Cycle PairJoin the beta

Privacy Policy

Last updated: [date]

Draft pending legal review.

Cycle Pair helps you understand your cycle, or support a partner through theirs. Your cycle information is personal health information, so this policy is written to be plain and specific. [Operator name] ("we") runs Cycle Pair.

The short version

  • You don't need an account to use Cycle Pair. An account (just an email address) is only needed if you choose to link a partner.
  • What you log stays on your device. Your period dates, notes and daily logs are never uploaded.
  • A few things leave your device, and only when you use them: AI chat text, a few numbers about your week if you use Weekly Compass, your recent check-ins if you ask for a Look back with AI, and, if you link a partner, a small status snapshot and any check-ins you choose to share (details below).
  • If you connect your calendar, it is read on your phone. Event names, places and people never leave it.
  • We don't sell your data, show ads, or use advertising or analytics trackers.
  • You can export or erase everything in Settings at any time.

What the app stores on your device

Period start dates and cycle history, the name you enter for yourself or your partner, your mode (for me or for my partner), tracking state (active, paused or pregnant), daily logs and notes, your weekly check-ins, reminder settings, the calendars you choose for Weekly Compass, its last suggestions, a saved copy of your last partner sync (so the app opens quickly and works without a signal), and small preferences such as dismissed banners. This is kept in the app's local storage on your phone or browser. Apart from the items described under "What leaves your device", it isn't uploaded anywhere.

Because it lives only on your device, we can't recover it if you delete the app, clear its data or lose your phone. Use Settings > Back up to save a copy. Automatic Android cloud backup is turned off for this app on purpose.

What leaves your device

Partner link (optional). Linking a partner needs an account. You give us your email address and sign in with a code we email you, with no password. We then store:

  • your email address;
  • the link between you and your partner, and the short invite code while it is waiting to be used (it expires after 15 minutes);
  • your sharing choices; and
  • one snapshot of the person who tracks: the current phase, the cycle day, the next phase and its date. Only if that person turns them on, the snapshot can also say whether today is a possible fertile day, whether tracking is paused or pregnancy mode is on, and the dates their recent periods started (so the partner's calendar and history match). All three extras are off by default.

Weekly check-ins you choose to share. Your weekly check-in (three 1 to 5 scores, the phase, and an optional note) is saved on your phone. If you are linked and tick "Share with your partner" on a check-in, that one check-in is uploaded so your partner can see it. Un-sharing it, unlinking, or deleting your account removes it from our servers. Check-ins you don't share are never uploaded.

Encrypted cloud backup (optional, off by default). If you turn it on, your cycle history, daily logs, check-ins and reminder settings are encrypted on your phone with a passphrase only you know, and the encrypted file is stored in your account. We can't read it and can't recover a forgotten passphrase. Turning it off with "delete cloud copy", or deleting your account, removes it.

Your partner can see only the snapshot, the check-ins and the About you two answers you choose to share, and only while you are linked. We never receive your notes, daily logs or the name you entered, and we receive your period dates only if you turn that option on. Turning a sharing option off removes what was already stored for it. The snapshot is health-related information that you choose to share, and you can stop at any time.

Our database and sign-in are provided by Supabase, and the sign-in code is sent by our email provider [email provider]. They process this data for us and only to run the partner link.

AI chat and explanations. When you send a message in the guidance chat, the app sends that conversation, the current phase name, your mode, and a two-letter region taken from your phone's language setting (for example "AU") to our server, which passes it to Anthropic's Claude API to write a reply. The region is used only so a safety reply can name the right helpline. It is not your location, and we never read your GPS. Don't include information you wouldn't want processed this way. Your notes and the names you entered in Settings are not sent, and your period dates are sent only if you turn that sharing option on. If you ask the chat to plan something (for example "what should we do Saturday?"), it can also use tools that run on your phone and return only reduced answers to the server: a busy level for each of the next seven days (and your partner's, if they chose to share theirs), the results of an event search for your city and interests, and the titles of your saved meals, but only if you switch that on under "What the chat can use". It never gets event titles, places, people or notes from your calendar. The chat can only show a plan: adding it to your calendar, setting a reminder or sending it to your partner happens only when you tap Do it. The built-in "Ask why" explanations are stored in the app and normally need no network request.

