← Back to Hug
Hug

Hug

Privacy Policy

A clear summary of how Hug handles your data, how you stay in control, and how to reach us.

TermsDownloadSupport

Privacy Policy for Hug

Last updated: January 5, 2026

Introduction

Hug is a cycle tracking app from Mona. This Privacy Policy explains what we collect, how we use it, how we protect it, and the choices you have. It applies to the Hug mobile app and related services.

Data We Collect

Health Data

  • Menstrual cycle dates
  • Flow intensity
  • Symptoms and moods
  • Custom notes

This information is used to power your charts, predictions, and insights. You decide what to log and when to update it.

Account Information

  • Email address (for authentication only)
  • Password (hashed and encrypted)

We use your email to sign you in and to secure your account. We do not store plaintext passwords.

Device Information

  • App version
  • Operating system version
  • Device type (for bug fixes and analytics)

This helps us diagnose compatibility issues, monitor performance, and improve stability.

How We Use Your Data

  • Cycle Predictions: Provide accurate cycle forecasts based on your history
  • Multi-Device Sync: Sync data across your devices (optional)
  • App Improvements: Improve app performance and fix bugs

If you do not enable sync, your data remains on your device. We use device information only to improve the app experience.

Data Security

  • Encryption in Transit: All data is encrypted using HTTPS/WSS
  • Encryption at Rest: Local data is encrypted on your device
  • Password Security: Passwords are hashed using industry-standard algorithms
  • No Third-Party Sharing: We never sell your data to third parties

We take security seriously and review our systems regularly to help keep your information safe.

Your Rights

Under GDPR and similar privacy laws, you have the right to:

  • Access: View all your data
  • Export: Download your data in a portable format
  • Delete: Permanently delete your account and all associated data
  • Rectify: Correct inaccurate data

To exercise these rights, email us at hug@mona.nyc.

Data Retention

  • Active accounts: Data retained indefinitely
  • Deleted accounts: All data permanently deleted within 30 days

Contact Us

If you have questions about this Privacy Policy:

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date.