Privacy Policy

Last updated: May 2026 | Effective: May 2026

1. Who We Are

Sylven ("Sylven", "we", "us", "our") is a perimenopause and menopause symptom tracking application operated as a sole trader business based in England. Company registration is pending. You can contact us at: privacy@sylven.health

Sylven acts as the Data Controller for your personal data as defined under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

2. What Data We Collect

2a. Account data

When you create an account we collect your email address and a password (stored as an encrypted hash). We do not collect your name unless you choose to provide it.

2b. Health data (special category)

Sylven collects data about your menopause journey symptoms including which symptoms you experience, their severity scores, and the dates on which they occur. Under UK GDPR, health data is classified as special category data and is subject to additional legal protections.

2c. Usage data

We collect basic app usage information such as which screens you visit and whether you complete your daily log. This is used solely to improve the app and is never linked to your health data for advertising purposes.

2d. Device data

We collect your device type and browser type to ensure the app works correctly on your device. We do not collect precise location data.

3. Why We Use Your Data and Our Legal Basis

  • Contract performance: to provide you with the Sylven service you have signed up for, including storing your symptom logs and generating your doctor reports.
  • Legitimate interests: to improve the app, fix bugs, and ensure security, where this does not override your rights.
  • Explicit consent: for health data specifically, we rely on your explicit consent given at signup. You may withdraw this consent at any time by deleting your account.

4. How We Store and Protect Your Data

Your data is stored securely using a cloud database provider. All data is encrypted in transit (TLS) and at rest. Data is hosted in the European Union and is subject to GDPR-equivalent protections.

We retain your data for as long as your account is active. If you delete your account, all associated data is permanently deleted within 30 days.

5. Who We Share Your Data With

We do not sell your personal data. We do not share your health data with advertisers. We share data only with third-party service providers strictly to operate the app (database, authentication, and hosting).

We will never share your health data with employers, insurers, or advertisers without your explicit written consent. We may disclose your data if required by law or legal process, or to protect the rights and safety of users.

6. International Data Transfers

Sylven is available worldwide. If you access Sylven from outside the United Kingdom or European Economic Area, your data may be transferred to and processed in countries with different data protection laws. Where this occurs, we ensure appropriate safeguards are in place, including standard contractual clauses approved by the UK Information Commissioner.

7. Your Rights

  • Right to access: request a copy of the data we hold about you
  • Right to rectification: request correction of inaccurate data
  • Right to erasure: request deletion of your data ("right to be forgotten")
  • Right to restriction: request we limit how we use your data
  • Right to portability: receive your data in a machine-readable format
  • Right to withdraw consent: withdraw your consent to health data processing at any time
  • Right to object: object to processing based on legitimate interests

To exercise any of these rights, contact us at privacy@sylven.health. We will respond within 30 days.

You also have the right to lodge a complaint with the UK Information Commissioner's Office (ICO) at ico.org.uk or by calling 0303 123 1113.

8. Cookies

Sylven uses only essential cookies required to keep you logged in and maintain your session. We do not use advertising cookies, tracking cookies, or third-party analytics cookies.

9. Children

Sylven is not intended for use by anyone under the age of 18. We do not knowingly collect data from minors. If you believe a minor has created an account, please contact us at privacy@sylven.health and we will delete it promptly.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by email or by displaying a prominent notice in the app. Your continued use of Sylven after changes take effect constitutes acceptance of the updated policy.

11. Contact

For any privacy-related questions, contact: privacy@sylven.health