Questions, answered honestly.

On your phone, encrypted at rest by the OS secure enclave. Nothing is on our servers, because we don't have any servers for cycle data. If you uninstall the app, the data is destroyed with it.

Not from us — we don't have it. They'd have to subpoena your phone directly. If you opt in to cloud AI, the prompt sent to Google contains only cycle phase, 體質 tag, and 3 symptoms with no PII; Google's no-train commitment applies. iCloud / Google Drive backups are encrypted client-side before leaving your phone, so even Apple / Google can't read them.

No. The only ad SDK is Google Mobile Ads, used only for rewarded videos that free-tier users actively tap to earn AI 點. Premium has zero ads. We do not, and never will, sell or share cycle data with anyone.

Settings → Subscription → "Manage subscription". One tap deep-links you to Apple ID Subscriptions or Google Play Subscriptions. From there, cancel — that's the second tap. Two taps total. If you don't see this in your app, you're on a version older than v1.3.0; please update.

30 days after you start it. The exact date is shown in bold above the Confirm button before you start, and the countdown stays visible in Settings → Subscription. Cancel before that date and you are not charged.

Because Asia is where most of our users are, and pricing for the rest of the world is matched to local PPP. We'd rather have more people on Premium than higher revenue per user. The free tier is permanent and has the core feature; we're not running a freemium trap.

Refunds are processed by Apple or Google directly — we don't have refund infrastructure ourselves. Apple: reportaproblem.apple.com. Google: play.google.com/store/account/subscriptions. Both honor refunds for unintended charges if you ask within 48h.

Because most of our users grew up reading their bodies in those terms. The Asia culture pack uses 寒 / 熱 / 燥 / 濕 / 平和 / 不確定 because that vocabulary already exists in our users' families. If you prefer a Western frame, set the locale to en and the pack switches to phase-only language. The disclaimer banner is the same in both: 文化參考，不取代醫療建議.

It's accurate enough to be useful and not so accurate that you should treat it as medical advice. The disclaimer banner at the top of every "How am I today?" view says exactly this. The static fallback cards (used when 點數 are out, when you opt out of cloud AI, or on older devices) are sourced from WHO ICD-11 TM2 references and individually cited.

See a clinician. The "Talk to a clinician" CTA at the bottom of every AI answer links to MedPartner Taiwan / NHS UK / similar trusted resources for your locale.

Settings → Data → Export. We give you a JSON file with every cycle, symptom, mood entry, and 體質 selection you've logged. The format is documented at github.com/cjc305/qiflux-export-schema.

Settings → Data → Import. We support CSV exports from Flo, Clue, Apple Health, Health Connect. The importer runs on-device — your old data does not pass through our servers because we don't have any.

If you turned on iCloud / Google Drive backup, restore the app on your new phone, sign in to Apple/Google, and your data appears. If you didn't, the data is gone. We can't recover it because we never had it. We recommend turning on backup at install.

Apple Watch: corner / circular / rectangular complications showing cycle day, phase, and next-period countdown. Wear OS: a single tile with the same. Live Activity on iPhone 15+ shows the next-period countdown on the lock screen and Dynamic Island.

Watch / Wear OS / Live Activity / lock screen widgets are Premium-only. The free tier is the core "log today" loop on the phone.