Who we are
This policy covers the closed beta of Cyclonity for iPhone, from version 0.9, distributed through TestFlight. Cyclonity helps you keep a cycle calendar, save personal wishes about care and, only if you choose, share a short card you picked with one close person.
Cyclonity is published by Has.Pet Ltd., a company incorporated in the Republic of Cyprus (registration number HE492821), registered office KPMG Center, 1st Floor, Agias Fylaxeos Street 1, 3025 Limassol, Cyprus. Has.Pet Ltd. is the controller of the personal information described here. For anything about privacy, write to privacy@cyclonity.com.
Cyclonity is for people aged 18 and over.
What stays on your iPhone
Cyclonity keeps this in the app's protected container:
- an optional name to call you by;
- your period dates, including a period still in progress;
- your personal estimate of the next start;
- mood, energy, pain intensity and pain location;
- spotting and other discharge, sleep quality and an optional intimacy mark;
- future plans: a holiday, a trip, a date, an important day, a doctor's visit or a workout;
- the text of your wish about care, and the app's settings;
- approximate forecasts calculated on the device;
- period dates from Apple Health, if you turned on reading or confirmed an import.
This is used for your calendar, your forecast and the Today screen. The detailed day marks (pain location, spotting and other discharge, sleep and intimacy) and your future plans stay on the iPhone only. They are never part of server requests, diagnostics, notes or cards for your close person, and they are never shown in the connected view.
Apple Health
Access to Apple Health is optional and stays off until you turn it on. Cyclonity works with period days (Menstrual Flow) and takes no other data from Health.
Cyclonity's settings have two separate switches:
- Read periods from Health. When you open the app, Cyclonity adds the period days written by other apps or Apple Watch. If they differ from your own marks, yours stay, and the disputed dates are shown to you to compare.
- Save my periods to Health. Cyclonity writes only the days you marked yourself, with their flow level. The forecast is never written there. Cyclonity changes and deletes only its own entries and never touches entries from other apps.
You can also import your history of the last 24 months once: the ranges found are shown on the device first, and only the ones you confirm are saved.
Cyclonity:
- does not read Health in the background while the app is closed;
- does not ask for clinical records or for any Health data type other than period days;
- does not send Health data to us, to a server or to your close person;
- does not use it for advertising, analytics or marketing.
Turning a switch off stops future reads or writes and deletes nothing. Delete personal data from this iPhone erases the data in the app, while the entries Cyclonity added to Health stay there: you can remove them in the Health app.
iPhone calendars
Access to your calendars is optional. If you allow it, Cyclonity shows events from your calendars next to your cycle. Events are read on the iPhone and are not sent anywhere.
- Bring over from your calendar. Cyclonity looks through past events for your word or sign, such as “P”, and shows the periods it found. Only the ones you confirm are saved, and the calendar itself does not change. Dates brought over this way count as unconfirmed, so the cycle day and forecast based on them never go into a card for your close person.
- Forecast in my calendar. Off until you turn it on. Cyclonity then creates a separate “Cyclonity” calendar in iCloud or on the iPhone and writes the forecast period days there under a neutral label, a dot by default. A calendar in iCloud is visible on your devices with the same Apple Account. Cyclonity does not write to Google or work accounts. Turning it off, or Delete personal data from this iPhone, removes this calendar and the forecast as long as Cyclonity still has calendar access; other calendars do not change. If you delete the app itself, the “Cyclonity” calendar stays, and you can remove it in the Calendar app.
The optional connection with a close person
Solo mode works with no account and no network. A remote account is created only after your own action in Support. It needs no name, email, phone number, gender or type of relationship.
An invitation is sent as an ordinary Cyclonity link and is accepted with one explicit action on the recipient's iPhone. There is no safety code to compare and no second confirmation by the person who created it. The link works once, for 24 hours at most, and opens no data by itself.
