There is no pum server holding your health data.
Not "we promise not to sell it." There is nothing to sell, nothing to leak, and nothing to hand over, because the data never arrives. Here's the architecture, plainly. When you want the statutes, the full privacy policy is one click away.
the mechanism
no account required
pum has no sign-up and no login screen. It never learns your name, email, or phone number. An account that doesn't exist can't be breached, subpoenaed, or sold.
on your device
Everything you log is stored locally on your iPhone, in pum's own database. Delete the app and the local data goes with it.
iCloud sync: off by default, your iCloud only
Out of the box, nothing syncs anywhere. If you turn it on, your data syncs through your own iCloud account, encrypted by Apple in transit and at rest. pum's servers aren't involved and pum never holds the keys.
no analytics, no ads, no trackers
No third-party analytics SDKs, no advertising identifiers, no behavioural tracking. The app makes no network requests that carry your health data.
export is yours
The AI export goes to your clipboard, on your action, to the assistant you choose. pum is not a middleman and sees nothing.
deletion is real
Uninstall removes the local database, and you can delete the iCloud copy from your own Settings. There is no pum-side profile left to ask us to delete.
don't take our word for it
An absence is checkable. pum never asks for an email address inside the app: you can watch onboarding not ask. The App Store privacy label reports no data collected linked to you. And anyone who inspects pum's network traffic will find exactly two anonymous, documented exceptions: an optional one-question install survey and opt-out crash diagnostics, both described precisely in the full policy, neither carrying your health data, your identity, or your network address.
why we built it this way
Period-app privacy isn't a hypothetical. Flo settled with the FTC in 2021 over health data shared with Facebook and Google, and the litigation ran for years afterwards (FTC). Stardust marketed "end-to-end encryption" in 2022 while holding the keys itself and sharing phone numbers with an analytics firm (TechCrunch). Better marketing was never the goal. pum is built so the question cannot come up: the data isn't there to misuse.
Health tracking that never phones home.
Free on iPhone. No account, ever.
