Privacy
Cycle data is intimate. Some of it is legal jeopardy in some places. We treat it like it matters - because it does.
Diese Seite ist auf Englisch. Rechtlich verbindlich ist die englische Fassung. Wir arbeiten an einer deutschen Übersetzung. Bis dahin schreib uns gern an hello@ourcycle.app, wenn du etwas auf Deutsch erklärt haben möchtest.
Privacy by design
The defaults that protect every couple using OurCycle - no config required.
In plain words
The concrete part
For as long as the account is active. Delete the account and it is gone from our servers within 30 days, backups included. The details are below.
Deleting her account also blanks her partner's view. The few things kept separately, such as messages you sent us, are listed under "How long we keep things" below.
The full policy
This is our privacy policy for the OurCycle apps on iPhone, Apple Watch and Android, and for this website.
OurCycle is operated by Elaine Salvador, a sole trader in the United Kingdom, trading as OurCycle ("OurCycle", "we", "us"). We decide how your personal data is used, which makes us its controller under UK and EU data protection law. You can reach us about anything in this policy at hello@ourcycle.app or through our support page.
When you're signed in, what you log is saved on your phone and in your OurCycle account in Google Firebase, so it survives a new phone or a reinstall. Signing out removes it from that phone; signing back in to the same account brings it back.
From OurCycle 1.5.0 on iPhone and 0.2.0 on Android, her full logs and everything OurCycle learns about her sit in parts of her account that only she can read, and her partner's phone receives a separate copy that holds only what she has switched on. Older versions share her full logs, including her notes, with a connected partner, so please update the app on every phone you use.
Our server functions read what they need to send notifications, such as a morning summary or a note that a new cycle has started. Notifications are delivered through Apple and Google push services.
She decides. Each group has its own switch in Settings > Privacy, and a change applies the next time her partner's app updates.
If she disconnects her partner, their view goes blank. If she also uses OurCycle on a second phone, she should update the app there too, so her choices apply everywhere.
OurCycle starts adapting from her first cycle, and can spot her patterns from her third, if she logs most days. It learns her usual cycle length and range, and how she tends to feel at different points of her cycle, only from what she logs.
The learning is worked out on her phone. The results, her answers about her cycle and birth control, any pause and its reason, and how well past estimates matched are stored privately in her account, where only she can read them. Her partner sees what OurCycle learned, including its predictions for each part of her cycle, only if she turns on "Share what OurCycle learns about me".
She can reset her learning at any time in Settings > Learning. Her logs stay, and OurCycle starts learning again from that day.
Some suggestions, and the partner's questions to the coach, are answered with help from OpenAI, an AI company. From OurCycle 1.5.0 on iPhone and 0.2.0 on Android, the online coach is off until you turn it on, and the app asks for your consent first. You can turn it off any time in Settings > Privacy, and it stops straight away.
For each reply we send OpenAI only what that reply needs: her cycle day and phase, how she logged feeling today if she did (energy, mood, stress, pain, symptoms, flow), up to three patterns she chose to share, the partner's setup answers and reactions to earlier advice, and, in a chat, the partner's question and the last few messages. We never send names, email addresses, her libido, her notes or her history. Whatever the partner types is sent as written, so keep personal details out of questions.
When the partner uses the coach, it can use only what she already shares with them, and only if she has turned the online coach on herself. Otherwise the answer stays general.
OpenAI processes this for us under its API terms, as our processor (see openai.com/policies). We don't store coach requests or replies on our servers. On supported iPhones, an on-device coach runs entirely on the phone and sends nothing.
You can turn on a daily outlook: one line on your Today screen with an estimate of how your energy may go today, worked out from your own logs by Jev, an AI model made by TypeSafe. It is off until you turn it on, and the app asks for your consent first. You can turn it off any time in Settings > Privacy, and it stops straight away.
To do that, we send TypeSafe a short summary of your energy logs: today's cycle day and phase, your usual cycle length and its likely range, your period length, how many days you logged in each phase and how many of them were good-energy or slower days, your average energy in each phase, and your energy on the last three days. We never send your name, email address, account ID, notes, mood, stress, pain, symptoms or libido, anything about your partner, or a day-by-day log.
TypeSafe (TypeSafe AI, Inc.), whose service runs in the United States, processes this for us as our processor under its data processing terms (see typesafe.ai/legal/data-processing), to work out your outlook and on our instructions. It may not use the summary to train its models. It uses other companies to run its service, listed at trust.typesafe.ai/subprocessors. For transfers from the UK and the European Union, its data processing terms include the Standard Contractual Clauses approved by the European Commission and the UK Addendum.
