments now.
Resend. delivers your report email and service emails. Sees your email address and the contents of the email sent to you.
Upstash. rate limiting, so the service cannot be hammered. Sees a short-lived record tied to an IP address, never your log.
Sentry. error monitoring, so we find out when something breaks. Configured not to carry your log or your answers.
Apple. if you use the iPhone app, Apple provides HealthKit on your own device. Your Apple Health data is not sent to Apple by us, and Apple is not our processor for it.

We share information outside that list only where you ask us to, or where the law requires it, or where there is a serious risk to your safety or someone else’s. We do not sell your data, and we do not share it for cross-context behavioural advertising.

5. Where your data lives

Your account, your report and your log are stored in our Supabase database, hosted in Ireland, in the European Union, on Amazon Web Services (region eu-west-1). Some of the companies in section 4 process data in the United States. Where personal data leaves the UK or the EEA, we rely on the UK International Data Transfer Addendum, or the European Commission’s Standard Contractual Clauses with the UK Addendum, together with the extra checks and safeguards those require. If you are in the United States, your data may be processed in the United States and in the United Kingdom, where Narrated operates. You can ask us for the details of any transfer at contact@narrated.health.

6. Automated reading

Your daily reading is written by an AI service from your own log and nothing else. It is not medical advice, it is not a diagnosis, and it never tells you what condition you have or what treatment to take. It reads your numbers back to you in plain words and suggests one small thing, and it always names the thing in your log that prompted it. A person, meaning you, decides what to do with it.

We make no decision about you automatically that has a legal effect or anything similar. Nothing in the app decides whether you get care, a price, a product or a service. If the AI service is unavailable, or you have not opted in, Narrated writes the reading itself from the same numbers.

7. What we do not do

We never sell personal data, and never sell or share identifiable health information.
We do not run advertising networks or third-party ad tracking.
We do not use your log to advertise to you, and never infer health conclusions from what you read.
We do not use your log, your report or your Apple Health data to train AI models, ours or anybody else’s.
We do not require an account or email to read public pages.
We do not diagnose.

8. Your rights and choices

Export your data, including your report and your log, at any time.
Ask for access to, or a correction of, anything we hold about you.
Withdraw consent at any time from Settings: the health-data consent, the AI reading consent, the Apple Health connection and marketing are each separate switches. Withdrawal does not undo lawful processing already completed.
Unsubscribe from the letter at any time, one click, no questions.
Delete your account and everything in it, in one go, from Settings. We keep only what the law makes us keep, which is payment and tax records, and we tell you exactly what was kept and why.
Under UK and EU GDPR you also have rights of erasure, restriction, portability and objection. Email contact@narrated.health and we will act on them.
You can complain to your supervisory authority; in the UK that is the ICO (ico.org.uk).

9. How long we keep things

Your report and your log are kept while you use the service, and deleted on request.
An account with no sign-in for 24 months is deleted, after we email you first.
Payment and invoicing records are kept for six years for tax and accounting purposes.
Consent records are kept for as long as we hold your data, plus one year, so we can show what you agreed to.
Newsletter data is kept until you unsubscribe. Server logs are kept short-term.

10. Cookies and analytics

We only set the cookies needed to sign you in and keep the site secure, so there is no cookie banner. Our own analytics use no cookies. You can turn them off on this device here, and the site works the same either way.

11. Security

Data is encrypted in transit and at rest with our providers, and access is limited to those who need it. If a breach affects your data we will explain what happened, what it means for you, and the steps being taken, and notify the ICO where we are required to.

12. Children

Narrated is for adults aged 18 or over. We do not knowingly collect data from anyone under 18. If you think a child has given us data, email contact@narrated.health and we will delete it.

13. Consumer health data privacy notice (Washington and other US states)

This section is our notice under the Washington My Health My Data Act, and it also serves people in Nevada and Connecticut. It applies to consumer health data about Washington residents and about anyone whose health data we collect while they are in Washington. It sits alongside the rest of this policy and does not replace it. You can link straight to it at narrated.health/privacy#consumer-health-data.

Categories of consumer health data we collect

Menopause and perimenopause symptoms you report, and how long you have had them.
Menstrual and cycle information, including whether you had a period on a given day.
Sleep, energy and mood ratings from 1 to 5, and a monthly check-in.
Daily activities you tap: moved, ate well, wound down, got outside, had a drink.
Medications and treatments you tell us you are taking or have tried.
Anything you choose to write in your own words in a note.
On iPhone, and only if you switch it on: sleep, steps and workouts read from Apple Health.
Scores, readings, patterns and the Doctor Prep sheet we produce from all of the above.

Where it comes from

All of it comes from you: what you enter in the free report, what you tap in the app each day, what you write in a note, and, if you switch it on, the Apple Health data on your own iPhone. We do not buy health data, and we do not collect it from data brokers, advertising networks or public records.

Why we collect it

To produce your report, your daily score and reading, your patterns over time, and your Doctor Prep sheet; to run your account; and to keep the service secure. That is the whole list.

Who we share it with

We do not sell consumer health data, and we will not sell it. We share it only with the service providers listed in section 4, and only so they can do the job we hired them for: Supabase stores it, Vercel hosts the app that shows it to you, and, if you opted in, Google’s Gemini API receives the last ten days of your log to write your reading, without your name or email attached. Stripe, Resend, Upstash, Sentry and Google Analytics do not receive your health data. We also share it if you ask us to, if the law requires it, or if there is a serious risk to someone’s safety.

How to withdraw consent

Open Settings in the app and switch off the consent you want to withdraw: health data, the AI reading, the Apple Health connection, or marketing. Each is a separate switch and switching one off does not switch off the others. You can also email contact@narrated.health and we will do it for you. Withdrawing consent stops that processing going forward.

How to delete your data

Open Settings and choose to delete your account. That deletes your report, your log, your readings and your Doctor Prep sheet in one go, and we tell our service providers to delete their copies. We keep only payment and tax records, which the law requires. You can also email contact@narrated.health. We will confirm within 45 days, and tell you if we need the extra 45 days the law allows.

Rights and how to reach us

You can ask what consumer health data we hold, who we shared it with, withdraw consent, and have it deleted. We will not treat you differently for exercising any of these rights. Email contact@narrated.health and put “consumer health data” in the subject line. If we turn a request down we will say why, and you can appeal by replying to that email; Washington residents can also complain to the Washington State Attorney General at atg.wa.gov/file-complaint.

14. Changes

If this policy changes materially we will update the date above and, for subscribers, say so in the letter. Continued use after a change means the current version applies.