Privacy
Cycle data is intimate. Some of it is legal jeopardy in some places. We treat it like it matters - because it does.
Privacy by design
The defaults that protect every couple using OurCycle - no config required.
In plain words
The concrete part
For as long as the account is active. Delete the account and it is gone from our servers within 30 days, backups included. The details, and the few things kept separately, are below.
Deleting her account also blanks her partner's view. The few things kept separately, such as messages you sent us or a message someone reported, are listed under "How long we keep things" below.
The full policy
This is our privacy policy for the OurCycle apps on iPhone, Apple Watch and Android, and for this website.
OurCycle is operated by Elaine Salvador, a sole trader in the United Kingdom, trading as OurCycle ("OurCycle", "we", "us"). We decide how your personal data is used, which makes us its controller under UK and EU data protection law. You can reach us about anything in this policy at hello@ourcycle.app or through our support page.
When you're signed in, what you log is saved on your phone and in your OurCycle account in Google Firebase, so it survives a new phone or a reinstall. Signing out removes it from that phone; signing back in to the same account brings it back.
From OurCycle 1.5.0 on iPhone and 0.2.0 on Android, her full logs and everything OurCycle learns about her sit in parts of her account that only she can read, and her partner's phone receives a separate copy that holds only what she has switched on. Older versions share her full logs, including her notes, with a connected partner, so please update the app on every phone you use.
Our server functions read what they need to send notifications, such as a morning summary or a note that a new cycle has started. Notifications are delivered through Apple and Google push services.
She decides. Each group has its own switch in Settings > Privacy, and a change applies the next time her partner's app updates.
If she disconnects her partner, their view goes blank. If she also uses OurCycle on a second phone, she should update the app there too, so her choices apply everywhere.
From OurCycle 1.6.19 on iPhone and 0.5.0 on Android, signals, replies and short messages between connected partners disappear from the app after 24 hours. We then delete them from our servers, and from our backups within 30 days. An older version of the app may keep them until it updates. Notifications travel through Apple and Google, and a screenshot, a notification or a phone backup can still keep a message.
Our servers check each new message for links and blocked words, and remove it when they find one. No one at OurCycle reads messages unless one is reported, you ask us to look at one, or the law requires it. We keep a count of what was sent, by date and type, never the words, for as long as your account exists.
If your partner reports a message you sent, we look at it. We don't tell you about the report, unless the law requires us to. A report sends us the message, when it was sent, who sent it and who reported it. It also sends the reason, any note added and the reporter's app version, phone type and language. We keep the report and its message until we close it and for up to 90 days after, even if an account is deleted in the meantime, unless the law requires us to keep it longer. Backups can keep a copy for up to 30 days more.
OurCycle starts adapting from her first cycle, and can spot her patterns from her third, if she logs most days. It learns her usual cycle length and range, and how she tends to feel at different points of her cycle, only from what she logs.
The learning is worked out on her phone. The results, her answers about her cycle and birth control, any pause and its reason, and how well past estimates matched are stored privately in her account, where only she can read them. Her partner sees what OurCycle learned, including its predictions for each part of her cycle, only if she turns on "Share what OurCycle learns about me".
She can reset her learning at any time in Settings > Learning. Her logs stay, and OurCycle starts learning again from that day.
Some suggestions, and the partner's questions to the coach, are answered with help from OpenAI, an AI company. From OurCycle 1.5.0 on iPhone and 0.2.0 on Android, the online coach is off until you turn it on, and the app asks for your consent first. You can turn it off any time in Settings > Privacy, and it stops straight away.
For each reply we send OpenAI only what that reply needs: her cycle day and phase, how she logged feeling today if she did (energy, mood, stress, pain, symptoms, flow), up to three patterns she chose to share, the partner's setup answers and reactions to earlier advice, and, in a chat, the partner's question and the last few messages. We never send names, email addresses, her libido, her notes or her history. Whatever the partner types is sent as written, so keep personal details out of questions.
When the partner uses the coach, it can use only what she already shares with them, and only if she has turned the online coach on herself. Otherwise the answer stays general.
OpenAI processes this for us under its API terms, as our processor (see openai.com/policies). We don't store coach requests or replies on our servers. On supported iPhones, an on-device coach runs entirely on the phone and sends nothing.
You can turn on a daily outlook: one line on your Today screen with an estimate of how your energy may go today, worked out from your own logs by Jev, an AI model made by TypeSafe. It is off until you turn it on, and the app asks for your consent first. You can turn it off any time in Settings > Privacy, and it stops straight away.
To do that, we send TypeSafe a short summary of your energy logs: today's cycle day and phase, your usual cycle length and its likely range, your period length, how many days you logged in each phase and how many of them were good-energy or slower days, your average energy in each phase, and your energy on the last three days. We never send your name, email address, account ID, notes, mood, stress, pain, symptoms or libido, anything about your partner, or a day-by-day log.