A connection starts with zero access. You choose the categories separately, see the exact card and confirm sending. To create the invitation, deliver the card and let you close access at once, a logically isolated closed-beta environment on a server in Moscow, Russia, which is outside the European Union, receives:
- random account and device identifiers, public keys, and verification hashes of the one-time invitation and access keys;
- the status of the invitation and the connection, whether the sending direction is on, and service timestamps and security events;
- an encrypted envelope with the chosen card and the minimum needed for delivery, expiry and revocation.
You can separately include mood, energy, the pain intensity you marked and your wish about care in a card. The calculated cycle day and the range of the possible next start are available only from a fully manual history: if the calculation uses even one entry from Apple Health or one entry with an unconfirmed source, both fields are excluded.
Pain location, spotting and other discharge, sleep, intimacy and future plans cannot get into a card and never become visible to the connected person.
The original dates of your marked periods, Apple Health data and information about the source of your entries are not sent. A card is encrypted on the sender's iPhone and opened on the recipient's iPhone. The server stores and passes on an opaque envelope and does not receive the key to read it.
A card has a button the recipient can press to mark that they saw it. If they press it, the sender sees “Marked by your close person” and the time, and the server keeps this fact as long as the card lives. If they do not, the sender learns nothing: the app does not watch whether a card was opened. The sender can remove any card before it expires.
The recipient has an optional signal about new cards. It is off by default, and permission for notifications is requested when it is turned on. The signal works on the iPhone itself: the app checks the server when iOS allows it. Its text says nothing about the sender, and the server receives no push notification token.
How long the server keeps data
- an invitation is valid for 24 hours at most;
- an encrypted card is deleted from the active server database within 48 hours; a revoked card stops being served immediately;
- a card already opened can stay on the recipient's iPhone without a network for no longer than the current 24-hour permission;
- an active account and an active connection are kept until you delete the account or close the connection;
- service records for safe retries are kept for up to 7 days, and request rate limits for up to 24 hours;
- closed invitations and connections, the account deletion record and the security event log are kept for up to 30 days, then deleted at the next routine maintenance.
At this stage, the state of the closed beta is not restored from an old server copy. After a disaster recovery, the remote part starts in a new empty area: the Support account and the connection have to be created again, and the personal calendar on your iPhone does not change.
The closed beta has a separate encrypted backup channel for the server database. At most one verified copy is made per UTC day; the last 14 daily copies and one verified copy for each of the last 8 weeks are kept. A snapshot is encrypted before it is sent to a Mac protected with FileVault, where the private key is kept separately.
A copy may contain random identifiers, the service state of connections and opaque end-to-end encrypted envelopes that existed at the moment of the snapshot. So after deletion from the active database, this data can remain only inside encrypted copies until the copy leaves rotation, within the eight-week window above. A historical copy is never opened as a live account area. Your personal calendar and Apple Health data are not part of the server copy.
Deletion and iPhone backups
Personal data on this iPhone is kept until you choose More → Delete personal data from this iPhone or delete the app. Deletion cannot be undone and does not close the remote account automatically.
Cyclonity marks its local database as excluded from iCloud and Finder system backups, so a system backup does not move it to another iPhone.
You can move your history only by hand: Save a copy of your history creates a file you store wherever you like, and Restore from file adds only what is missing. The file is not encrypted, so keep it where you keep personal documents.
The remote account and the connection are deleted separately in Support. After deletion, the server blocks the old keys at once and deletes invitations and encrypted cards; a limited service record stays for the period described above. An email to support does not replace these actions in the app.
What Cyclonity does not have
The app has no advertising, advertising SDKs, tracking, product analytics, sale of data, contact upload, search for people through an address book, background reading of Health or detailed push notifications.
For debugging, the app writes only predefined names of technical events, such as a successful launch or an operation error, to the iPhone's local system log. They contain no calendar dates, Health values, texts, codes, keys or identifiers, and Cyclonity does not send this log to its server.
