Privacy Policy

Last updated: October 24, 2026

1. Introduction

Cycora ("we", "our" or "us") respects your privacy. This policy explains what the Cycora app (the "App") keeps on your device, what it sends, when, and why.

2. What stays on your device

Cycora works without an account. You don't sign in, and we don't ask for your full name, email address or phone number.

Everything you enter stays on your device, in the App's own storage, protected by iOS data protection:

  • your profile (the first name you choose, goal, cycle and period length, preferences),
  • the periods you log and your period history,
  • daily check-ins (mood, energy, symptoms, sleep, stress, notes), basal body temperature readings and other fertility logs,
  • pregnancy details (due date, appointments), if you use pregnancy mode,
  • birth control pill reminder settings and the days you mark as taken,
  • your weekly plans.

Predictions (next period, fertile window), reminders, home-screen widgets and the Lock Screen period countdown are all worked out on your device. Reminders are local notifications: they are not sent through our servers.

3. AI plans and insights (Premium, only with your consent)

Cycora Premium can write your weekly plan and a short daily insight with AI. This happens only when both are true:

  • you have an active Cycora Premium subscription, confirmed by Apple, and
  • you agreed to it on the "Your privacy comes first" screen.

You can turn it off at any time in Settings → Privacy & data; plans and insights are then made on your device.

If you use Cycora for free, or you don't give consent, the App sends nothing to our server or to any AI service.

When AI is on, the App sends to Cycora's server (a Cloudflare Worker), which forwards it to Google's Gemini AI to write the text:

  • your goal (period tracking, trying to conceive, pregnancy, intimacy) and, in pregnancy mode, your pregnancy week and due date,
  • cycle details: today's phase and cycle day, your cycle and period length, your next predicted period, and whether the pill reminder is on,
  • your plan preferences (goals, lifestyle, workout and nutrition preferences, foods to avoid, cooking time, budget),
  • 14-day averages of your check-ins (mood, energy, sleep, stress, symptoms, workout completion) and recent plan summaries,
  • your language and your device's region setting.

It does not send your name, an email address, your period history dates, your notes, your temperature readings, photos, contacts or location.

Cycora's server does not store these requests or the AI's answers; it passes the request to Gemini and returns the answer to your device. We do not use your data to train AI models.

To protect the service, each request also carries:

  • Apple's signed record of your active subscription, so the server can check that the request comes from a Premium user (it contains no name or payment details),
  • a random ID created by the App on your device, and a one-way hash of your IP address. These are used only to count requests per day (fair-use limits) and are deleted automatically after 2 days. "Delete all my data" creates a new random ID.

4. What we don't collect

We don't run analytics, advertising or tracking SDKs, and we don't track you across apps or websites. We don't collect your location, contacts or photos. We don't keep your health or cycle data on our servers.

5. We don't sell your data

We never sell, rent or trade your information, and it is never used for advertising.

6. Third-party services

  • Apple (App Store and StoreKit): subscriptions and payments are handled by Apple. We never see your payment details. See Apple's Privacy Policy.
  • Cloudflare: hosts Cycora's server (Workers) and the website.
  • Google (Gemini API): writes AI plans and insights for Premium users who agreed, as described in section 3.

7. Data security

Your data is stored in the App's storage on your device and protected by iOS security, including device encryption. Requests to Cycora's server are encrypted in transit (HTTPS).

8. Your data, your control

In the App, Settings → Privacy & data:

  • Export my data: saves a file with your profile, logs, periods and plans that you can keep as a backup.
  • Import backup: restores such a file on this or another device.
  • Delete all my data: erases everything Cycora stored on your device (profile, logs, periods, plans, reminders, widget data) and starts over. Your App Store subscription is not affected.

Deleting the App also removes its data from your device. Because we hold no copy of your health data, we cannot recover it for you: export a backup if you want to keep it.

9. Children

Cycora is not intended for children under 13, and we do not knowingly collect information from them.

10. Your rights

Depending on where you live, you may have the right to access, correct, delete or export your personal data. Your cycle and health data is on your device, so you can do all of this yourself in the App (section 8). For anything else, contact us.

11. Changes to this policy

We may update this policy. We will post the new version here and in the App, with a new date at the top.

Your use of Cycora is also governed by our Terms of Service.

12. Contact

Questions about this policy: [email protected].