This Privacy Policy explains how Chako LTD (“we,” “us,” or “our”) handles information in the Marigold mobile application (the “App”). Marigold is built to keep your fertility-treatment information private: it lives on your device by default, and the few times anything leaves your phone are described plainly below.
The short version.
- Your health and cycle data is stored on your device, and in your own private iCloud if you enable sync. We cannot see it.
- We do not sell your data, and the App contains no advertising and no third-party tracking.
- If you choose to scan a lab report, the image may be sent — anonymously and over an encrypted connection — to our extraction service, where an AI model reads the printed values. The image is not stored afterward. You can always type values in manually instead.
1.Who We Are
Marigold is operated by Chako LTD, the data controller responsible for your information under applicable data-protection law, including the UK GDPR. You can reach us at shaxlo@chakoltd.com.
2.Information in the App
Health and cycle data you enter
This includes your cycle and phase, medications and dosages, injection sites, appointments, clinical results (such as follicle counts, lining, and hormone levels), symptoms, moods, journal entries, and expenses. This information is stored locally on your device, and synced through your private iCloud account if you turn on iCloud sync. It is not transmitted to us, and we have no access to it.
Lab-report scans
If you use the scan feature, the App captures a photo or imports a PDF of your report. See section 3 for exactly how these images are handled.
Subscription and purchase information
If you buy a subscription, the purchase is handled by Apple. Apple and our subscription-management provider process the transaction and subscription status so we can unlock paid features. We do not receive your full payment details (such as card numbers).
What we do not collect
Marigold does not require an account, and does not collect your name, email, contacts, location, or advertising identifiers. The App includes no analytics or tracking SDKs.
3.Lab-Report Scanning & AI Extraction
Reading values off a lab report is the one feature that may send data off your device. We designed it to reveal as little as possible, and to be optional.
- On-device first. When you scan a report, the App reads it on your phone using Apple’s Vision framework and pattern-matching. For many reports, nothing needs to leave your device.
- Encrypted, anonymous fallback. To improve accuracy, an image of the report may also be sent over an encrypted (HTTPS) connection to our extraction service. This upload is anonymous: no account, name, email, or device identity is attached to it.
- AI reading. At the service, a third-party AI vision model (provided by OpenAI) reads the printed values and returns the recognised numbers to your phone. The image is used only to perform this extraction. Under our agreement, your content submitted through the API is not used to train the provider’s models.
- Not stored. The report image is not retained by our service after the values are returned. We do not keep a copy.
- Your choice. If you would prefer that nothing leave your phone, skip scanning and enter values manually — every field can be typed in.
4.How We Use Information
We use information only to make the App work for you:
- to store and display your cycle, on your device;
- to read values from a report you choose to scan (section 3);
- to provide and manage subscriptions and paid features; and
- to respond to you if you contact support.
We do not use your information for advertising or profiling, and we do not sell it.
5.Legal Bases (UK GDPR)
Where the UK GDPR applies, we rely on the following legal bases:
- Consent for processing health-related data, including sending a report image for extraction. You give this by choosing to use the scan feature, and you can withdraw it at any time by not using it and by entering data manually.
- Performance of a contract to provide subscriptions and paid features.
- Legitimate interests in keeping the App secure and preventing abuse of the extraction service.
6.Third Parties We Rely On
We keep third parties to a minimum. The ones we use act as our service providers (“sub-processors”):
| Provider | Purpose | What it handles |
|---|---|---|
| Apple | App distribution, iCloud sync, payments | Purchases, subscription status; iCloud data stays in your account |
| OpenAI | AI reading of scanned reports | Anonymous report image, only during extraction |
| Subscription-management provider | Managing subscription entitlements | Anonymous subscription/purchase status |
Each provider’s use of information is governed by its own privacy policy.
7.International Transfers
Some providers, including OpenAI, may process information on servers outside the UK, such as in the United States. Where information is transferred internationally, we rely on appropriate safeguards (such as the providers’ standard contractual clauses) as required by UK data-protection law. Because report images are sent anonymously and not stored, the information involved is limited.
8.Data Retention
- Your health and cycle data is kept on your device (and your iCloud) for as long as you keep it there. You can delete it in the App at any time; deletion is permanent.
- Scanned report images are not retained by our extraction service after the values are returned.
- Subscription status is retained by Apple and our subscription provider as needed to manage your subscription.
9.Security
Data sent to our extraction service is transmitted over encrypted connections. On-device data is protected by your device’s security and, for iCloud, by your Apple ID — we recommend a strong, unique password and two-factor authentication. No method of transmission or storage is completely secure, but we take reasonable measures to protect information.
10.Your Rights
Because your health data stays on your device, you control it directly — you can view, edit, and permanently delete it in the App at any time. Depending on where you live, you may also have rights under data-protection law to access, correct, delete, or restrict processing of personal data, and to withdraw consent. To exercise any right, contact us at shaxlo@chakoltd.com. UK and EU users also have the right to complain to their data-protection authority (in the UK, the Information Commissioner’s Office).
11.Children
Marigold is intended for people aged 18 and over and is not directed at children. We do not knowingly collect information from children.
12.Changes to This Policy
We may update this Privacy Policy from time to time. When we do, we will revise the “Last updated” date above. Your continued use of the App after changes take effect means you accept the updated policy.
13.Contact Us
If you have any questions about this Privacy Policy or your data, contact us at shaxlo@chakoltd.com. You can also review our Terms of Use.