Privacy Policy

Cyclea LLC is the controller of your personal information. 7901 4th St N, Ste 300, St. Petersburg, FL 33702, USA. Contact: support@cyclea.app.

The period, cycle, and wellbeing information you enter is sensitive ("special category") personal data. We process it only to provide the Service to you, and where required by law we rely on your explicit consent. Your data is stored on our behalf by Supabase in a data center in Zürich, Switzerland, and is never shared with advertisers or data brokers.

Information you provide:

• Account information: your email and password (stored only in hashed form by our authentication provider), and profile details you choose to add — display name, username, profile photo, preferred language, and time zone.
• Cycle and wellbeing data you log: period flow, cycle/period length settings, phases, and — depending on the features you use — mood, energy, symptoms, sleep, and free-text notes or journal entries; plus planner entries and cycle-prediction preferences.
• Friends: friend requests you send or accept, and your visibility ("who can find me") preference.
• Communications: messages you send us, such as support emails.
• Newsletter and waitlist: if you join our waitlist or subscribe to our newsletter, we collect your email address so we can send you updates about Cyclea. You can unsubscribe at any time.

Information created as you use the Service:

• Derived cycle data: predicted cycles, ovulation estimates, and phase windows calculated from what you log.
• Content activity: articles or classes you save or open, and your daily featured selection.
• Technical data: our hosting provider processes basic technical information (such as IP address and request logs) to run the Service securely and reliably.
• Diagnostics and error reports: when the app runs into an error or crashes, it sends us a technical report so we can find and fix the problem. These reports contain the error type and message, the stack trace, and basic app and device details such as app version, device model, and operating system version, together with technical log messages the app produces as it runs. These reports are not linked to your account or profile. Your cycle, period, symptom, mood, journal, and planner entries are never included in them. The app contains no advertising SDKs, and we do not use product analytics, behavioural profiling, or session recording.

To provide core features (tracking, forecasts, planner, content, friends); to create your account, authenticate you, and provide support; to send you newsletters and product updates you have asked to receive (which you can unsubscribe from at any time); to diagnose and fix crashes and errors, and to keep the Service secure and reliable; and to comply with legal obligations.

For users in the EU/EEA, UK, and Switzerland, our legal bases are: your consent for sensitive health data (which you can withdraw at any time); performance of a contract to provide the Service; our legitimate interests in operating and securing it; and compliance with legal obligations.

Cyclea calculates your forecasts and phase windows from the data you log, using our own logic — we do not currently use artificial intelligence or any third-party AI service to process your personal data. We may add AI-assisted insight features in the future. If we do, we will update this Policy and inform you before any of your personal data is processed in that way.

We share personal information only as described here:

• With other users you connect with. When you and another user become friends, they can see your username, display name, profile photo, cycle and period lengths, current phase, current cycle day, your phase windows (dates), and a compatibility "match score." They cannot see your daily logs, symptoms, moods, journal or notes, flow entries, planner, favorites, or email. You control this by choosing whom to accept and by your visibility setting.
• With service providers who process data on our behalf, under contracts requiring appropriate protection: Supabase provides our database, authentication, and file storage, hosted in Zürich, Switzerland. Our content-delivery providers (the Directus CMS and Storj media storage) serve only editorial content and media to the app and do not receive your personal information.
• PostHog provides our crash and error reporting. Diagnostic reports from the app are processed on PostHog Cloud EU, hosted in Frankfurt, Germany, under a data processing agreement. PostHog receives only the technical error and log data described above — never your cycle, period, or wellbeing data — and the reports are not tied to your identity.
• Brevo (operated by Sendinblue SAS, based in France, in the European Union) is our email and newsletter provider. If you join our waitlist or subscribe to our newsletter, Brevo processes your email address on our behalf to manage our mailing list and deliver the emails you signed up for. You can unsubscribe at any time using the link in any email or by contacting support@cyclea.app.
• For legal and safety reasons — if required by law, or to protect the rights, safety, and security of our users, the public, or Cyclea.
• In a business transfer — if Cyclea is involved in a merger, acquisition, or asset sale, your information may be transferred subject to this Policy.

We do not sell your personal information, and we do not share it for cross-context behavioral advertising.

Cyclea LLC is based in the United States, while your account and health data is stored in Switzerland — recognized by the EU and UK as providing an adequate level of data protection — and diagnostic error reports are processed in Germany, within the EU. Where we transfer personal data internationally (including access from the US), we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses and equivalent mechanisms.

We keep your information for as long as your account exists. When you delete your account, we delete your profile and all associated data — logs, cycles, planner, favorites, friendships, and profile photo — and this cannot be undone. Residual copies in routine backups are removed on a rolling basis, and temporary media links expire within hours.

You can delete your account and all associated data at any time in the app (Profile → Account → Delete account) or by emailing support@cyclea.app.

Depending on where you live, you may also have rights to: access, correct, or receive a copy of your information (portability); delete it; restrict or object to certain processing and withdraw consent; opt out of the "sale" or "sharing" of personal information (we do neither for advertising); and lodge a complaint with your data protection authority.

• EU/EEA, UK & Switzerland (GDPR / UK GDPR / Swiss FADP): the rights above, plus the right to complain to your supervisory authority (in Switzerland, the Federal Data Protection and Information Commissioner, FDPIC/EDÖB).
• United States (including California): rights to know, delete, and correct, and to opt out of sale/sharing — which we do not do. We will not discriminate against you for exercising your rights.
• Canada, Australia & New Zealand: rights of access and correction under PIPEDA, the Australian Privacy Principles, and the New Zealand Privacy Act.

To exercise any right, email support@cyclea.app. We may need to verify your identity.

Data is encrypted in transit. On your device, your login session is stored in the iOS Keychain / Android Keystore. Access is restricted at the database level so you — and, for the limited fields above, friends you approve — can access only your own data. No method of transmission or storage is completely secure, but we work to protect your information. Before an error report leaves your device, the app strips fields known to carry personal information, and health data is excluded from error reporting by design.

Cyclea is not directed to children under 13, and we do not knowingly collect their personal information. If you are between 13 and the age of digital consent in your country (up to 16 in parts of the EU), use Cyclea only with the involvement and consent of a parent or guardian. If you believe a child has provided us personal information, contact support@cyclea.app and we will delete it.

We may update this Policy from time to time. If we make material changes, we will notify you in the app or on our website and update the effective date above.

Cyclea LLC — support@cyclea.app — 7901 4th St N, Ste 300, St. Petersburg, FL 33702, USA.