Privacy Policy
Last updated: 12 August 2026
What we collect
Your account details (name, email, Google account id), your cycle and symptom records, your food, water, sleep and exercise logs, and your in-app preferences — processed only to give you personalised guidance and to run the app's core functions.
Your cycle, symptom and health-log records are sensitive personal data. Under Turkish data protection law (KVKK), which applies where this app is published, they are classed as a special category of personal data, and we apply the same protection to every user wherever they are: they are processed only with your explicit consent (given during setup), used for nothing other than producing your own guidance, and never sold to a third party.
Feedback you send us
When you write a suggestion in the app, give a plan a 👍 or 👎, or use Profile > Send Feedback, we store what you wrote, the rating you gave, which piece of content it was about, and the app version. We use this only to improve the app.
Because free text can contain health information, it gets the same protection as the rest of your health records: it is kept in our database where only your own account can read it (row-level security), it is never sent to any analytics or advertising service, and it is never written to an error log. Your feedback is deleted permanently along with everything else when you delete your account.
If Google Play's in-app review prompt appears, the rating you give goes straight to Google. We never see it and cannot connect it to anything you have written in the app.
Third-party processors
The providers below process your data on our behalf and on our instructions, and only for the purpose named. They do not use it for their own purposes, and it is never sold:
- Supabase — database, authentication and server-side (Edge Functions) infrastructure
- Google Sign-In — creating an account and signing in
- Baseten — the Cycle Coach chat assistant (your messages are processed only to produce a reply)
- OpenAI — meal photo analysis (a photo you upload is processed for the analysis and is not stored)
- RevenueCat — subscription and purchase management
- Firebase — notification delivery only (the app contains no crash or error reporting tool)
- USDA / Open Food Facts — food database lookups (only the search term is sent; nothing that identifies you or your account)
Storage and security
Your data is stored encrypted on Supabase infrastructure in the EU region, and row-level access rules mean only your own account can read it.
Your rights and deleting your account
You can ask for a copy of your data, ask us to correct it, or have your account and everything associated with it deleted permanently.
In the app:Profile > Delete Account. This cannot be undone: your account details and all of your health, cycle and nutrition records are removed permanently.
Without installing the app: email support@cycleapp.site from, or naming, the address linked to your account. Requests are actioned within 30 days at the latest, and all of your personal and health data is deleted permanently.
Contact
For anything else, use our contact page.