Its customer terms (see typesafe.ai/legal/mca) also give it the right, with no time limit, to use what it receives and sends back to check for fraud and abuse of its service, to comply with the law, and to produce technical logs, statistics, metrics and other information about how its service is used, which it may then use without restriction, including to improve its products. This means TypeSafe may keep the summary and the outlook, or information made from them, without a time limit. Beyond that, its terms set no fixed retention period: they say it keeps personal data as long as needed for the purpose of the processing and as the law requires. We don't store the summary or the outlook on our servers; your phone keeps today's outlook until the next day. Your partner never sees it.
The apps use Google Analytics for Firebase to count how OurCycle is used: which screens and features are opened, whether sign-in worked, when a purchase starts, plus the app version, phone model, the country and language set on the phone, and whether you use OurCycle as the one who tracks or as a partner. It is tied to a random ID for the app installation, not to your name or email, and no advertising ID is collected.
It never includes cycle dates, check-ins, symptoms, moods, notes or anything OurCycle learns.
After you accept a spell, such as Floribunda (flowers), the phone you accepted it on may show one to three partner links to shops in the UK, Spain and Brazil, for flowers, tea, cosy things, sleep, spa days, meal kits, experiences and more. Each one is labelled "Partner link. OurCycle may earn a commission." If you buy something after tapping one, we may earn a commission from the shop.
They are picked only from the spell and your phone's country, never from your cycle, your logs or anything else about you. They never appear next to anything you log, and never in notifications, widgets, the Apple Watch app or the playful daily forecast.
A link opens only when you tap it, in a browser window that opens over the app. We never put your name, email address, account ID, cycle or health data in a link. The link carries only OurCycle's affiliate number and a short reference to the offer, such as which spell and country it is for, so the network can credit OurCycle. The link goes first to an affiliate network (Awin, or Impact for some event tickets), which records the click, then to the shop, whose site keeps that reference in a cookie. Like any website, the network and the shop see your IP address and browser details when the page opens. From there the network's and the shop's own privacy policies and cookies apply, and anything you buy is between you and the shop. Awin's privacy policy is at awin.com/gb/privacy and Impact's at impact.com/privacy-policy.
The app counts, in our usage statistics, when partner links are shown and when one is tapped. Neither count says which shop, spell or link it was.
Partner links are on by default. To turn them off, go to Settings > Partner offers > Show partner offers, or tap "Don't show partner offers" when they appear. Your choice is saved in your account.
This site is hosted by Vercel, which also counts page visits and measures page speed without cookies (Vercel Web Analytics and Speed Insights). Invite links are masked before a visit is counted.
If you take the quiz, we save your answers, your role and a country worked out from your connection in our database (Google Firebase; we don't store your IP address). If you add your email and tick the box, we email you your result through Resend and add you to our updates list; every email has an unsubscribe link. Messages sent through the contact form reach us by email through Resend.
These companies process personal data for us, under contracts that limit them to providing their service, apart from the further uses TypeSafe's terms allow, set out under "Your daily outlook (optional)" above. Apple and Google also act on their own account for app store accounts and payments, under their own privacy policies.
Affiliate networks and the shops behind partner links are not on this list. They act on their own account, and only after you tap a partner link (see "Partner links" above).
Several of these providers are in the United States, so your data may be processed outside the UK and the European Economic Area. Where a provider is certified under the EU-US Data Privacy Framework and its UK Extension, we rely on that. Otherwise we rely on the Standard Contractual Clauses approved by the European Commission, with the UK Addendum, in the provider's data processing terms. Ask us for a copy of the safeguards that apply.
Data travels encrypted between your phone and our services, and Google encrypts it at rest. Server rules let each account read only its own data and, for a connected partner, only the shared copy. Sign-in is handled by Firebase Authentication with Apple, Google or email.
OurCycle is not end-to-end encrypted. Our server functions can read the data they need to send notifications, and a small number of people at OurCycle with administrator access can technically reach stored data. We use that access only to run the service, to help when you ask us, or when the law requires it.
OurCycle is for adults aged 18 and over. We don't knowingly collect data from anyone younger. If you believe someone under 18 is using OurCycle, tell us and we'll delete the account.
Depending on where you live, including the UK, the EU and Brazil, you can ask to see your data, correct it, delete it, get a copy in a portable format, restrict or object to how we use it, and withdraw consent at any time. Much of it you can do yourself in the app: change what you share, turn the coach off, turn the daily outlook off, edit or delete logs, or delete your account.
For anything else, email hello@ourcycle.app and we'll reply within one month. You can also complain to a data protection authority: the Information Commissioner's Office in the UK, the authority where you live in the EU, or the ANPD in Brazil.
When something important changes, we'll tell you in the app or by email before it applies, and update the date below.
Last updated 10 October 2026. Privacy questions or requests: hello@ourcycle.app.
Questions?
We'll answer privacy questions personally - not via a form letter.