Privacy Policy

Last Updated: April 17, 2026

This Privacy Policy describes how CycleBuddy ("CycleBuddy," "we," "us," or "our") collects, uses, and protects your personal data when you use our application, website, and related services (collectively, the "Service").

1. Our Commitment to Your Privacy

CycleBuddy is built on a simple principle: your health data belongs to you. We do not sell your personal information. We do not share your menstrual or health data with advertisers, data brokers, or any third party for commercial purposes. We do not build advertising profiles. We do not track you across other apps or websites. Your cycle data is used for one purpose only: to provide you with the CycleBuddy tracking experience.

2. Information We Collect

2.1 Information You Provide

  • Account details such as your name and email address.
  • Health and cycle data you choose to log, including period dates, symptoms, and notes.
  • Support requests and communications with us.

2.2 Information Collected Automatically

  • Device and technical information (device model, OS version, app version).
  • Usage analytics (features used, session duration, diagnostics) to help us improve the app.
  • Approximate location inferred from IP address solely for fraud prevention and security purposes.

What we do not collect: We do not collect your phone number, precise GPS location, contacts, or any data unrelated to providing the Service.

3. How We Use Your Information

  • To provide, maintain, and improve the Service.
  • To authenticate your account and keep it secure.
  • To personalize your in-app experience based on your logged cycle data.
  • To respond to support requests and communications.
  • To detect fraud, abuse, and policy violations.
  • To comply with legal obligations.

We do not use your health or cycle data for advertising, profiling, or any commercial purpose beyond operating the Service for you.

4. How We Share Your Information

We do not sell, rent, license, or share your personal or health data with third parties for commercial or advertising purposes. Full stop.

We may share information only in the following limited circumstances:

  • Infrastructure providers: CycleBuddy uses third-party service providers for hosting and technical operations. These providers act on our behalf and are contractually prohibited from using your data for their own purposes. Your cycle and health data is not shared with any service provider for advertising or profiling.
  • Legal requirements: We may disclose data when required by law, court order, or to protect the safety and rights of our users.
  • Business transfers: In the event of a merger or acquisition, your data would transfer to the successor entity under the same privacy commitments set out in this policy. You will be notified before any such transfer takes place.

5. Health and Menstrual Data

Your cycle and health data is sensitive personal information and we treat it as such. This data is stored solely to power your CycleBuddy experience. It is never used for advertising. It is never sold. It is never shared with data brokers or analytics companies for commercial use.

We are committed to progressively strengthening our privacy infrastructure. Our roadmap includes client-side encryption — where your data is encrypted on your device before it ever reaches our servers — so that even we cannot read it. We will update this policy as those protections are implemented.

6. Infrastructure and Data Storage

CycleBuddy currently uses third-party cloud infrastructure for hosting and data storage while we scale. We do not use advertising products or allow any service provider to access your health data for their own purposes. As we grow, our roadmap includes migrating to our own private servers to give you even stronger data sovereignty.

7. Data Retention

We retain your data for as long as your account is active and for a reasonable period afterward to allow account recovery. Specific retention periods:

  • Account and profile data: while your account is active.
  • Cycle and health data: while your account is active.
  • Support communications: up to 24 months after resolution.
  • Analytics and diagnostic data: up to 24 months from collection.
  • Security logs: up to 12 months from collection.
  • Backup copies: up to 30 days from creation.

If you delete your account, we begin permanent deletion of your personal and health data within 7 business days. Where retention is required for legal, fraud-prevention, or regulatory compliance purposes, we retain only the minimum data necessary for no longer than 7 years, unless a longer period is required by law.

8. Your Rights and Choices

Depending on your location, you may have the right to access, correct, delete, or restrict processing of your personal data. To exercise any of these rights or to request full account and data deletion, email us at from your registered email address. We process verified requests within 7 business days.

9. Security

We use technical and organizational safeguards to protect your data, including encrypted data transmission and access controls. No internet-based system is fully secure, and we cannot guarantee absolute security. We will notify you promptly in the event of a breach that affects your personal data.

10. Children's Privacy

CycleBuddy is intended for users aged 13 and older, or older where required by local law. We do not knowingly collect data from children under this age. CycleBuddy has zero tolerance for child sexual abuse and exploitation content or behavior. We will remove violating content, restrict access, and report to authorities as required by law. To report a child safety concern, contact .

11. International Data Transfers

Your data may be processed in countries other than your own as part of our cloud infrastructure. Where required by applicable law, we apply appropriate safeguards for cross-border transfers, including standard contractual clauses.

12. Changes to This Policy

We may update this Privacy Policy as our practices evolve. Updates will be posted on this page with a revised "Last Updated" date. For significant changes, we will notify you directly via the app or email before the change takes effect.

13. Contact

For privacy questions or data requests: