Privacy Policy
1. Your data stays on your phone
Cyclio is a private cycle diary: it only stores what you enter. Your period dates, flow, symptoms, moods, temperature, sex activity, ovulation (LH) test results, notes and pause periods (for example the pill, pregnancy or breastfeeding) stay on this phone only, in an encrypted database. There is no account, no sign-in and no sync, and we operate no server that receives your cycle data. The database is excluded from Google's automatic cloud backup, so it is not copied to Google Drive in the background. Your cycle data only leaves the phone when you choose to: a password-protected backup file you save yourself, or a PDF/CSV summary you share or print.
Predictions and the fertile window are calculated on your phone from your own cycles. Ads, analytics and billing never receive your cycle data: no dates, cycle lengths, cycle days, symptoms, moods, notes or pause reasons are logged — only coarse counts such as “3–6 cycles logged”. Your health data is never used for advertising.
Cyclio is not a medical device and does not diagnose, treat, cure, or prevent any medical condition. Predictions and the fertile window are estimates only and must not be used as a method of birth control.
2. Permissions
- Notifications — the only permission Cyclio asks for, and only when you turn on your first reminder (upcoming period, daily log or pill reminders). Reminder texts are discreet and can be turned off at any time.
- Start at boot and biometric unlock — no prompt: used to restore your reminders and the home-screen widget after a restart, and for the optional app lock (fingerprint or your phone's PIN).
- Internet — ads, analytics, crash reports, purchases and consent only. Your cycle data is never sent.
- Cyclio does not use the camera, microphone, location, contacts, Health Connect, body sensors or your phone's files (backups and PDFs go through the Android file picker or share sheet you control).
3. Analytics and crash reports (Google Firebase)
With your consent where required, we use Google Analytics for Firebase and Firebase Crashlytics to understand how the app is used and to fix crashes. We log anonymous events such as “paywall viewed” or “purchase completed”, plus device model, OS and app version, approximate region and an app-instance identifier. We never log your content; the app enforces this with an allow-list of event parameters. Crash reports contain the error type and stack trace only. Firebase Remote Config is used to tune paywall and ad settings.
4. Advertising (Google AdMob and Unity Ads)
The free version shows ads: one slim banner on the Stats and Settings screens, an occasional full-screen ad when you leave Stats, and optional rewarded ads you choose to watch to unlock a Pro feature for a while. Ads never appear on the home screen, the calendar, the day log, the report preview, onboarding, the lock screen or when you open the app from a reminder or the widget, and never right after you save a day or a period. Ads are chosen without your cycle data, and sensitive ad categories (such as dating, sexual content, religion, politics, weight loss, drugs and supplements, gambling) are blocked for this app. Cyclio Pro (a one-time purchase) removes all ads.
Ads are served by Google AdMob, with Unity Ads and Meta Audience Network competing through AdMob mediation. These partners may collect the advertising ID, device and usage information and approximate location derived from your IP address to serve and measure ads. See Google's, Unity's and Meta's privacy policies.
5. Your choices (GDPR, UK GDPR, Swiss FADP, US state laws)
In the EEA, the UK and Switzerland, Cyclio asks for your consent through Google's consent message (IAB TCF) before personalised ads or analytics are used. If you decline, ads are non-personalised and analytics stays off. In US states with privacy laws (such as California, Virginia, Colorado), you can opt out of the “sale” or “sharing” of personal information and targeted advertising. You can change your choice at any time in Settings → Privacy choices.
Legal bases (GDPR): consent for analytics and personalised ads; performance of a contract for the features you use and for purchases; legitimate interest for crash diagnostics where consent is not required. You may request access, deletion, correction or portability of data we control, object to processing, or lodge a complaint with your supervisory authority. California residents (CCPA/CPRA): we do not sell personal information for money; ad partners may receive identifiers as described above, which you can opt out of in Privacy choices. We do not discriminate against users who exercise their rights.
6. Purchases
The one-time Cyclio Pro purchase is processed by Google Play. We never receive your payment details; Google tells the app whether Pro is active.
7. Retention and deletion
Your cycle data remains on your device until you delete it (Settings → Delete all data) or uninstall the app. Backup files you saved stay wherever you put them. Analytics data is retained by Google for up to 14 months. See how to delete your data.
8. Children
Cyclio is intended for adults (18+). It is not directed to children and we do not knowingly collect their data.
9. Changes
We will update this page if our practices change and revise the date above.