Privacy Policy
Last updated October 2026. Covers the health data M-1 collects, separate from our general Terms of Service.
What we collect, and why
- Symptom entries — what you log in Today, used to build your timeline, pattern summaries, and Visit Packet.
- Bleeding entries — same purpose.
- Medications and tried treatments — used only to include in your Visit Packet.
- Visit Packets you generate — stored so you can revisit, edit, or print them later.
- A device key and linked devices — M-1 has no accounts. Your browser keeps a random key (a cookie) that opens your record; we store only a scrambled (hashed) form of it, plus a general label for each device you link (like “iPhone · Safari”) and when it was last used, so you can see and remove them in Profile. If you create a recovery key or a code to link another device, we store only a hashed form of those too — never the key or code itself.
- An optional name — only if you choose to add one in Profile, used solely to greet you and to title your Doctor Prep.
We never use this data for advertising, and it is never part of our usage counts. No ad-tech pixels run on any screen of this app.
Usage counts
To learn whether M-1 is being used, we count visits. For each visit we record which section you opened (for example “Learn”, never which topic), your approximate city and region (worked out from your connection; your IP address is not stored), device and browser type, the site that linked you here, and how long the page was open. This goes to our own usage dashboard, hosted on Vercel like M-1, and is not linked to your record or anything you log. Vercel's Web Analytics also counts anonymous page views. Your browser keeps a small “visited before” flag for this.
Where it comes from
Directly and only from what you enter yourself. M-1 does not connect to wearables, health records, or any third-party data source.
Who we share it with
M-1 does not sell, rent, or share your health data with any third party or affiliate, for advertising or any other purpose. Two narrow, purpose-limited exceptions exist: a medication name you type into Packet is sent to RxNav (a free lookup service run by the U.S. National Library of Medicine) solely to standardize the name for your own records — no other data accompanies that request. And if you use the Contact form, your message is sent through our transactional email provider (Resend) so it reaches us. Neither service receives anything beyond what's needed for that one purpose.
Your rights
From Profile you can, at any time and without a support request:
- Leave your name blank, so no name is tied to your data.
- Download a copy of all of your data, instantly, as one file.
- Delete all of your data, instantly and permanently, on every linked device.