Privacy & support

Brownie Points: PMS for Men · Privacy policy

Effective date: 10 November 2026 · Last updated: November 2026 · Version: 2026-11-a

1. Who we are and how to reach us

Brownie Points is listed in the app stores as "Brownie Points: PMS for Men" and appears on your home screen as "Brownie" ("Puntos" on a phone set to Spanish), or as "Small Wins" ("Logros") in discreet mode on Android. It is published by Net Mojo, Inc., a US company, which is the controller for the personal data the app handles.

• Postal address: Net Mojo, Inc., 9107 West Russell Road, Suite 100, Las Vegas, NV 89148-1233, USA
• Privacy contact: support@browniepointstracker.com
• Who handles privacy requests: our privacy team

In this policy, "we" and "us" mean Net Mojo, Inc. "You" means the person using the app. "Your partner" or "she" means the person whose period dates you log.

2. What the app stores, and where

The information below is stored only on your phone, inside the app, encrypted. It is never sent to Net Mojo, Inc. It leaves the phone only if you export it (section 7).

Estimates are not stored. Each time you open the app, it works out from the dates you logged an estimated range for her next period and the "Possible PMS window · estimate": a few days before her estimated period. These estimates are never saved, exported or put in notifications.

This is health information about another person. Her period dates, and anything you write about her, are information about her health. In the EU and UK this is "special category" data, and some US states have specific laws for it (section 13 and our Consumer Health Data Policy).

Please keep notes about you and what you do. Don't write her symptoms, medical details or intimate details in notes or partner details.

3. What Net Mojo, Inc. receives

From the app: nothing. The app has no server, no account and no cloud sync. It sends no analytics, telemetry or crash reports, and it sends no data to Net Mojo, Inc. or to anyone else. On Android, Google Play's billing component includes Google's own error logging, which it keeps on the phone; the app has no internet permission, so it can't send it.

The app's own code makes no internet connections. On iPhone, Apple (App Store) handles your one-time purchase and "Restore purchase", and provides the date of your original download, which the app uses to count the free period. On Android, the Google Play Store app handles the purchase connection, not this app: Google only confirms your one-time purchase and "Restore purchase", and the free period counts from the date the app was installed on this phone, which the phone itself keeps. Links you tap (for example the full privacy policy, or a resource in Get help) open in your web browser; the app adds no data to them.

Apple and Google. They handle your download, payment and "Restore purchase" under their own privacy policies, so they know that you downloaded or bought the app. Like every developer, Net Mojo, Inc. can see aggregate figures in the Apple and Google developer consoles, such as installs, purchases and country. They contain no information about her.

Crash reports shared by your phone. The app sends nothing to Net Mojo. If you've allowed your phone to share diagnostics with app developers, Apple or Google may give us technical crash reports about the app. We don't use them. These reports contain nothing you or she entered in the app. Only one person at Net Mojo, Inc. can open the developer consoles, and only to fix a reported problem.

If you email us. We receive your email address and what you write, through our email provider, Google Workspace, provided by Google LLC (USA). Google handles these emails for us, as our processor, under its Cloud Data Processing Addendum. We use them only to reply. Please don't send us your partner's health information. How long we keep support emails: we delete each email thread 24 months after it's closed.

This website. browniepointstracker.com and sumapuntos.app are simple sites that host this policy and the app's information pages. They are static pages hosted on Cloudflare Pages by Cloudflare, Inc. (USA). We set no cookies and use no analytics. Cloudflare may set a strictly necessary security cookie if it needs to check that a visitor isn't a bot. Like any web host, Cloudflare processes each request, including the visitor's IP address, browser type, the page requested and the time. It handles these request logs for us, as our processor, and handles some security data under its own privacy policy (cloudflare.com/privacypolicy). We don't export or keep these logs. Transfers to the US rely on Cloudflare's EU-U.S. Data Privacy Framework certification and its UK Extension, with standard contractual clauses as a fallback.

4. What we don't do

• No account, sign-in or cloud sync.
• No ads. The app sends nothing to advertising, analytics, attribution or crash-reporting services.
• We share no user data with third parties. Apple and Google process purchases under their own policies. Our email provider (Google Workspace) and website host (Cloudflare) handle only what reaches them, on our behalf, except for the security data Cloudflare handles under its own privacy policy (section 3).
• No sale of data. We have none to sell.
• No partner features: she doesn't need the app, an account or any access.
• No tracking of her moods or symptoms. The app has no fields for them.
• No fertility, ovulation or contraception predictions, and no "late" or "missed period" labels saved anywhere.
• No automated decisions with legal or similarly significant effects. The estimates are worked out on your phone, for you, and decide nothing about her.
• We don't collect, use or sell personal data to train large language models.
• No medical advice and no diagnosis.

5. Her consent

She answers for herself, before anything about her is saved. The app asks you to hand her your phone. She reads a short notice and taps "I agree" or "No". You enter her dates only after she agrees.

When she's asked: - at setup, and if you set the app up again after deleting everything; - every 6 months after her last "yes"; - to resume tracking after a pause; - before you import data from an export file; - when we change her notice in a way that matters (section 14); - whenever you choose Settings › Consent › Ask her now.

What's recorded: when she says yes, the type of question, the date and time, and the version of the notice she saw. No signature, name or contact details. If you choose "remind me tomorrow" on a check-in, that is recorded as your choice, not hers.

A "no" is never stored. - At setup: nothing about her is saved. - At import: nothing is loaded and the data on the phone doesn't change. - At a check-in, when you choose Ask her now, during a pause, or when she's asked again after a notice change: one tap on No starts a 30-second countdown, then the app deletes everything it holds about her. There's no extra confirm. During the countdown she can tap "Undo, I tapped by mistake", which shows her notice again; only a fresh "yes" keeps tracking going.

She can change her mind anytime, without giving a reason: by answering No at a check-in, by asking you to open Settings › Consent › Ask her now and answering No, or by asking you to stop. You can stop from Settings, the Today menu, the check-in sheet or the paused screen. Stopping is one confirm screen and has no undo.

The app can't check who taps. It relies on you to hand her the phone and let her decide freely. Never answer for her.

If no one answers a check-in within 14 days, tracking pauses. Estimates, date-based tips and cycle reminders stop; her information stays on the phone, encrypted. Only her "yes" resumes tracking. From day 23 of the pause, the app shows a warning each time it's opened, and, if notifications are on, sends one neutral notification. If no one answers "yes", the app deletes everything about her on or after day 30: the next time it's opened, or earlier if the phone lets it run in the background. There's no undo, and the app explains afterwards what happened.

6. How the information is protected

• Encrypted on the phone. The app is designed to encrypt all its data and keep the key in your phone's key store.
• App lock, on by default. The app opens with your phone's unlock: face or fingerprint where your phone supports it, or your passcode. You can turn it off. When it's on, the app's preview in your recent-apps screen is hidden or blurred.
• Phone backups are off for this data. The app's data is left out of iCloud and Android backups and phone-to-phone transfer. To keep a copy, use Export.
• Neutral notifications. Notifications are off until you turn them on. Lock-screen text never mentions periods, cycles, dates or her name. Reminders timed to her cycle stay off unless you choose them, because even neutral reminders at regular times can hint at a pattern. While tracking is paused, the only notification is the single deletion warning (section 5).
• Discreet mode (optional). On Android, it changes the app's icon and its name on your home screen, to Small Wins (Logros on a phone set to Spanish). On iPhone, where supported, it switches to a plainer icon; the name under it doesn't change. It protects her privacy from other people who see your phone. It is not a way to hide the app from her.

