🔒 Zero-Cloud Local-First Health Privacy Architecture
Stree stores all menstrual cycle logs, mood ratings, symptom
checklists, and private journals strictly on your local Android
device. We do not sell user data, harvest health information, or track
individual health behavior.
1. What Data Stree Holds & Where It Resides
-
Local Health Data (On-Device Only): Period dates,
flow intensity, mood ratings, symptom checklists, and free-text
journals are stored in an encrypted Room + SQLCipher database on your
phone. Private journals are hardware-encrypted with AES-256 via
Android Keystore.
-
Account & Billing Metadata (Server-Side): If you
unlock additional profile slots or request PDF reports, your email
address is collected to deliver GST tax invoices and verify
transaction entitlements via Cloudflare Workers
(`api.diagonal.wenesay.com`).
2. Data Deletion & PII Obfuscation Procedures
Users have complete control over their data under India DPDP Act 2023,
GDPR, and Google Play policies. You can delete your data through the
following methods:
Option A: Delete All Local Health Data (Instant On-Device Wipe)
You can instantly delete all local health logs, profiles, journals, and
encryption keys from your device:
-
In-App: Open Stree ➔
Settings ➔ Privacy & Data Rights ➔ Tap
"Delete All Local Data".
-
Android Settings: Open your phone's
Settings ➔ Apps ➔ Stree ➔ Storage & Cache ➔ Clear Storage.
-
Uninstall: Uninstalling Stree permanently deletes all
local health databases from your phone.
Option B: Request Account & Billing PII Erasure
If you provided an email address during a paid transaction and wish to
have your personal identifiers deleted from our servers:
-
In-App Shortcut: Go to
Settings ➔ Privacy & Data Rights ➔ Request Account Email
Deletion.
-
Manual Email Request: Send an email to
support@wenesay.com
with the subject line
Stree Account Data Deletion Request.
Email Support to Request Deletion
3. How Financial Transactions & Tax Ledgers Are Handled (PII
Obfuscation)
When a PII erasure request is processed:
-
Identifiable PII Erased: Your email address, account
session tokens, name, and IP logs are permanently deleted or replaced
with an irreversible salted cryptographic hash (e.g.
anon_usr_a3f9e1b2@anonymized.wenesay.local).
-
Statutory Financial Records Retained (Anonymized):
Financial numbers (amount paid, GST tax remitted, invoice reference
ID, date) are preserved in an anonymous ledger format. This fulfills
mandatory statutory financial and GST tax audit obligations under
Indian tax laws without retaining any link to your identity.