Your diary is yours

Last updated 19 October 2026

In short:

Your diary (periods, check-ins, symptoms, notes) is stored encrypted on your phone.
An account and cloud backup are optional. Backups are end-to-end encrypted, so no one at Ila can read them.
Optional usage and diagnostic data (usage stats, crash reports and app speed) is off unless you turn it on. It never includes anything from your diary.
We don't show ads or sell data.

Who we are

Ila is made by Rishi Pandey, an independent developer in India ("we", "us"). For any privacy question or request, email rishi007.pandey@live.com. This address also serves as our grievance contact under India's Digital Personal Data Protection Act, 2023.

1. What stays on your phone

Everything you record in Ila stays on your phone: period dates, daily check-ins (flow, pain, mood, energy, sleep, spotting and symptoms), notes, your optional nickname, goals, age range and body details, and your settings.

It's stored in an encrypted database (SQLCipher). The key is protected by your phone's Android Keystore.
We never receive it, unless you turn on cloud backup, and then only as encrypted data we can't read (section 3).
Reminders are scheduled and shown on your phone. Their text is kept neutral, and they're hidden on the lock screen.

2. Optional account

You can use Ila fully without an account. If you create one, it's handled by Firebase Authentication (a Google service):

Email and password: we keep your email address.
Your password: the password you type isn't sent. Ila turns it into a different sign-in value on your phone, and Firebase stores that value (hashed, as it does any password). The sign-in value can't be used to unlock your backup.
Sign in with Google: Google shares your name, email address and account ID with us for sign-in.
Why we need it: to sign you in and to connect you to your encrypted backup.
How long we keep it: until you delete your account.

3. Optional cloud backup (end-to-end encrypted)

If you turn on backup, Ila encrypts a copy of your diary on your phone before uploading it to Cloud Firestore (Google Cloud, Mumbai region).

The backup key: a random key, made on your phone, locks your backup. On your phone it's stored encrypted, under a key protected by Android Keystore. It's never uploaded in a form anyone else can use.
Locked copies of the key: so you can unlock your backup on a new phone, Firestore keeps copies of the key that are locked by your recovery code and, for email accounts, by your password. Neither can be opened without the code or the password.
Your phone's Google backup: where Android supports it, Ila also puts the key in Android Block Store. It's included in your phone's own Google backup only when Android can encrypt it end to end with your screen lock, so a new phone restored from that backup unlocks without a password or code. Neither we nor Google can read it.
The recovery code: shown when backup starts. You can save it to your password manager (for example Google Password Manager) or write it down.
What we can see: neither we nor Google can read your backup. We only see that an encrypted file exists, its size, when it was saved, and a short fingerprint that tells the app which key opens it.
How many are kept: the latest three backups.
If you lose every way in: if you lose your recovery code, and you can't sign in with your password or restore your phone's Google backup, the cloud backup can't be recovered, by us or anyone. The diary on your phone isn't affected.

4. Optional usage and diagnostic data

These are off by default. Ila asks once, and you can change your mind at any time in Settings → Privacy. If you agree, we use Google Analytics for Firebase, Firebase Crashlytics and Firebase Performance Monitoring to learn how the app is used and to fix problems.

What's shared (only with your consent)

Which screens are opened, and basic app events (for example "onboarding finished", "backup turned on").
A weekly usage summary in broad ranges (for example "1–3 check-ins"), never exact counts or times.
Your age range, if you chose to give one.
App version, phone model, Android version, language.
Approximate country, worked out by Google from your internet address. The address itself isn't kept. No location permission is used.
A random app-instance ID, crash details and app speed (start-up time, slow screens).

What's never shared

Period dates, or when you log a period or check-in.
Flow, pain, mood, energy, sleep, symptoms, spotting or notes.
Cycle lengths, estimates or reminders' content.
Your name, nickname, email, height or weight.
Your advertising ID. Ila doesn't use it.

How long it's kept: Analytics data for 2 months; crash reports for up to 90 days. It's never used for advertising, and Google's ad-personalisation signals are turned off.

5. Files you create

Ila can create an encrypted backup file or an unencrypted CSV export when you ask it to. They're saved wherever you choose, and you control them. We never receive them.

6. What we don't do

We don't sell, rent or trade your data.
We don't show ads or use advertising or data-broker SDKs.
We don't send health information to analytics, marketing or any third party.
We don't diagnose, predict fertility or give contraception advice.

7. Who processes data for us

Google LLC and its affiliates provide Firebase Authentication, Cloud Firestore, Google Analytics for Firebase, Crashlytics and Performance Monitoring. Google processes data on our behalf under its terms and may do so in countries other than yours. Backups are stored encrypted in the Mumbai (asia-south1) region.

8. Your choices and rights

Depending on where you live (for example under India's DPDP Act 2023 or the EU/UK GDPR), you can:

ask what data we hold about you;
ask us to correct or delete it;
withdraw consent at any time;
raise a grievance with us, or complain to your data protection authority.

Our legal basis for optional stats is your consent; for your account and backup it is providing the service you asked for. Email us to use any of these rights; we reply within 30 days.

9. Deleting your data

On your phone: Settings → Your data → Erase this phone's diary, or uninstall Ila.
Your account and cloud backups: Settings → Account → Delete account, or request deletion on the web.
Usage stats: turn them off in Settings → Privacy. Data already sent expires under the retention periods above.

10. Children

Ila is intended for people aged 16 and over, and isn't directed at children. If you believe a child has given us personal data, email us and we'll delete it.

11. Security

Ila encrypts your diary on the phone, uses TLS for any network connection, and restricts backups so only your signed-in account can reach them. Screens are hidden from screenshots and the recent-apps view. You can also lock Ila with your phone's PIN, and switch to a discreet home-screen icon.

12. Changes to this policy

If we change how Ila handles data, we'll update this page and the date above. For important changes we'll tell you in the app before they apply.