Page40 Plus

Privacy

Your privacy

Last updated: 31 October 2026

The short version

  • We only collect what we need to give you access to what you bought.
  • We never sell your data, and we use no advertising or tracking cookies.
  • Lab results and answers you give the Blood & Hormone Reader are not saved by us. When you close the page, they are gone.
  • Your Health Journal is saved to your account, encrypted, and only you can see it. You can download or delete it at any time.

Who we are

Page40 Plus and Method 40+ are run by Kristine Vuhta (“we”, “us”). We are responsible for your personal data under the EU General Data Protection Regulation (GDPR). For anything about your data, write to [email protected].

What we collect and why

Your account
Your email address, your name if you give it, and a scrambled (hashed) version of your password. We use this to sign you in and give you access to what you bought. Legal basis: our contract with you.
Signing in with Google
If you choose “Continue with Google”, Google shares your name, email address and profile picture with us. We keep only your name and email address, and use them only to create your account, sign you in and match your purchases. We do not see your Google password, we do not ask for access to your Gmail, contacts, calendar or files, and we do not share your Google information with anyone. You can remove our access at any time in your Google Account under Security, and deleting your Page40 Plus account deletes this information from our server. Our use of information received from Google follows the Google API Services User Data Policy, including its Limited Use requirements. Legal basis: our contract with you.
Your purchases
What you bought, when, the price, and your email address. Payments are handled by Stripe; we never see or store your card details. We keep purchase records because tax and accounting law requires it. If you ask for a refund, your request and anything you write with it are emailed to Kristine; on our server we keep only the date you asked and, if it is refunded, the date of the refund. Legal basis: our contract with you and our legal obligations.
Your place in the guide
The section of the guide you last read in each part, so you can continue where you left off on any device where you are signed in. Deleting your account deletes it. Legal basis: our contract with you.
Emails
If we email you about your account or purchase, the email is sent through our email provider. We do not send marketing emails unless you have asked for them.
Technical data
When you visit, our server and our network provider record your IP address, browser type, the page you asked for and the time. We use this only to run the website and protect it from attacks. Legal basis: our legitimate interest in a secure website.

Blood & Hormone Reader: your health data

Lab results, symptoms, cycle details and medicines are health data, a special category of personal data under GDPR (Article 9). We only process them with your consent. The Reader page explains what happens to your data, and by using the Reader after reading it you agree to this processing.

What you send
Your lab report (a PDF, a photo or pasted text) and your answers about your cycle, hormones, how you feel, your medicines and anything you choose to write. Please cover or crop out your name, date of birth and patient number before uploading; the Reader does not need them.
What happens to it
It travels encrypted to our server, which passes it to Microsoft’s Azure OpenAI service. An AI model reads the results from your report, and then writes general explanations and questions you can take to your doctor. Your results are shown on your screen only.
What we keep
Nothing. Your report, answers and results are held in memory only while they are being processed. We do not write them to a database, a file or our logs. The only thing we record is how much text was processed, so we can track costs. If you print or save your results, that copy is on your own device.
What Microsoft does
Microsoft processes the data for us under its Data Protection Addendum. Our requests ask Microsoft not to store them, and Microsoft does not use them to train its AI models. Microsoft automatically checks requests for misuse of its service. In the rare case that content is flagged, Microsoft may keep it in a secure, separate store and authorised Microsoft staff may review it.
Where it is processed
Microsoft may process the request in any of its data centres where the AI model runs, which can include countries outside the European Economic Area. These transfers are protected by Microsoft’s EU Standard Contractual Clauses and the EU–US Data Privacy Framework.
Your choice
You do not have to use the Reader, and you can stop at any time by closing the page. You can withdraw your consent whenever you like; because nothing is stored, there is nothing left for us to delete. Instead of uploading, you can also type your results by hand.
Not a medical decision
The Reader is an educational reading aid, not a medical device and not a diagnosis. It makes no decisions about you; it only gives you information to discuss with your doctor.

Health Journal: your health data

What you log in the Health Journal is health data under GDPR (Article 9), so we only keep it with your consent. The journal explains this when you first set it up, and by starting your journal you agree to it.

What you save
Your daily check-ins (energy, mood, sleep, stress, symptoms, habits, periods and notes), your profile (year of birth, cycle stage, medicines and supplements, health conditions, goals and questions for your doctor) and any lab results you add.
Where it is kept
On our server in the EU, linked to your account, so you can open your journal on any device where you are signed in. It is encrypted on the server, sent only over an encrypted connection, and never written to our logs. Only you can see it in the journal. We do not look at it, share it or use it for anything else.
Lab reports you upload
To read the numbers, the report is sent to Microsoft’s Azure OpenAI service in the same way as for the Blood & Hormone Reader (see above). The report itself is not kept; only the results you check and save go into your journal. You can also type your results instead.
How long we keep it
Until you delete it. In the journal, Profile lets you download everything (as a JSON or CSV file) and delete your whole journal at any time. Deleting your account also deletes your journal.
Your choice
You can withdraw your consent whenever you like by deleting your journal; nothing is left behind on our server. The journal is for your own tracking and education, not a medical device, and it makes no decisions about you.

Cookies and browser storage

We only use what is strictly needed for the site to work, so we do not ask for cookie consent:

p40_session
Keeps you signed in. Kept for 30 days.
p40_tools
Remembers which tools you have access to on this browser. Kept for 1 year.
Browser storage
Remembers your place in the guide on this device, so it opens quickly where you left off. The Blood & Hormone Reader also counts how many reports in a row it couldn’t read, so it can offer you a refund; it stores nothing about the reports themselves.

We use no analytics, advertising or social media trackers, and our fonts are served from our own server. Stripe uses its own cookies on its checkout page to prevent fraud.

Who helps us run the site

We share data only with the companies we need to run the site, and only for that purpose. They act on our instructions under data processing agreements:

Some of these companies are based in, or may process data in, the United States. Those transfers are protected by the EU–US Data Privacy Framework or EU Standard Contractual Clauses. We never sell your data.

How long we keep data

Your rights

You can ask us to show you the data we hold about you, correct it, delete it, limit how we use it, or give it to you in a portable format. You can object to processing based on our legitimate interests, and withdraw any consent at any time. Write to [email protected]; we will reply within one week.

If you are unhappy with how we handle your data, you can complain to the data protection authority in the EU country where you live or work.

Age

Page40 Plus is made for adults. Please do not use it if you are under 18.

Changes

If we change how we use your data, we will update this page and the date at the top.