Introduction
Konenki is an app for wellbeing during menopause. The controller responsible for processing your data is Konenki, reachable at hello@konenki.be. This policy covers the app and the konenki.be website.
Our starting point is simple: we collect as little as possible. What we do not have, we cannot lose and do not need to protect.
Konenki is not directed at children. We do not knowingly collect data from anyone under sixteen.
Information we collect
What you provide yourself:
- A passkey to sign in. We store only its public key. No name, e-mail address, phone number, or password is needed to create an account.
- Your answers to questions and your activity and wellbeing records — health-related data you enter yourself. Some optional questions cover other personal topics, such as your relationship or your identity. We use your answers to tailor the activities the app suggests to you.
What is recorded automatically:
- Connection data — your IP address — in server logs.
What we do not collect: no name, no e-mail address, no phone number, no payment data, no photos, no contacts, no location, no advertising identifiers, no cookies, and no usage statistics.
Where your data is stored
Your data lives on a single server we manage ourselves within the European Union. We do not use public cloud services. Your data stays there for as long as your account exists. After you delete your account, the 30-day retention period described under Deleting your account applies; residual copies in backups disappear within one year through normal backup rotation.
Analytics
We do not do analytics or tracking. No analytics services, no trackers, no cookies, and no tags — not in the app and not on the website. We keep only anonymous aggregate statistics (for example, how many accounts exist) that contain no personal data.
Third-party services
There are no payment processors, no advertising networks, and no social media integrations. We disclose data to authorities only when legally required to do so. Because an account contains no name, e-mail address, or other identifying details, we cannot look up which account belongs to which person — so there is almost nothing we could disclose that traces back to you.
Data security
- All connections are encrypted (TLS).
- Passkeys work without a shared secret: nothing sits on our server that an attacker could steal to sign in as you.
- Recovery codes are stored only as strong hashes. Recovery codes work once.
- Failed sign-in attempts are rate-limited and recorded.
- Deleting your account revokes every sign-in session and every recovery code in a single step.
Your rights
Under the GDPR you have the right to access, correction, a copy of your data (portability), erasure, and objection. Your data lives in the app: that is where you view and correct it, and erasure is built in — see Deleting your account below. Because an account contains no name or contact details, we cannot link an e-mail request to an account; these rights are therefore exercised in the app itself. For questions, e-mail hello@konenki.be.
You can also lodge a complaint with the Belgian Data Protection Authority (Gegevensbeschermingsautoriteit).
There is no marketing, advertising, or newsletter to opt out of. The app requests no access to your camera, contacts, microphone, photos, or location.
Deleting your account
You can delete your account at any time from Settings in the app. Deletion requires an explicit confirmation and cannot be undone from the app.
When you confirm, your account is deactivated immediately: every login session is revoked and every recovery code is invalidated at the same moment, and the app removes your account data from this device. From that moment your account can no longer be signed in to, recovered, or restored.
Your data on our servers — your account, your answers, and your activity and wellbeing records — is permanently and irreversibly erased after a 30-day retention period. We hold this period solely for operational safety; the data is not used during it.
Residual copies may persist in our backups for up to one year after erasure, after which they are gone with normal backup rotation.
The app also keeps a small technical log on your device. It never leaves your device and we never receive it. It is not part of the account deletion above; you remove it by deleting the app.
We retain anonymous aggregate statistics (for example, how many accounts exist) that contain no personal data.
Versions
- — restructure: added sections on collected data, storage, analytics, third parties, security, rights, versions, and contact. The deletion terms are unchanged.
- — update for the app version that stores data online: the deletion policy.
- — first policy, for the local version of the app without accounts: the app collected no data and made no server connections.
We announce changes to this policy in the app; that is the only channel through which we reach you.
Contact us
For questions or privacy requests, e-mail hello@konenki.be. This address also handles requests about your rights; we have no separate data protection officer.