Privacy Policy

• Account information — your email address and a securely hashed password.
• Journal data you enter — waking temperatures, period/bleeding days, cervical-fluid observations, sexual activity, ovulation marks, dates, and any notes. This may include data you import from a file.
• Technical data — basic request information (such as IP address) processed by our hosting provider to operate and secure the service.

We do not ask for more than we need, and we do not run third-party advertising or tracking.

Your data is used only to provide the service: to store and display your journal, calculate trends, phases, and estimates, authenticate you, and send essential account emails (such as password resets).

We do not sell your data, and we do not share your health data with advertisers or data brokers.

When you use the website (or the iOS app with web sync turned on), your data is stored in a database hosted on Cloudflare and processed by the application running on Cloudflare’s infrastructure. Access is restricted to your authenticated account. Passwords are hashed and never stored in plain text. Sign-in tokens are kept in your browser — or, in the iOS app, in the device Keychain — to keep you logged in.

The Cycle Journal iOS app stores your journal in a local database on your phone and offers two modes:

• On this device only (the default) — no account is needed and your journal never leaves your phone, except through backups you control (your journal is included in your normal iPhone/iCloud device backup) and files you explicitly export. In this mode we hold no copy of your data, cannot access it, and could not produce it to anyone.
• Web sync (opt-in) — if you sign in and enable sync, your journal is synced to your account on our servers as described above, so you can also view it in the browser.

The app’s daily reminder is a local notification: the reminder time is stored only on your device, and we do not use push notifications or hold device tokens. The app contains no analytics or third-party tracking.

If you use the optional iPhone Shortcut to log temperatures, it sends a temperature value and a date to the service using a key tied to your account. You can revoke that key at any time. In the app’s on-device mode, the “Log temperature” Shortcut action writes directly to the local database on your phone and sends nothing to us.

If you buy lifetime access, your payment is handled by a third-party payment processor, and we never see or store your full card details. On the web, purchases are processed by Stripe. In the iOS app, purchases are processed by Apple through the App Store.

These processors receive only the information needed to complete your purchase, such as your payment method and billing details. They never receive your journal entries or any of your health data. We receive a confirmation that your purchase succeeded and a record of your lifetime entitlement, not your card number. Stripe and Apple handle the data they collect under their own privacy policies.

• Access — view all of your data any time inside the app.
• Export — download everything as a CSV from the Import & export page.
• Correct or delete entries — edit or remove any entry in the app.
• Delete everything — erase all of your journal data, or your entire account, yourself from Settings. Deletion is immediate and permanent. You can also contact us if you need help.

Your journal is kept for as long as your account exists, so your history is there when you return. When you delete entries, your data, or your account, the rows are removed from the live database immediately. Residual copies in our infrastructure provider's automatic backups age out within 30 days. In the iOS app's on-device mode, retention is entirely in your hands — the data is on your phone.

The service runs on Cloudflare's infrastructure, with data stored and processed on Cloudflare's network, primarily in the United States. The service is intended for users in the United States.

Access to your data is restricted to your authenticated account, passwords and Shortcut keys are stored only as hashes, and we collect nothing beyond what the service needs. If a data breach affects your personal data, we will notify you without undue delay and will notify the relevant authorities where the law requires it.

Data in the iOS app's on-device mode is beyond our reach: we hold no copy, cannot access it, and could not produce it to anyone. For account data we do hold, we require valid legal process before disclosing anything, we will notify you of a request for your data unless we are legally prohibited from doing so, and we practice data minimization — we keep only what the journal needs, so there is nothing else to produce.

The cycle information you record is "sensitive personal information" under the CPRA. We collect it solely to provide the journal, we do not sell it or share it for cross-context behavioral advertising, and we do not use it for any purpose beyond providing the service — so there is nothing to opt out of or limit. You can exercise access, correction, and deletion directly in the app and Settings as described above, or contact us.

Cycle Journal is not intended for anyone under 16, and we do not knowingly collect data from children. If you believe a child has provided us data, please contact us.

We may update this policy as the service evolves. Material changes will be reflected here with a new “last updated” date.

Questions about your privacy? Reach us through the contact page.