Your data, privacy, and who can see it

Tracking your menstrual cycle, fertility, pregnancy milestones, or your baby’s growth involves sharing some of the most personal and intimate information of your life. At VAGGA, we treat your health data with the highest level of confidentiality and technical security. We operate in full compliance with the European General Data Protection Regulation (GDPR) and Icelandic data protection laws (Lög um persónuvernd og vinnslu persónuupplýsinga).

Here is exactly how your information is handled, who can see it, and how you maintain complete control over it at all times.

Who can see what you enter

• Your private health logs: Information such as menstrual dates, symptoms, intimacy logs, pregnancy notes, ultrasound images, and your baby’s feeding or sleep logs are strictly private. They are visible only to you on your account.
• Family sharing: If you choose to use the family-sharing feature, your partner or invited family member can view your shared logs only after you send an explicit invitation and they accept it. You can revoke their access or change sharing permissions at any moment from your settings. Nobody else using the platform can view your family data.
• Community posts: If you participate in community discussions or group chats, the posts, comments, and display name you choose to share are visible to members of that specific group. Do not post sensitive personal contact details in community areas.
• Platform administrators: Access by our team is limited to what is needed to run the service and solve problems, and sensitive administrative actions are logged.

How we use your health information

• Tailoring your experience: We use the dates and stages you record solely to show you timely, medically relevant articles, tools, and developmental milestones tailored to your specific phase (pre-pregnancy, each gestational week, or newborn age).
• Never sold to third parties: Your personal health data is never sold, rented, or shared with third-party advertisers, pharmaceutical companies, or data brokers. Analytics and ad measurement (Google Analytics, Google Ads, Microsoft Clarity) are only used if you allow them, and no health data is ever sent to them.

Your rights: Exporting and permanent deletion

Under data protection laws, your information belongs entirely to you:

• Data export (Portability): You can download a copy of everything you have recorded at any time with Export my data in your account settings — to keep for yourself or to show your midwife or doctor.
• Deletion (The Right to Erasure): You can close your account yourself in your account settings. It is closed at once and can be restored for 30 days if you change your mind. After that, we delete the account and everything in it within one month. You can also ask us to delete your data, or only your health information. Our encrypted backups are kept by Cloudflare.

Security standards

All data transmitted between your device and our servers is secured using modern industry-standard encryption protocols (in transit and at rest).

If you have any questions regarding your privacy, wish to exercise your data rights, or want clarification before entering sensitive health information, you are always welcome to contact us at info@vagga.is. We answer within one month.