TypeSafe (TypeSafe AI, Inc.), whose service runs in the United States, processes this for us as our processor under its data processing terms (see typesafe.ai/legal/data-processing), to work out your outlook and on our instructions. It may not use the summary to train its models. It uses other companies to run its service, listed at trust.typesafe.ai/subprocessors. For transfers from the UK and the European Union, its data processing terms include the Standard Contractual Clauses approved by the European Commission and the UK Addendum.
Its customer terms (see typesafe.ai/legal/mca) also give it the right, with no time limit, to use what it receives and sends back to check for fraud and abuse of its service, to comply with the law, and to produce technical logs, statistics, metrics and other information about how its service is used, which it may then use without restriction, including to improve its products. This means TypeSafe may keep the summary and the outlook, or information made from them, without a time limit. Beyond that, its terms set no fixed retention period: they say it keeps personal data as long as needed for the purpose of the processing and as the law requires. We don't store the summary or the outlook on our servers; your phone keeps today's outlook until the next day. Your partner never sees it.
OurCycle can read health data from Apple Health on iPhone, or from Health Connect on Android, but only if you allow it. It asks only when you choose to connect, never on its own, and you decide which kinds of data it may read. Apple Health and Health Connect hold what your watch, ring or other health apps save there, for example an Apple Watch or a Samsung Galaxy Watch, so what OurCycle can read depends on what your devices measure.
It can read your sleep, resting heart rate, heart rate variability, heart rate, wrist temperature during sleep (on iPhone, from Apple Health), basal body temperature, respiratory rate, blood oxygen, steps and activity, hormone tests you take at home, such as ovulation (LH) and progesterone tests, and period dates. It does not read cervical mucus or sexual activity.
OurCycle uses these readings only on your phone, to show how your body is doing today compared with your usual. Hormone test results are only shown back to you as you logged them.
These readings, and what OurCycle shows you from them, stay on your phone. They are never uploaded to our servers or to your OurCycle account, never shared with your partner, advertisers or anyone else, never reach the coach, the daily outlook or our usage statistics, and are never sold or used for advertising, data mining or decisions about credit or lending. OurCycle writes to Apple Health or Health Connect only if you choose to save your periods there, as explained below.
If your health app shows a period that OurCycle does not have, OurCycle can ask whether you want to add it. Nothing is added unless you tap Add. A period you add this way becomes one of your OurCycle logs, like any period you log yourself: it is saved in your account, and your partner sees it only as your privacy settings allow.
You can turn it off at any time in OurCycle's Settings, or remove OurCycle's access in the Health app on your iPhone or in Health Connect on your Android phone.
Saving your periods to Apple Health or Health Connect is a separate choice, for when you track your own cycle in OurCycle, and nothing is saved until you choose it. OurCycle then asks for permission to save period data only. It saves your periods up to today and nothing else: never a predicted period, and none of your other logs.
On iPhone, this is the Save my periods to Apple Health switch in OurCycle's Settings. It is off until you turn it on. While it is on, OurCycle saves each of your period days from the last two years as menstrual flow, with the flow you logged that day if you logged one, and marks the first day of each period. If you change a period in OurCycle while it is on, it updates or removes the days it saved. Each time you turn it on, it first removes the days it saved before, then saves your period days again as they are in OurCycle. Turning the switch off stops all saving straight away.
On Android, this is the Save my periods to Health Connect button in OurCycle's Settings. OurCycle saves only when you tap it, never in the background. Each time, it saves the start and end of each of your periods, updates the ones it saved before, and removes any it saved from this phone that are no longer in OurCycle. To stop, don't tap it again. You can also remove OurCycle's permission in Health Connect.
Once your periods are in Apple Health or Health Connect, they are kept there under the rules of Apple Health or Health Connect, and any app you allow to read period data there can see them. Turning the switch off, signing out of OurCycle or deleting your OurCycle account does not remove them. You can delete them in the Health app on your iPhone or in Health Connect on your Android phone.
If you have an Oura ring or a WHOOP, you can connect it to OurCycle. Oura or WHOOP asks for your permission on its own page. OurCycle asks Oura only for your daily summaries and your workouts, and WHOOP only for your recovery, sleep, daily strain and workouts, never your name or email. To finish connecting, your phone gets an access token from Oura or WHOOP through our server, which hands it straight back to your phone and keeps nothing: no token and no readings.
Your phone then fetches your readings, such as sleep, heart rate variability, resting heart rate, temperature, breathing rate, blood oxygen, your Oura Readiness or WHOOP Recovery score, WHOOP strain and workouts, and uses them only on your phone, with the same promises as Apple Health and Health Connect above: never uploaded to our servers or to your OurCycle account, never shared with your partner or anyone else, and never sent to the coach, the daily outlook or our usage statistics.
You can disconnect Oura or WHOOP at any time in OurCycle, which deletes the token from your phone and asks Oura or WHOOP to cancel it, or remove OurCycle's access in your Oura or WHOOP account.
