Cycle Harmony App - Privacy Policy

---

Cycle Harmony — Privacy Policy

Last Updated: April 2026

Overview

Cycle Harmony ("the App", "we", "our") is a menstrual cycle tracking and relationship support application for iOS. We take your health data seriously. This policy explains exactly what data we collect, how it is used, where it is stored, and your rights over it.

Summary: Your health data stays on your device. We do not sell your data. We do not share your health data with advertisers. The only data that ever leaves your device is what you explicitly choose to share with a connected partner, and temporary partner connection codes processed through our secure backend.

1. Data We Collect

1.1 Data You Enter Directly (Stored On-Device Only)

The following data is entered by you and stored exclusively in the app's local database (SwiftData) on your iPhone. It never leaves your device unless you explicitly share it with a partner:

- Cycle tracking data: Period start/end dates, flow level (none, light, medium, heavy, spotting)
- Symptoms: Any of 30+ tracked symptoms (cramps, headache, bloating, fatigue, etc.)
- Mood: Daily mood entries (Great, Good, Okay, Low, Terrible)
- Notes: Personal daily notes you write
- Profile information: Name, relationship type, date of birth (optional), profile icon and color
- Cycle settings: Average cycle length, phase overrides

1.2 Apple HealthKit Data (Read Only, Stays On-Device)

With your explicit permission, the App reads the following data types from Apple Health. This data is read to display your cycle information — it is never uploaded to our servers or shared with third parties:

- Menstrual flow
- Intermenstrual bleeding
- Ovulation test results
- Cervical mucus quality
- Symptoms: abdominal cramps, acne, appetite changes, bloating, breast pain, chest tightness, chills, constipation, coughing, diarrhea, dizziness, fainting, fatigue, fever, body ache, headache, heartburn, hot flashes, lower back pain, mood changes, nausea, pelvic pain, rapid heartbeat, shortness of breath, sinus congestion, skipped heartbeat, sleep changes, sore throat, vaginal dryness, vomiting, wheezing

You can revoke HealthKit access at any time in iPhone Settings → Privacy & Security → Health → Cycle Harmony.

1.3 Location Data (Used Locally for Weather Only)

The App requests location access to provide weather and environmental context (temperature, humidity, moon phase, season) that is captured alongside your cycle entries. This data is:

- Used only to fetch current weather conditions from a weather service
- Stored locally on your device as part of your cycle entries
- Never uploaded to our servers
- Never used for advertising or tracking

You can revoke location access at any time in iPhone Settings → Privacy & Security → Location Services → Cycle Harmony.

1.4 Partner Connection Data (Processed Through Our Backend)

When you connect with a partner using the Cloud Sync method, the following occurs:

- A temporary, encrypted partner code (format: CH-XXXX-XXXX-XXXX) is generated and sent to our AWS backend
- The code contains your user ID and basic cycle data (current phase, cycle length, last period date) encrypted before transmission
- The code expires after a short time window (typically 24 hours)
- Once both devices have connected, the code is deleted from our servers
- **Ongoing cycle data sync happens directly between devices** (via WiFi Direct / Apple MultipeerConnectivity) and does not pass through our servers

What our servers never store: Your name, health data, mood, symptoms, notes, location, or any personally identifiable health information.

1.5 Data You Choose to Share with Partners

If you connect with a partner, you control exactly what they can see through the Sharing Preferences settings. You can choose to share or withhold:

- Current cycle phase
- Cycle length
- Period dates
- Flow level
- Symptoms
- Mood
- Notes (off by default)

You can change these preferences at any time, and you can disconnect from a partner at any time.

2. Data We Do NOT Collect

We do not collect:

- Advertising identifiers (IDFA)
- Crash analytics or usage analytics sent to third parties
- Your name, email address, or any account credentials (there is no account system)
- Payment information
- Contacts or address book data
- Photos or camera data (except QR code scanning for partner connection, which is processed locally)
- Browsing history or cross-app tracking data

3. How Your Data Is Used

Cycle entries, mood, symptoms, and notes
Used to display your cycle information, calculate your current phase, generate analytics, and provide personalized guidance. Stays on your device only.

Apple HealthKit data
Read to display your cycle phase and symptoms alongside your manual entries. Never uploaded or shared. Stays on your device only.

Location
Your approximate coordinates are sent to a weather service to fetch current conditions (temperature, humidity). The coordinates are not stored by us. Weather data is saved locally on your device as environmental context for your entries.

Partner connection code
When you connect with a partner via Cloud Sync, a temporary encrypted code is processed through our secure backend to match your two devices. The code is deleted from our servers once the connection is established. No health data is included in this process.

Partner-shared data
If you choose to share data with a connected partner, that data travels directly from your device to theirs via an encrypted peer-to-peer connection. It does not pass through our servers. You control exactly what is shared through Sharing Preferences.


4. Data Storage and Security

- On-device storage: All health data is stored in SwiftData (Apple's local database framework) on your iPhone. It is protected by iOS device encryption.
- iCloud backup: If you have iCloud backup enabled, your app data may be included in your iCloud backup, which is governed by Apple's privacy policy.
- Partner connection backend: Our AWS backend uses HTTPS encryption for all communications. Partner codes are stored temporarily and deleted after use.
- WiFi Direct sync: Partner data sync via WiFi Direct uses Apple's MultipeerConnectivity framework with encrypted peer-to-peer connections. This data never passes through our servers.


5. Data Sharing with Third Parties

We do not sell, rent, or share your personal data with third parties for advertising or marketing purposes.

Third-party services used:

- Apple HealthKit: For reading health data you've authorized. Governed by Apple's privacy policy.
- Apple WeatherKit / OpenWeatherMap: For fetching weather data. Only your approximate location coordinates are sent. No health data is included.
- Amazon Web Services (AWS): For processing temporary partner connection codes. No health data is stored on AWS servers.

6. Children's Privacy

Cycle Harmony is intended for users aged 13 and older. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child under 13 has used this app, please contact us and we will take appropriate action.

Menstrual cycle tracking is a normal health function for adolescents. If a minor uses this app, their data is stored only on their device and is subject to the same protections described in this policy.


7. Your Rights and Choices

Delete your data: You can delete all your data by deleting the app from your iPhone. This removes all locally stored data. To also remove any partner connection data from our servers, disconnect from all partners before deleting the app.

Export your data: The app includes an Export feature (Settings → Export) that allows you to export your cycle data in a readable format.

Revoke permissions: You can revoke HealthKit, location, or notification permissions at any time in iPhone Settings.

Disconnect from partners: You can disconnect from any partner at any time in the Partners tab. This immediately stops all data sharing.

GDPR (EU users): If you are located in the European Union, you have the right to access, correct, or delete your personal data. Since all health data is stored on your device, you have direct control over it. For any data processed through our backend (partner connection codes), contact us at the address below.

CCPA (California users): We do not sell personal information. California residents have the right to know what personal information is collected and to request deletion.

8. Sensitive Health Data

Menstrual cycle data is considered sensitive health information. We treat it accordingly:

- It is never used for advertising
- It is never shared with employers, insurers, or government entities
- It is never sold to data brokers
- It is stored only on your device
- Partner sharing is always opt-in and controlled by you


9. Changes to This Policy

We may update this privacy policy from time to time. When we do, we will update the "Last Updated" date at the top of this document. For significant changes, we will notify you within the app. Continued use of the app after changes constitutes acceptance of the updated policy.


10. Contact Us

If you have questions about this privacy policy or how your data is handled, please contact us:

Email: Admin@hawahlife.com
App Name: Cycle Harmony  
Developer:  Hawah Life, LLC