Privacy Policy
Effective November 10, 2026.
This policy covers the Every Moon app for iPhone and this website, everymoon.app. Every Moon is published by Daniel Anderson, who is the controller of the data described here. Every Moon is a private health app, so this page names what leaves your phone and where it goes.
The short version
- Your logs, notes and photos stay on your phone unless you choose to back them up or share them.
- What does leave your phone is encrypted on the phone first where the app can do so, and only the people you chose can read the shared parts.
- Every Moon has no ads, no advertising trackers, and never sells your data.
- The app sends no analytics and no crash reports.
- You can delete your account in the app, under Me, then Delete account.
Your account
The parts of Every Moon that use its server, such as partner sharing, Backup & Sync and shared baby names, need an account. You can sign in four ways, and each stores a little:
- Sign in with Apple. Every Moon asks Apple for no name and no email address. Every Moon keeps Apple's private identifier for you and a placeholder address that cannot receive mail.
- Sign in with Google. Every Moon asks Google only to confirm who you are (the "openid" scope), not for your name, email address, contacts or anything else in your Google account. Every Moon keeps Google's identifier for you.
- Email and password. Every Moon keeps your email address and a hashed version of your password, never the password itself.
- Passkeys. Every Moon keeps the public half of the passkey and its credential identifier. The private half stays on your device or in your iCloud Keychain.
While you are signed in, Every Moon's server also keeps each sign-in session with its IP address and your device's browser or app identifier (user agent), so it can tell sessions apart and block abuse. It also keeps short-lived counters of recent requests and emails sent, to slow down abuse.
What Every Moon's server keeps
The app talks to Every Moon's server at api.bloomandme.com, which runs on Cloudflare and stores data in Cloudflare D1 (a database) and Cloudflare R2 (file storage). It keeps:
- Your account: the sign-in details above, and the date you joined.
- Photo backups, only if you have Premium and have turned on Backup & Sync in the app. Each photo is encrypted on your phone before it is uploaded, so Every Moon cannot see it. The server keeps the encrypted file, its size and its checksum.
- Backed-up profile, appointments and milestones. The server can store these as encrypted data that only your phone can read, if you turn on Backup & Sync.
- Baby names. If you use the baby-name features with an account, the server holds your name lists in sealed form and your reactions (pass, like or love), each against a short code that stands for a name rather than the name itself. Where you and your partner both share baby names, the server can tell that you both picked the same code, and can send a notification when you do, if you have allowed that.
- Partner links. The public keys for you and your partner, the categories you agreed to share, and sealed messages for your partner such as kick counts.
- Push notification tokens. If you allow notifications, the app registers an Apple Push Notification service token for your device so the server can send you a notification, for example that your partner has shared something. Tokens are turned off when you sign out.
- Subscription status. When you subscribe, the app sends Apple's signed receipt for the purchase, and Apple also notifies the server of changes. Every Moon keeps the product, the plan (monthly, yearly or lifetime), the Apple transaction identifier and the dates. Every Moon never sees your card or payment details.
What stays on your phone or in your iCloud
- Your cycle, symptom, mood, pregnancy and postpartum logs and notes, and your daily photos and timelapses. These are stored on your phone. If you turn on iCloud backup, they are also stored in your private iCloud, which Apple runs and Every Moon cannot read.
- Apple Health. If you allow it, Every Moon reads heart rate, heart rate variability, sleep, temperature and weight from Apple Health, and can save your kick-count sessions to it. This data stays on your phone and is never used for ads.
- Your encryption keys, which are kept in your device's keychain and sync through iCloud Keychain if you have it on.
- Writing and idea helpers use Apple Intelligence on your phone, so what you type to them does not go to Every Moon.
- The camera and your photos, used only when you take or add a picture or scan your partner's invite code. Your location, if you allow it, is used only to set an optional home reminder for taking birth control, and stays on your phone.
The app also downloads public content updates from content.bloomandme.com. These requests are the same for everyone and do not say who you are or what mode you use.
Partner sharing
Nothing is shared with a partner unless you invite them. When you invite someone, you choose each category yourself, and they see only the categories you offered and they accepted. The categories are: your pregnancy week and day, kick counts, appointment details (date, kind and location label; your notes stay private), milestones and photos, and baby-name likes. You can end the link at any time, and your partner's phone is told it has ended.
Who else handles data
- Cloudflare hosts this site and Every Moon's server, and stores the data above.
- Apple handles Sign in with Apple, push notifications, purchases and subscriptions, iCloud and Apple Health under its own privacy policy.
- Google handles Sign in with Google under its own privacy policy.
- Resend sends account emails, such as confirming your email address or resetting a password. It receives your email address and the link in the message. These emails are plain text and carry no health information.
The app does not send analytics or crash reports to anyone. The app includes TelemetryDeck and Sentry software, but both are switched off in the release you download. If that changes, this policy will be updated before it does.
Every Moon does not sell your data, does not share it with advertisers, and has no ads. Every Moon discloses data if the law requires it, though most of what the server holds is encrypted in a way Every Moon cannot read.
Deleting your data
In the app, open Me, then Delete account. After a re-check of your sign-in and typing DELETE, Every Moon deletes your account and its sign-in, your link with your partner, and what the server holds for you, such as your photo backup and saved baby names. Your partner's phone may not be told right away.
The following stay until you remove them yourself:
- Your entries, photos and timelapses on your phone.
- Your iCloud backup, if it is on. Remove it in the Settings app under iCloud.
- Premium billing. Cancel it in the Settings app under Subscriptions, because Apple bills it.
If you only use this website, see the next section for how to leave the waitlist. To ask for anything else deleted, or for a copy of your data, email the address below.
The website and its waitlist
When you join the waitlist on this site, Every Moon stores three things:
- Your email address.
- The date you signed up, and the date of any later signup with the same address.
- The source: either "landing page", or a short code when you arrived through a tracked link to this site.
The list does not store your IP address or anything about your browser.
Every Moon uses your address for one email, sent when the app is ready for the App Store, and for nothing else. It stays on the list until you ask to leave. Email the address below from the address you signed up with and ask to be removed. Your address is then deleted from the list and you won't get the launch email.
This website also uses:
- Cloudflare Turnstile on the signup forms, which handles your IP address and browser details to tell people from bots, and Cloudflare Web Analytics, which counts page visits.
- Resend, which sends the launch email and so receives your address for that email.
- Google Fonts, which serves the fonts on this site, so your browser's request for them reaches Google, including your IP address.
This site has no ads and no advertising trackers.
Your rights
You can ask what Every Moon holds about you, ask for a copy, ask for a correction, or ask for deletion, wherever you live. Email the address below. If you live in the European Economic Area, the United Kingdom, California or another place with privacy law, you have the rights that law gives you, and you can complain to your local data protection authority. Every Moon handles the data above because you asked it to run the app, because the law requires it, or because it needs to keep the service safe.
Children
Every Moon is for people aged 13 or older, or 16 or older in the European Economic Area and the United Kingdom. Every Moon does not knowingly collect data from younger children. If you think a child has made an account, email the address below and Every Moon will delete it.
Changes
When this policy changes, the effective date at the top changes too. If a change lets a new kind of your data leave your phone, this page will say so before the change ships.
Contact
Email support@