Your calendar and Weekly Compass (optional). If you choose to connect your calendar, the app asks Android for read access to the calendars on your phone (including Google Calendar if it is set up there). It never looks at your partner's. The only thing it ever adds to your calendar is a plan you choose with "Make it happen" and "Add to my calendar" on, which needs separate permission that Android asks for at that moment. It removes that event only if you tap Undo, and it never edits or deletes anything else. Everything is worked out on your phone: the app looks at event times, and briefly at an event's place and title, only to decide how busy each day is, whether something is in person, and whether a day looks like a trip. It then discards the titles, places, people and notes. Which calendars count is saved on your phone, and you can change it any time or remove access in Android Settings.

When you ask Weekly Compass for suggestions, the app sends our server, for each of the next seven days: the date, a busy score from 0 to 3, whether you appear to be away, the cycle phase, and your mode. That goes to Anthropic's Claude API to write the suggestions. Event names, places, people, notes and email are not sent. The headline on the home screen is worked out on your phone without any request.

Look back with AI (optional). If you tap "Look back with AI" on your weekly check-ins, and then "Send and summarize", your last few check-ins (the scores, the phase and the week) are sent through our server to Anthropic's Claude API once, to write a short summary. Your notes are included only if you leave "Include my notes" ticked, and they are sent exactly as you wrote them. Nothing is sent unless you tap, and the summary is shown to you and not saved. We don't save these requests in a database; our hosting provider and Anthropic may keep technical logs under their own policies.

We don't keep chat messages or Weekly Compass requests in a database. Our hosting provider (Vercel) and Anthropic process the request and may keep technical logs, such as IP address and timing, under their own policies. We use your IP address only to limit abuse (for example, too many requests in a short time).

How long we keep it

  • The shared snapshot, the check-ins you shared, and the link are kept only while you are linked. Unlinking, from either side, deletes them.
  • Your email and account are kept until you delete your account. An encrypted cloud backup, if you turned it on, is kept until you delete it or your account; each backup replaces the last.
  • We don't keep chat messages or Weekly Compass requests. Technical logs at our providers are kept under their own policies.

Notifications

Daily and weekly reminders, and any "Remind me" reminder you set from a Weekly Compass suggestion, are scheduled on your device. They don't go through our servers. Reminder text is generic by default and avoids showing pause or pregnancy status. You can turn reminders off in Settings or in your phone's notification settings.

About you two (optional). You can save a few details about yourself and your partner, such as birthdays, an anniversary, favourite comforts, what helps, and how you like tension handled. These are kept on your phone only, along with the name-free dates the app notes for major holidays. If you are linked and you switch on "Share what I entered about myself", only the answers you gave about yourself are uploaded so your partner can see them; what you enter about your partner is never uploaded. Switching it off, unlinking, or deleting your account removes what was uploaded. If you turn on day-before reminders for saved dates, they are scheduled on your phone and the text is generic unless you chose to show details.

Heads-up before a heavy day (optional). If you turn this on, the app uses the same calendar reading described above, on your phone, to spot a packed or away day that falls on or just before a period, and schedules one notification for the evening before. Nothing is sent to our servers or to Anthropic for this. The text is generic unless you have chosen to show details in your reminders.

Sharing

We share data only with the service providers described above (hosting, database and sign-in, and AI processing) and only to run those features. We don't sell personal information or share it for advertising. We may disclose information if the law requires it, but we hold almost nothing about you.

Your choices and rights

  • Export a backup or erase all data on your device in Settings. Uninstalling the app also removes it.
  • Delete your account. In Settings, choose Delete all my data. This erases everything on your phone and also deletes your email, your link, your shared snapshot, your shared check-ins and any encrypted backup from our servers. If you can't open the app, email us at the address below from the address you signed up with and we'll delete the account for you. Account deletion page
  • We hold very little: if you linked a partner, your email, the shared snapshot and any check-ins you shared. For any other privacy question or request, contact us below.
  • Depending on where you live you may have additional rights (for example, under GDPR or US state privacy laws). We'll respect them to the extent they apply.

Security

Data is encrypted in transit (HTTPS). On our server, access rules make sure a partner can read only the snapshot you share and nothing else. No system is perfectly secure, so keep your phone and email account protected.

Where data is processed

Our providers may process data in countries other than your own, including the United States. [Confirm the region of the Supabase project and describe any transfer safeguards after legal review.]

Children

Cycle Pair is not intended for people under 13 (or the minimum age in your country).

Changes

If we change this policy in a way that matters, we'll update the date above and tell you in the app.

Contact

[Contact email]