Stree (स्त्री) — Privacy Policy & Data Deletion
Package: com.wenesay.diagonal.stree | Publisher: Wenesay
🔒 Zero-Cloud Local-First Health Privacy Architecture
Stree stores all menstrual cycle logs, mood ratings, symptom checklists, and private journals strictly on your local Android device. We do not sell user data, harvest health information, or track individual health behavior.
1. What Data Stree Holds & Where It Resides
- Local Health Data (On-Device Only): Period dates, flow intensity, mood ratings, symptom checklists, and free-text journals are stored in an encrypted Room + SQLCipher database on your phone. Private journals are hardware-encrypted with AES-256 via Android Keystore.
- Account & Billing Metadata (Server-Side): If you unlock additional profile slots or request PDF reports, your email address is collected to deliver GST tax invoices and verify transaction entitlements via Cloudflare Workers (`api.diagonal.wenesay.com`).
2. Data Deletion & PII Obfuscation Procedures
Users have complete control over their data under India DPDP Act 2023, GDPR, and Google Play policies. You can delete your data through the following methods:
Option A: Delete All Local Health Data (Instant On-Device Wipe)
You can instantly delete all local health logs, profiles, journals, and encryption keys from your device:
- In-App: Open Stree ➔ Settings ➔ Privacy & Data Rights ➔ Tap "Delete All Local Data".
- Android Settings: Open your phone's Settings ➔ Apps ➔ Stree ➔ Storage & Cache ➔ Clear Storage.
- Uninstall: Uninstalling Stree permanently deletes all local health databases from your phone.
Option B: Request Account & Billing PII Erasure
If you provided an email address during a paid transaction and wish to have your personal identifiers deleted from our servers:
- In-App Shortcut: Go to Settings ➔ Privacy & Data Rights ➔ Request Account Email Deletion.
- Manual Email Request: Send an email to [email protected] with the subject line
Stree Account Data Deletion Request.
3. How Financial Transactions & Tax Ledgers Are Handled (PII Obfuscation)
When a PII erasure request is processed:
- Identifiable PII Erased: Your email address, account session tokens, name, and IP logs are permanently deleted or replaced with an irreversible salted cryptographic hash (e.g.
[email protected]). - Statutory Financial Records Retained (Anonymized): Financial numbers (amount paid, GST tax remitted, invoice reference ID, date) are preserved in an anonymous ledger format. This fulfills mandatory statutory financial and GST tax audit obligations under Indian tax laws without retaining any link to your identity.