Dusk is a wellness app for people who are trying to conceive. It helps you understand your cycle and reminds you before your fertile window. This policy explains what personal data Dusk collects, why, how it is stored and protected, and the rights you have over it.
1. Who we are
Dusk is operated by Tackxel Ltd (“we”, “us”, “our”), a company registered in the United Kingdom, whose registered address is 19 Athol Road, Manchester, M16 8QW, United Kingdom. Tackxel Ltd is the data controller responsible for your personal data under the UK General Data Protection Regulation (UK GDPR) and the EU GDPR. If you have any questions about this policy or how your data is handled, contact us at contact@tackxel.com.
2. What data we collect
Dusk only collects what you give it. We do not buy data about you from third parties.
Account data
- Your email address and a securely hashed password, used to create and sign in to your account.
- We send a confirmation link to your email address to verify it when you sign up.
- Your first name, if you provide one, used to personalise the app.
Health and cycle data (special-category data)
This is data concerning your health — a special category of personal data under the GDPR. It includes:
- Your typical cycle length, period length, and the date your last period started.
- Your year of birth and any health conditions you choose to record.
- Optional daily logs: menstrual flow, basal body temperature (BBT), ovulation-test (OPK) results, cervical mucus, symptoms, mood, intimacy, sleep, water intake, exercise, and free-text notes.
- Optional height and weight.
- Your fertile-window reminder preferences.
You choose which of these to record. Logging is optional and you can leave any field blank.
Technical data
Fertile-window reminders are scheduled and shown locally on your device. Dusk does not use third-party advertising or ad-tracking technology and does not build advertising profiles about you.
3. How and why we use your data
| Purpose | Data used |
|---|---|
| Create, verify, and secure your account | Email, password |
| Estimate your cycle phases and fertile window, and personalise the app | Cycle, period, and log data |
| Remind you before your fertile window opens | Cycle data and reminder preferences |
| Keep your data in sync across your devices | All account and health data |
| Respond to your requests and support enquiries | Email, and any details you send us |
Dusk does not use your data to make automated decisions that produce legal or similarly significant effects about you. Cycle predictions are informational estimates, not decisions.
4. Legal basis
We rely on the following legal bases under the GDPR:
- Your explicit consent (Article 9(2)(a))
- for collecting and processing your health and cycle data. You give this consent during onboarding and can withdraw it at any time by deleting your data (see below). Withdrawing consent does not affect processing that already took place.
- Performance of a contract (Article 6(1)(b))
- to provide the app and its features to you once you create an account.
5. Where your data is stored
Dusk is cloud-based. Your data is stored in a hosted PostgreSQL database provided by Supabase, our data processor, in a data centre in the United Kingdom / EU region (London, AWS eu-west-2). Your device also keeps an offline copy so the app works without a connection and syncs when you are back online.
Because this policy describes cloud storage, we do not claim that your data “never leaves your phone.” It is stored on secure servers so that it can sync across your devices.
6. International data transfers
Your data is stored in the United Kingdom / EU region. Some of our processors (for example, Supabase) are organisations that may access data from outside the UK/EU to provide their service. Where any such transfer of your personal data outside the UK/EU takes place, we ensure it is protected by appropriate safeguards recognised under the GDPR, such as the European Commission’s Standard Contractual Clauses and/or the UK International Data Transfer Agreement.
7. Sharing — and what we never do
We treat your fertility data as some of the most sensitive information there is. Specifically:
- We never sell your data.
- We never share it with advertisers or data brokers.
- We never share it with insurers or employers.
We share data only with Supabase, our infrastructure processor, strictly to store and sync your account on your behalf under a data-processing agreement. We may disclose data if we are legally required to by a valid court order or law, in which case we will disclose only what is strictly required.
8. How we protect your data
- Data is encrypted in transit (TLS) and at rest on our servers.
- Every table enforces row-level security, so your data is only ever accessible to your own authenticated account — one user can never read or change another user’s data.
- Access to production systems is restricted, and passwords are stored only as secure hashes, never in plain text.
No system is perfectly secure, but we take reasonable and appropriate measures to protect your data.
9. Retention, export, and deletion
We keep your data for as long as your account exists. You are always in control:
- Export: you can export everything Dusk holds about you, as a JSON file, at any time from Profile → My data → Export my data.
- Deletion: you can permanently delete your account and all associated data from Profile → My data → Delete my account. This performs a full erasure — your account, profile, and every log are permanently removed from both your device and our servers. It is immediate and cannot be undone.
After deletion we may retain minimal records only where we are legally required to (for example, to evidence that a deletion request was fulfilled), and only for as long as the law requires.
10. Your rights
Under the UK GDPR and EU GDPR you have the right to:
- Access — obtain a copy of the personal data we hold about you (also available via the in-app export).
- Rectification — correct data that is inaccurate or incomplete; you can edit most data directly in the app.
- Erasure — have your data deleted (“the right to be forgotten”), available in-app at any time.
- Data portability — receive your data in a structured, commonly used, machine-readable format (the JSON export).
- Restriction — ask us to limit how we use your data.
- Objection — object to certain processing.
- Withdraw consent — withdraw your consent to health-data processing at any time.
To exercise any of these rights, email contact@tackxel.com. You also have the right to lodge a complaint with a supervisory authority. In the UK this is the Information Commissioner’s Office (ICO) at ico.org.uk; in the EU it is your local data protection authority.
11. Children
Dusk is intended for adults. You must be 18 or older to use it, and it is not directed at or intended for anyone under 18. We do not knowingly collect personal data from anyone under 18; if you believe someone under 18 has provided us with personal data, contact us and we will delete it.
12. Changes to this policy
We may update this policy from time to time. When we do, we will change the “Last updated” date at the top of this page, and for significant changes we will provide a more prominent notice. Please review this page periodically.
13. Contact
Questions, requests, or concerns about your privacy? Email us at contact@tackxel.com and we will respond within the timeframes required by law (usually within one month).