This document is a product draft and must be reviewed by qualified legal counsel before public launch.
Last updated Monday, 2 November 2026
Summary
MyTracker is part of the SetuFlow group of health applications and is operated by SetuFlow. It helps you track periods, fertility observations, pregnancy and wellbeing. This information is highly sensitive, so we collect as little as possible, never sell it, and never use it for advertising.
You can use MyTracker without an account. In private mode your data stays encrypted in your browser and is not sent to us.
What we process
Private mode: nothing leaves your device except anonymous requests for the app's files. Health entries are encrypted in your browser's storage (IndexedDB).
With an account: your sign-in identifiers (Google account identifier and email, and/or mobile number), the health and settings data you choose to sync, device session information (approximate device label, timestamps, IP address for security), and consent records.
Support messages you send us. Please don't include health details.
Why we process it (purposes and legal basis)
To provide the service you request (storing, syncing, predicting and exporting your data) based on your consent, which you can withdraw at any time by deleting your data or account.
To keep accounts secure (rate limiting, fraud and abuse prevention, security logs that never contain health data).
We do not use your health data for profiling, advertising or training AI models.
Advertising
If the operator enables Google AdSense, ads appear only on general pages (never on logging, calendar-day, onboarding or account screens), only after you opt in, and are non-personalized. No health data is passed to the ad tag or placed in page addresses. Google may still process your IP address and device information under its own policies. You can turn ads off at any time in Settings → Privacy.
Maps (Nearby care)
Nearby care uses Google Maps. If you tap “Use my location”, your device location is sent directly to Google to show results. MyTracker does not store, log or sync your location.
Security
Data is encrypted in transit (HTTPS) and, on our servers, sensitive fields are encrypted at rest. Sessions use secure, HttpOnly cookies with CSRF protection. Staff and administrators cannot browse your health history.
Browser storage can be cleared by you, the browser or the operating system and is not as protected as native app storage. In private mode, export backups regularly and consider enabling the app lock PIN.
Retention and deletion
You can export or delete your data at any time from Settings → Data. Deleting your account removes your health data, profile and sign-in methods immediately and revokes all sessions. Encrypted database backups age out within 35 days and are only used for disaster recovery.
Security logs (without health data) are kept for up to 180 days.
Your rights
You may access, correct, export and erase your data, withdraw consent, and nominate another person to exercise your rights where the law allows. Contact support@setuflow.com. You may also complain to the Data Protection Board of India or your local authority.
Children
MyTracker is intended for people aged 12 and over. Where the law treats a user as a child (for example, under 18 in India under the DPDP Act, 2023), use requires verifiable consent from a parent or lawful guardian.