Privacy Policy
The short version: what you log stays on your iPhone. We have no account system and no server holding your entries, so there is no copy of your log anywhere else unless you made one yourself.
1. Who we are
Cycle Ally is made by Maks Beskrovnyi, an independent developer working alone in Ukraine. You can reach us at support@cycleally.com; that address is read by the person who makes the app, and it is the way to raise anything in this policy, including a request under a privacy law. There is no office and no postal address to publish — this is one person and a laptop, and we would rather say so than invent a company front.
2. What the app stores, and where
Everything you enter is written to a database inside the app’s own storage on your iPhone, encrypted by iOS: periods and their details, symptoms and your own trackers, mood, sleep, notes, tags, medications with dose changes and side effects, visits, lab results, check-up dates, home test readings, photos you add to the diary, and your settings. You can add a lock so the app also asks for Face ID or your passcode.
We do not receive any of it. There is no sign-up, no profile, and no server of ours that stores entries. A full account of every place an entry can end up is on the page Where your data can be.
3. Apple Health
The app works with Apple Health only after you allow it, and you can withdraw that permission at any time in the Health app.
What it writes (and only what you entered yourself, never anything the app worked out): menstrual flow, spotting, and these symptoms — acne, hair thinning, bloating, fatigue, abdominal cramps, pelvic pain, lower back pain, headache, mood changes. Dates you marked as approximate are never written.
What it reads, to fill in history you already have: menstrual flow, spotting, the same symptom types, and — if you choose to — the medication list you keep in the Health app, which is read only.
Data from Apple Health is used for the app’s own features and for nothing else. It is never used for advertising, marketing, or research, and it is never sold or shared. Apple Health itself is Apple’s, and what it does with a sample after it is written — including syncing between your own devices — is covered by Apple’s terms, not ours.
4. What leaves your iPhone, and only when you send it
- The clinician summary (PDF), when you share or save it.
- The spreadsheet export (CSV), when you share or save it.
- The encrypted backup file, locked with a password you choose. We never see that password and cannot recover it or open the file.
Each is created only when you ask for it. The spreadsheet and the backup are written to a temporary folder and deleted as soon as the share sheet closes. The summary is kept, so that you can hand the same file over twice: it is listed in the app under “Made earlier”, and you delete it there when you are done. Where a file goes after you send it is up to you and to whoever receives it.
5. Email to us
This website has no form, no sign-up and no mailing list: there is nothing here for you to fill in, so there is nothing for us to store. The only way we ever get anything from you is if you write to support@cycleally.com. We keep that correspondence for as long as it takes to help you and to have a record of what was asked — and please do not send us entries from your log; we do not need them to answer a question.
One detail about that mailbox, because you would not otherwise know it. Our replies leave through a mail provider, the way almost everybody's do. That provider puts nothing invisible into the letter: no tracking image telling us when you opened it, no rewritten links, no unsubscribe machinery. It keeps a record that the message was sent, which is how we know whether a reply reached you, and that is all it is used for. We chose this provider over a cheaper one for exactly this reason.
6. Payments
Cycle Ally Plus is sold by Apple. Apple takes the payment, holds the billing details and manages the subscription; the app is told only whether a subscription is active. We never see your name, card, billing address or Apple Account. The reports Apple gives developers are counts — how many subscriptions started or ended — and cannot be traced back to a person.
7. What we do not do
- No advertising, and no advertising identifiers.
- No analytics libraries, crash reporters or software development kits from other companies — the app contains none, and this website loads nothing from anyone else.
- No selling or sharing of your data, to anybody, for any purpose. There is no arrangement under which it could happen.
- No profiling, no automated decisions about you, and nothing your entries are fed into — no model is trained on them.
- No tracking of you across other apps or websites.
8. How long things are kept
| What | How long |
|---|---|
| Your entries | On your iPhone, until you delete them or the app. “Delete all data” in Settings erases the database, the exported files and the settings at once. |
| Samples in Apple Health | Until you delete them in the Health app. “Delete all data” does not touch Apple Health, and the screen says so — what is there, whoever wrote it, you remove in the Health app. |
| Files you exported | Wherever you put them, for as long as you keep them. |
| Support correspondence | Up to 24 months, then deleted. |
9. Your rights
You can exercise every one of these yourself, immediately, without asking us: look at everything you have logged, correct it, export it, and delete all of it. That is the practical consequence of the data being on your own phone.
Where a law gives you further rights — including Washington’s My Health My Data Act, Nevada SB 370, Connecticut, Virginia, California and the GDPR — you can exercise them by writing to support@cycleally.com. We will answer within 45 days, and within one month where the GDPR applies, because that is the shorter deadline it sets. In almost every case the honest answer will be that we hold nothing about you beyond an email you sent us yourself, which we will delete on request. For consumer health data specifically, see the Consumer Health Data Privacy Policy, which is a separate document required by those state laws.
10. Requests from authorities
If a court, a police force or any other authority asks us for your entries, we have nothing to give them: we hold no copy. We would say exactly that. Your iPhone, your iCloud device backup and your Apple Health data are not ours and are not covered by this — requests about those go to you or to Apple.
11. iCloud device backups
The app puts nothing into iCloud itself. If you back your iPhone up to iCloud, iOS includes the app’s storage in that backup like it does every other app’s. That copy belongs to your Apple account and is covered by Apple’s terms; under standard protection Apple holds the keys, and turning on Advanced Data Protection makes it end-to-end encrypted. The app’s settings let you exclude its data from the device backup.
12. Children
The app is rated for ages 13 and up. We do not knowingly collect anything from a child under 13. This website has no form and collects nothing, so the only way anything could reach us is an email somebody chose to send. If you believe a child has written to us, tell us and we will delete it.
13. Where we are and where the data is
The app stores your entries on your device, wherever you are. We hold no database of users anywhere — the only thing that ever reaches us is an email you chose to send, which sits in our mailbox.
14. Changes
If this policy changes, the new effective date appears at the top of this page and the previous version stays available on request. A change that affects what we collect or what we do with it will be announced in the app before it takes effect, and where the law requires your consent, we will ask for it rather than assume it.
Cycle Ally is a personal log. It does not diagnose, treat or prevent any condition and is not a substitute for professional medical advice. Not for contraception. Talk to your clinician before making health decisions.