Privacy Policy

Last updated: 22 October 2026

This Privacy Policy describes how Hannah Life Technologies Pte Ltd ("Company", "we", "us", or "our") collects, uses, discloses, and protects your Personal Data in compliance with the Singapore Personal Data Protection Act ("PDPA").

This Policy applies to personal data collected through our web application, e-commerce platform, and associated services (collectively, the "Service"), where customers purchase twoplus Ovulation Pro Read and submit test results for cycle and ovulation tracking and predictive analysis.

1. Important Notice Regarding Health and Sensitive Data

By purchasing our twoplus Ovulation Pro Read and submitting test images or results to our Service, you acknowledge and explicitly consent to the collection, processing, and analysis of your health-related personal data (including menstrual cycle dates, test result images, ovulation indicators, cycle length, period length and the dates of attempts to conceive that you choose to log).

Disclaimer: Our Service provides cycle tracking and ovulation predictions for informational and planning purposes only. The Service does not provide medical advice, diagnosis, or treatment, and is not a substitute for professional healthcare.

2. Personal Data We Collect

We collect information that identifies, relates to, or can be reasonably linked to you ("Personal Data"):

A. Account and Purchase Information

  • Identity and Contact Data: Name, email address. The web application itself asks only for your email address; your name is held with your order on our e-commerce platform.
  • Account Credentials: Your password, which is stored only as a one-way hash by our authentication provider and is never visible to us, and whether your email address has been verified.
  • Transaction Data: Order number, item purchases and order history, and whether a qualifying purchase has been found for your account.

B. Health and Test Data

  • Test Kit Submissions: The cropped image of each ovulation test strip you scan, the picture of your completed strip organiser, the date and time each test was taken (read from the photo where available, or as you enter it), and the readings our system derives from the strip. The strip is analysed on your own device; the full photo is not uploaded.
  • Cycle Logs: Dates of periods, your stated and measured cycle length, period length, dates of TTC attempts, days you mark as missed, and the ovulation predictions and fertility reports generated by our system.

C. Technical and Web Application Data

  • Usage Data: Our hosting provider records the IP address, browser and operating system of each request to the site, and the pages requested, in short-lived server logs used for security and troubleshooting. We use your IP address briefly to limit repeated sign-up attempts and do not store it. We record the date and time of your sign-ins.
  • Cookies and Local Storage: We do not use cookies. The app stores data in your browser’s storage to keep you signed in, to keep an offline copy of your cycle so the app works without a connection, to remember your display preference, and to cache the strip-recognition model. Signing out clears your sign-in; your browser’s site-data controls clear the rest.

3. How We Use Your Personal Data

We collect and use your Personal Data for the following purposes:

  • Account Management: Creating, maintaining, and authenticating your user account on our web application, including sending you email-verification and password-reset emails.
  • Purchase Verification: Checking your order history with our e-commerce platform to confirm that your account holds a qualifying purchase of twoplus Ovulation Pro Read, which unlocks the strip scanner. This check runs each time you sign in.
  • Image Analysis and Prediction: Reading your test strips and your cycle logs to deliver ovulation predictions, fertility reports and cycle insights. The strip-recognition model runs in your browser on your own device; we store the cropped strip image and the reading it produced.
  • Customer Support: Responding to your inquiries, technical support requests, and order updates.
  • Security: Protecting the Service against abuse, including limiting repeated sign-up attempts and keeping short-lived server logs.
  • Service Improvement: We may use your test strip images and readings, cycle length, period length and dates of TTC attempts to further train our strip-recognition model and refine our prediction algorithms. Before any such use, this data is separated from your name, email address and account so that it cannot be linked back to you, and it is used only in that anonymised form. We do not analyse usage data for this purpose.
  • Legal and Compliance: Complying with applicable laws, legal processes, or requests from regulatory authorities in Singapore.

4. Disclosure and Transfer of Personal Data

We do not sell, rent, or trade your Personal Data or health metrics to third parties or marketing advertisers. We disclose Personal Data strictly on a need-to-know basis to service providers acting on our behalf and bound by confidentiality and data-protection obligations:

  • Our cloud hosting, authentication, database and image-storage providers, which hold your account and health data and send our email-verification and password-reset emails.
  • Our e-commerce platform, which receives your email address to confirm your purchase when you sign in and to show you your order history.
  • The internal communication tools our support team uses to receive the feedback you send through the web application.

Transfers of Personal Data Outside Singapore

If your Personal Data is transferred to, stored, or processed outside Singapore (e.g., on cloud servers located overseas), we ensure that the recipient organisation provides a standard of protection to the transferred Personal Data that is comparable to the protection under the PDPA.

5. Explicit Consent and Withdrawal

  • Consent: By creating an account or uploading test results, you consent to the collection, use, and disclosure of your Personal Data as outlined in this Policy.
  • Withdrawing Consent: You may withdraw your consent for us to collect, use, or disclose your Personal Data at any time by deleting your account under My Account Details in the web application, which removes your cycle data, images and account immediately, or by contacting our Data Protection Officer (DPO).
  • Effect of Withdrawal: If you withdraw consent for the processing of your health data or test result submissions, we will be unable to provide you with cycle and ovulation predictions, and your account access may be restricted or terminated.

6. Access, Correction, and Retention

Access and Correction Rights

Under the PDPA, you have the right to:

  • Request access to the Personal Data we hold about you and information about how it has been used or disclosed in the past year.
  • Request the correction of any errors or omissions in your Personal Data.

In the web application you can edit or delete any strip entry, change your period dates and TTC days, change your password and view your order history under My Account Details. For access to anything else, or for a copy of the Personal Data we hold about you, email our DPO.

Data Retention

We retain your Personal Data for as long as your account remains active or as necessary to fulfill the purposes for which it was collected, comply with legal requirements, resolve disputes, and enforce our agreements. When Personal Data is no longer needed, we securely delete or anonymize it.

7. Protection and Security

We implement appropriate administrative, physical, and technical safeguards to protect your Personal Data—including sensitive health information and uploaded image files—against unauthorized access, collection, use, disclosure, copying, modification, or leakage.

Security measures include:

  • HTTPS encryption for all web application traffic and data in transit.
  • Encryption at rest for stored databases and image storage systems.
  • Restricted access controls allowing authorized personnel only to access user data on a strict need-to-know basis.

8. Browser Storage and Tracking Technologies

Our web application does not use cookies, analytics or tracking technologies. It relies on your browser’s storage to keep you signed in, to keep an offline copy of your cycle, to remember your display preference and to make scanning faster. If your browser blocks site data, or you use a private window, you will need to sign in on each visit and the app may not work offline.

9. Contacting Our Data Protection Officer (DPO)

If you have questions regarding this Privacy Policy, wish to exercise your access or correction rights, or wish to submit a privacy query or complaint, you may contact our Data Protection Officer by email at DPO@hannahlifetech.com or by mail using the details provided below:

2 Sims Close, #03-04 Gemini @ Sims, Singapore 387298.

10. Updates to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our legal obligations, technology, or business operations. Any updates will be posted on our web application with a revised "Last Updated" date. Continued use of our Service after any changes indicates your acceptance of the revised Policy.