Privacy Policy

Cycora does not collect your data, because there is nowhere for it to go.

Last updated 23 September 2026

What Cycora stores, and where

Cycora keeps the following on your device only:

• The start and end dates of periods you log, and the flow level if you record one.
• The days you log as intimacy.
• If you turn on temperature and mucus tracking: the waking temperature and the mucus observation you record for a day, whether you marked the reading as disturbed, and any note you add to it.
• If someone shares a partner code with you: the code itself. It carries a fertile window and its expiry date, and never a period date.
• Your settings: whether you are avoiding pregnancy or trying to conceive, your language, your reminder choices, and whether the app lock is on.
• If you set an app-lock PIN, a one-way cryptographic hash of it — never the PIN itself — held in your device's secure keystore (Keychain on iOS, Android Keystore on Android).

All of it lives in the app's private storage. Uninstalling Cycora deletes it.

What Cycora does not do

• No account. There is nothing to sign up for and no way to log in.
• No servers. Cycora has no backend. Your data is never transmitted anywhere.
• No analytics. There is no analytics SDK, no crash reporting, and no usage tracking of any kind.
• No advertising. There are no ads and no advertising identifiers, so there is no ad profile to build.
• No third-party trackers. Cycora contains no social, marketing, or attribution SDKs.
• No health platform. Cycora does not connect to Apple Health, HealthKit, Google Fit or Health Connect, and does not read or write anything there.
• No selling or sharing. We have nothing to sell or share, and we would not if we did.

The trade-off you should know about

Because there is no cloud copy, there is no backup. If you lose your phone, reset it, or uninstall the app, your history is gone and we cannot recover it — we never had it.

Cycora includes a free export that writes your history to a file you keep, and an optional reminder every three months to make one. That file is created only when you ask for it, handed straight to your device's share sheet, and never sent to us. Once you have a few months logged, exporting occasionally is the only way to protect against losing it.

The things you can send out of the app yourself

Cycora can produce five files, and each one is created only when you ask for it, handed straight to your phone's share sheet, and never sent to us. Where it goes after that is your choice and outside our reach:

• A backup file of your history, plus a spreadsheet copy of it.
• A calendar (.ics) file holding two events — this cycle's fertile window and your next expected period. Its wording is discreet by default, because a calendar can sync to a watch or a shared account.
• A cycle report PDF for a clinician. It contains no record of intimacy at all; the document has no field for it.
• A picture of your calendar.
• A partner code: a short string carrying your current fertile window and its expiry, which you send however you like. It never contains a period date, and reading one on the other phone is free.

The home screen widget is worth a separate mention: it shows today's status outside the app, where anyone holding the phone can read it. It can be set to a discreet wording that shows only a mark and a colour.

Notifications

If you turn on reminders, Cycora schedules them locally with your device's own notification system. No push service is involved and no message passes through a server. The notification text is deliberately blank of detail — it says only "Open Cycora" — so a preview on a lock screen reveals nothing. The one exception is the optional backup reminder, which says it is time to save a backup file; it contains nothing about your cycle.

Updates

On Android, Cycora asks the Google Play Store app already on your phone whether a newer version exists, and shows a notice if there is one. That question goes to Play, not to us — we have no server to ask — and it carries nothing about you or your history.

Purchases

The one-time Cycora Pro unlock is processed by Apple or Google, not by us. We never see your name, your payment details, or your billing address. All Cycora records is a single flag on your device saying the unlock is active. Apple's and Google's own privacy policies govern the payment itself.

Children

Cycora is not directed at children under 13 and we do not knowingly collect information from anyone. As above: we do not collect information from any user, of any age.

Permissions Cycora asks for

• Notifications — only if you turn a reminder on, and only to schedule reminders on your own device.
• Biometrics — only if you choose fingerprint or face unlock for the app lock. The check happens on your device; Cycora never receives your biometric data.

Cycora asks for no other permissions. It does not request location, contacts, camera, microphone, or health data, and it does not connect to HealthKit or Health Connect.

Your rights

Regulations such as the GDPR and the CCPA give you rights to access, correct, export, and delete personal data a company holds about you. Cycora holds none. In practice this means:

• Access and portability — everything is already on your phone, and the free export writes it to a file you keep.
• Correction — you can edit or delete any entry in the app at any time.
• Erasure — deleting an entry removes it; uninstalling the app removes everything.

There is no request to send us, because there is no copy for us to act on.

Medical disclaimer

Cycora is not a medical device and does not provide medical advice. It applies the calendar (rhythm) method, one of the fertility awareness methods. In everyday use this method is meaningfully less effective at preventing pregnancy than it is when followed perfectly — more people become pregnant using it than the ideal figures suggest. Cycora is not a substitute for advice from a doctor or another healthcare professional.

Changes to this policy

If this policy changes, the date at the top of this page changes with it. If a future version of Cycora ever collected data — which is not planned — we would say so here and in the app before it happened, not afterwards.

Contact

Questions about this policy: villetorio@gmail.com