TestFlight and feedback
Apple distributes the beta through TestFlight. Depending on how you were invited, Apple may show us a tester's name or email, device model, iOS version, number of launches, crash information and the feedback the tester chose to send.
TestFlight feedback can include a comment, a screenshot and technical details. Do not send sensitive data if you do not want to share it with us.
Write to us in the app. In a TestFlight build, a message from this form goes to a Cyclonity server in Finland, and only when you tap Send. It carries the text, the app version and the build type, plus a contact for a reply and a line with your iOS version and iPhone model if you left them in. Cycle data, day marks, Apple Health information and account identifiers are not part of the message. The IP address is not saved: the limit of 5 messages per hour from one address is counted only in the server's memory. The server immediately forwards the message to our team in Telegram, where it is kept under Telegram's rules. On the Cyclonity server a message is kept for no longer than 12 months, and you can have it deleted sooner by writing to privacy@cyclonity.com. Please do not put health data in the form if you can explain the problem without it.
If you write to us in Telegram, your message is kept by Telegram under its rules. Please do not send health data there if you can explain the problem without it.
An email is sent voluntarily from the mail app you chose. The sender's address, the text and attachments are processed by both sides' mail providers and by Porkbun's mail forwarding, only to deliver the email and reply to it. Please do not attach health data or other sensitive details if you can explain the problem without them.
We use this information only to run the test, give support and fix errors. We do not sell it and do not use it for advertising. Feedback and tester lists that stay inside TestFlight are handled under Apple's rules. Cyclonity does not download them into a separate permanent list without a specific need and a deletion procedure.
Support correspondence and its attachments stay with the mail providers as long as they are needed for a reply, for security or by law. You can ask us to delete a closed conversation by writing to privacy@cyclonity.com. It is better not to send sensitive data at all.
Public pages
When a page loads, the network technically processes an IP address to make the connection. Cyclonity does not write IP addresses or user agents to the logs of its public pages. There are no cookies, browser storage or advertising trackers here.
Since 13 November 2026 the cyclonity.com home page shows one of several designs. To learn which one is clearer, the site counts anonymous statistics on Cyclonity's own servers. For each opening of the home page it records:
- the time, the design shown, the device type (iPhone, Android, computer) and a screen width class;
- the link tag (utm) and the address of the site the visitor came from, without the path;
- how far the page was scrolled and how many seconds each block was on screen;
- which buttons and places on the page were tapped.
The design is chosen from the IP address and browser name at the moment of the request; neither is stored. Each opening of the page gets a random number that lives only in that tab's memory: it cannot identify a person or link their visits. Visitors from Russian networks are sent to the same page on a server in Moscow, ru.cyclonity.com, with the same statistics. Records are kept for no longer than 90 days and are not shared with third parties. The legal basis is our legitimate interest in understanding which page explains the app better. If the browser sends Global Privacy Control or Do Not Track, the page does not send scrolling or tap data.
Medical information
Cyclonity shows calendar estimates, not medical measurements. The app does not diagnose, does not confirm ovulation and is not meant for contraception or for making medical decisions.
Why we use data, and your rights
We use personal information only to run what you ask for: to deliver the card you confirmed, to let you close access, to answer you and to keep the service working and secure. The legal basis is your consent for what you choose to send, the performance of the service you ask for and our legitimate interest in keeping it secure. You can withdraw your consent at any time by closing the connection or deleting the account in Support. We do not sell or share personal information. The hosting providers of our servers only store and transmit data on our behalf.
You can ask us what data we hold about you, ask us to correct or delete it, object to its use, or complain to a data-protection authority (in Cyprus: the Commissioner for Personal Data Protection). Most of your data never reaches us, so in most cases we hold nothing that could be read as yours. Write to privacy@cyclonity.com.
Changes and contact
If the way the app actually works changes, this policy is updated before the matching build is distributed. The date of the new revision appears at the top of this page.