The apps use Google Analytics for Firebase to count how OurCycle is used: which screens and features are opened, whether sign-in worked, when a purchase starts, plus the app version, phone model, the country and language set on the phone, and whether you use OurCycle as the one who tracks or as a partner. It is tied to a random ID for the app installation, not to your name or email, and no advertising ID is collected.
It never includes cycle dates, check-ins, symptoms, moods, notes or anything OurCycle learns.
Separately from Google Analytics, the app saves in your account which days you opened it, so we can understand how many people keep using OurCycle from one day, week or month to the next. It keeps the last 120 days, plus the day it started recording. Older days are removed the next time you open the app. It holds dates, never anything you log. It also notes which tabs and pages of the app you opened on those days (names like Today or Calendar, never what is on them; health pages such as your check-ins count as their tab), keeps this for 60 days and never shows it to your partner. It is never shared with your partner, never sold, and is deleted with your account.
We may publish anonymous totals, such as how many couples keep using OurCycle, never anything that identifies you and never built from cycle or health data.
After you accept a spell, such as Floribunda (flowers), the phone you accepted it on may show one to three partner links to shops in the UK, Spain and Brazil, for flowers, tea, cosy things, sleep, spa days, meal kits, experiences and more. Each one is labelled "Partner link. OurCycle may earn a commission." If you buy something after tapping one, we may earn a commission from the shop.
They are picked only from the spell and your phone's country, never from your cycle, your logs or anything else about you. They never appear next to anything you log, and never in notifications, widgets, the Apple Watch app or the playful daily forecast.
A link opens only when you tap it, in a browser window that opens over the app. We never put your name, email address, account ID, cycle or health data in a link. The link carries only OurCycle's affiliate number and a short reference to the offer, such as which spell and country it is for, so the network can credit OurCycle. The link goes first to an affiliate network (Awin, or Impact for some event tickets), which records the click, then to the shop, whose site keeps that reference in a cookie. Like any website, the network and the shop see your IP address and browser details when the page opens. From there the network's and the shop's own privacy policies and cookies apply, and anything you buy is between you and the shop. Awin's privacy policy is at awin.com/gb/privacy and Impact's at impact.com/privacy-policy.
The app counts, in our usage statistics, when partner links are shown and when one is tapped. Neither count says which shop, spell or link it was.
Partner links are on by default. To turn them off, go to Settings > Partner offers > Show partner offers, or tap "Don't show partner offers" when they appear. Your choice is saved in your account.
This site is hosted by Vercel, which also counts page visits and measures page speed without cookies (Vercel Web Analytics and Speed Insights). Invite links are masked before a visit is counted.
If you take the quiz, we save your answers, your role and a country worked out from your connection in our database (Google Firebase; we don't store your IP address). If you add your email and tick the box, we email you your result through Resend and add you to our updates list; every email has an unsubscribe link. Messages sent through the contact form reach us by email through Resend.
These companies process personal data for us, under contracts that limit them to providing their service, apart from the further uses TypeSafe's terms allow, set out under "Your daily outlook (optional)" above. Apple and Google also act on their own account for app store accounts and payments, under their own privacy policies.
Affiliate networks and the shops behind partner links are not on this list. They act on their own account, and only after you tap a partner link (see "Partner links" above).
Several of these providers are in the United States, so your data may be processed outside the UK and the European Economic Area. Where a provider is certified under the EU-US Data Privacy Framework and its UK Extension, we rely on that. Otherwise we rely on the Standard Contractual Clauses approved by the European Commission, with the UK Addendum, in the provider's data processing terms. Ask us for a copy of the safeguards that apply.
Data travels encrypted between your phone and our services, and Google encrypts it at rest. Server rules let each account read only its own data and, for a connected partner, only the shared copy. Sign-in is handled by Firebase Authentication with Apple, Google or email.
OurCycle is not end-to-end encrypted. Our server functions can read the data they need to send notifications, and a small number of people at OurCycle with administrator access can technically reach stored data. We use that access only to run the service, to help when you ask us, to review a reported message, or when the law requires it.
OurCycle is for adults aged 18 and over. We don't knowingly collect data from anyone younger. If you believe someone under 18 is using OurCycle, tell us and we'll delete the account.
Depending on where you live, including the UK, the EU and Brazil, you can ask to see your data, correct it, delete it, get a copy in a portable format, restrict or object to how we use it, and withdraw consent at any time. Much of it you can do yourself in the app: change what you share, turn the coach off, turn the daily outlook off, edit or delete logs, or delete your account.
For anything else, email hello@ourcycle.app and we'll reply within one month. You can also complain to a data protection authority: the Information Commissioner's Office in the UK, the authority where you live in the EU, or the ANPD in Brazil.
When something important changes, we'll tell you in the app or by email before it applies, and update the date below.
Last updated 2 November 2026. Privacy questions or requests: hello@ourcycle.app.
Questions?
We'll answer privacy questions personally - not via a form letter.