7. Export and import

• Export (Settings › Your data › Export) creates one file, named backup-YYYY-MM-DD.bin with the export date, with your settings, partner details, period dates, notes and consent records. It is always encrypted with a passphrase of at least 12 characters that you choose. A lost passphrase can't be recovered.
• This is the only way her information leaves the phone. You choose where the file goes. Anyone with the file and the passphrase can read it. Deleting data in the app doesn't delete export files you saved elsewhere. The app keeps the date of each export (date only). If she's asked again before the data is deleted, it shows her at that check-in the dates of any exports since her last yes (dates only, no number), so she knows copies may exist. It clears them after she answers, or when everything is deleted.
• Import (Settings › Your data › Import) accepts only this app's export files. It shows you a preview, asks her to agree, then asks you to confirm replacing the data on the phone.
• Because backups are off, export and import are how you move to a new phone.

8. Payments, the free trial and what stays free

• The app is free with all features for 45 days. After that, a one-time purchase unlocks it, at the price the store shows in your currency. There is no subscription. Setup has no store step, and the app stores nothing about the free period. On iPhone, the 45 calendar days count from the date Apple records for your original download, so deleting everything, setting up again or reinstalling doesn't restart them. On Android, they count from when the app was installed on this phone: deleting everything or setting up again doesn't restart them, but reinstalling the app may.
• Apple or Google handles payment and "Restore purchase" under their own privacy policies. We never see your card details. Her information is never part of a purchase.
• Free whether you've paid or not: viewing what you logged, export and import, deleting, stopping, her check-ins, app lock, discreet mode, and these eight guides: "When it's more than PMS", "When to suggest seeing a doctor", "Why everything says 'estimated'", "Get help now", "Her yes, and keeping it a yes", "Support or control? An honest check", "Stopping, cleanly" and "Her data, handled like it matters".
• Nothing is ever deleted for not paying.

9. Your choices and rights

In the app, at any time, paid or not. Because we don't hold the data, you use most rights directly on the phone:

For your partner. She can ask you to show her what's logged, correct it, export it or stop and delete it, and she can say no at any check-in or through Ask her now. She doesn't need a reason.

Requests to us. You or she can write to support@browniepointstracker.com or Net Mojo, Inc., 9107 West Russell Road, Suite 100, Las Vegas, NV 89148-1233, USA to ask about your rights. Our privacy team answers, free of charge, within the deadline for your region (section 13). Because the app sends us nothing, our answer will usually be that we hold none of this information, and we'll explain how to see, correct, copy or delete it on the phone. We can't reach into a phone. In the UK, complaints to us follow section 13.

10. How long information is kept

If she says no at a check-in and the app is closed during the 30-second undo, the deletion finishes then, or the next time the app opens at the latest. Her information is hidden in the meantime.

11. Adults only

The app is for adults. You confirm you're 18 or older before setup. Her notice includes her own line, "I'm 18 or older", and asks her to agree only if that's true. The app stores no birth date, only that the check was passed. Don't use the app to log information about anyone under 18.

12. Requests from police, courts or others

We hold none of her information, so we have nothing to hand over. Information on a phone stays under the control of the phone's owner. The app keeps no "late" or "missed period" labels, stores no estimates, and deletes everything about her when you stop.

13. Information by region

European Union and Spain

• Controller: Net Mojo, Inc. (section 1).
• Legal basis. Her information: her explicit consent (GDPR Art 6(1)(a) and Art 9(2)(a)). Your own app data: providing the app you chose to use (Art 6(1)(b)). Support emails: our legitimate interest in answering you (Art 6(1)(f)).
• Notice to her. Her notice in the app and this policy are our notice to her, because the information comes from you, not from her.
• Your rights (GDPR Arts 15–22): access, correction, deletion, restriction, a copy in a portable format, and objection. She can withdraw consent at any time; that doesn't affect what was done before. Use the app (section 9) or write to us. We answer within one month; for complex requests, we may extend this by two more months and will tell you why.
• International transfers. Her app data never reaches us, so we don't transfer it anywhere. If you email us, your message is handled by Net Mojo, Inc. in the United States and by our email provider, Google Workspace (Google LLC, USA). Transfers of support emails to the US rely on Google LLC's EU-U.S. Data Privacy Framework certification, its UK Extension and the Swiss-U.S. Data Privacy Framework, with standard contractual clauses (Module 2) and the UK Addendum in Google's Cloud Data Processing Addendum as a fallback.
• No automated decisions with legal or similarly significant effects.
• Spain. This policy is available in Spanish at sumapuntos.app. You can complain to the Agencia Española de Protección de Datos (AEPD) through its online office, sedeaepd.gob.es, using the AEPD's forms.

