Legal
Effective 28 July 2026
Arlwena isn't a diagnosis or a replacement for your doctor. This policy explains what we collect to build your weekly plan, why, and how you can see, export or delete it at any time.
Arlwena is made by Sonak Media Ltd, registered in England and Wales, 5 Brayford Square, London, E1 0SG, United Kingdom. Sonak Media Ltd is the data controller for the personal data described in this policy.
Account information. The email address you sign up with, or — if you use Sign in with Apple — the identifier and (optionally private relay) email address Apple shares with us.
Your check-in data. What you log day to day: sleep, mood, energy, symptoms and anything you mark as a possible trigger. This is the data your weekly plan is built from.
Subscription and purchase data. Your subscription status and purchase history, handled through Apple's In-App Purchase system and our subscription platform, RevenueCat. We don't see or store your card details — Apple handles payment directly.
Device and notification data. Basic device information (device type, OS version) and, if you enable notifications, a push token used to deliver your weekly plan and reminders.
We don't run third-party analytics or advertising tracking in Arlwena.
Under UK GDPR, we rely on: contract (processing your check-ins is necessary to provide the plan you've signed up for), consent (for push notifications, which you can withdraw at any time), and legitimate interest (for basic security and product improvement).
We use a small number of trusted service providers to run Arlwena, each acting as a data processor on our instructions:
We do not sell your data, and we do not share it with advertisers or data brokers.
Your data is encrypted in transit and at rest. Access is limited to what's needed to operate the service. Where our service providers process data outside the UK or EEA, they do so under appropriate safeguards such as standard contractual clauses.
You can export or delete everything you've logged at any time from Settings in the app. Beyond that, under UK GDPR you have the right to access, correct, restrict, or object to our processing of your data, and the right to data portability. To exercise any of these, or if you'd rather we handle it directly, contact us — see below.
You also have the right to lodge a complaint with the UK Information Commissioner's Office (ICO) at ico.org.uk.
We keep your data for as long as your account is active. If you delete your account, your check-in data and account information are deleted from our systems, other than what we're required to retain for legal or accounting purposes (for example, purchase records).
Arlwena supports you in understanding your own patterns — it isn't a diagnosis, a medical device, or a replacement for your doctor. Where something you log looks like it needs medical attention, we'll say so plainly and point you toward getting real support.
Arlwena is intended for adults navigating perimenopause and menopause. It isn't directed at children, and we don't knowingly collect personal data from anyone under 16.
If we make material changes to this policy, we'll update the effective date above and, where appropriate, let you know in the app.
Questions about this policy or your data — including access, export or deletion requests — can be sent to privacy@arlwena.com, or in writing to Sonak Media Ltd, 5 Brayford Square, London, E1 0SG, United Kingdom.