United Kingdom

• The same legal bases, rights and one-month deadline (extendable by two months) apply under the UK GDPR.
• Complaints. If you're unhappy with how we handle personal data, you can complain to us at support@browniepointstracker.com or Net Mojo, Inc., 9107 West Russell Road, Suite 100, Las Vegas, NV 89148-1233, USA. We'll acknowledge your complaint within 30 days, look into it, keep you updated and tell you the outcome without undue delay. You can also complain to the ICO (Information Commission): ico.org.uk/make-a-complaint, 0303 123 1113.

United States

• We don't sell anyone's information or use it for ads.
• Washington, Nevada and Connecticut have laws on consumer health data. Our Consumer Health Data Policy explains her rights, how to use them and how to appeal: https://browniepointstracker.com/consumer-health-data.html.
• California: Net Mojo, Inc. doesn't meet any of the thresholds that make a business subject to the California Consumer Privacy Act (CCPA), so the CCPA doesn't apply to us.

Mexico

• This policy is our full privacy notice (aviso de privacidad integral); the Spanish version at sumapuntos.app is the official one. Her notice in the app is the short version (aviso simplificado).
• Her period dates are sensitive personal data (health). We process them only with her consent, which she gives or refuses herself on your phone. The app doesn't collect a signature and can't verify who taps.
• Your rights (ARCO): access, rectification, cancellation and objection, plus revoking consent. Use the app (section 9) or write to support@browniepointstracker.com, handled by our privacy team. We answer within 20 business days and, if your request is granted, carry it out within 15 business days; each period can be extended once. It's free.
• Revoking consent: she answers No at a check-in or Ask her now, or asks you to stop (section 5).
• No transfers. We don't transfer personal data to anyone.
• Changes are announced as in section 14.
• Authority: you can request data protection from the Secretaría Anticorrupción y Buen Gobierno within 15 business days of our answer, or after the deadline passes without one.

Argentina

• Brownie Points is available in Argentina. This policy and her notice are available in Spanish at sumapuntos.app.
• Purpose and recipients: her information is used only so that you can see estimates and support tips on your phone. It goes to no one: not to Net Mojo, Inc., not to third parties.
• Who is responsible: Net Mojo, Inc., 9107 West Russell Road, Suite 100, Las Vegas, NV 89148-1233, USA. The information is kept only on your phone (section 2).
• Mandatory or optional: only the start date of her last period is needed for the app to work; everything else is optional. She is never obliged to agree. If she says no, nothing is saved. If dates are wrong, the estimates will be wrong. Her information is sensitive (health), and no one can be made to provide it.
• Rights: access, rectification and deletion, in the app (section 9) or by writing to support@browniepointstracker.com. We answer access requests within 10 calendar days, and rectification or deletion requests within 5 business days.
• Authority: "LA AGENCIA DE ACCESO A LA INFORMACIÓN PÚBLICA, en su carácter de Órgano de Control de la Ley N° 25.326, tiene la atribución de atender las denuncias y reclamos que interpongan quienes resulten afectados en sus derechos por incumplimiento de las normas vigentes en materia de protección de datos personales." (The Agency for Access to Public Information, as the supervisory body of Law 25.326, handles complaints from anyone whose data protection rights have been affected.)

14. Changes to this policy

If we change this policy, we update the dates at the top and publish the new version here. If we change her notice in a way that matters, for example what the app stores or how her consent works, the app shows her the updated notice, with a "Something changed" line, the next time it's opened and asks her to answer again. Until she answers, it works like a due check-in: if no one answers within 14 days, tracking pauses.

15. Contact

Net Mojo, Inc. · 9107 West Russell Road, Suite 100, Las Vegas, NV 89148-1233, USA · support@browniepointstracker.com · Privacy requests: handled by our privacy team