Cycle Cipher privacy policy
Cycle Cipher keeps reproductive-health logs and settings on your device. It has no developer-operated account, sync, analytics, advertising, tracking or health-data server. Optional tips and rating or review actions use Apple's services on iPhone and iPad, and Google Play's services on Android.
What the studio collects
Cycle Cipher does not send cycle dates, daily logs, health events, notes, settings or exports to Stack Trace Studios. The studio has no app user database and cannot access your on-device records. If you choose to email support, the studio receives the email address, message and attachments you send. If you buy a tip on Android, Google Play gives the studio an order record for it, described under Third parties. Visiting this policy also gives the website host the ordinary request data needed to deliver and secure the page.
What stays on your device
Cycle Cipher stores period dates; flow, symptom, mood, sexual-activity, basal-temperature and note entries; cached cycle statistics; health events such as abortion care, miscarriage, pregnancy tests, provider visits and contraception changes; and app settings on your device. On Android, the app keeps these records in an encrypted database in its private storage and encrypts the database key with an Android Keystore key; on Android 11 and on Android 15 and later, that key works only while the phone is unlocked. If you set a PIN on iPhone or iPad, the app keeps a salted hash of it in the device Keychain. If you set a PIN on Android, the app stores a salted PBKDF2 hash of it, encrypted with a separate Keystore key. Neither app stores the raw PIN or puts it in an export. Tip purchase records (StoreKit transaction identifiers on iPhone and iPad, SHA-256 hashes of Google Play purchase tokens on Android) and simple launch, tip and review-prompt flags may also remain on the device, but contain no health records. If you turn on reminders, the app schedules local notifications for estimated dates with the neutral text "Cycle Cipher reminder" and no health details; on Android, it keeps the upcoming reminder times in a private file outside the database so it can set them again after a restart. On iPhone and iPad, an encrypted device or iCloud backup may include local app data, according to your Apple backup settings. On Android, Cycle Cipher excludes all of its data from Android backup and device-to-device transfer, so a new phone starts empty until you import an export. The in-app Reset Cycle Cipher data control removes logs, health events, settings and PIN material. Deleting the app removes its active data; on iPhone and iPad, a separate device backup can keep its copy until you delete or replace that backup.
Network, Apple and Google Play services
Core tracking does not require a network connection. On iPhone and iPad, StoreKit can contact Apple to load tip product information and to purchase or verify an optional tip, and the native rating or review action and App Store link can contact Apple. The Android app holds no internet permission, so it cannot open a network connection itself; the Google Play Store app handles tip purchases, the rating sheet and the Google Play link. Support, privacy, product-site and email links open an outside service when you tap them. Cycle Cipher has no developer-operated health-data endpoint and does not upload reproductive-health records to Stack Trace Studios.
Third parties
The apps embed no advertising, analytics, attribution or crash-reporting SDK. Apple processes optional tips and rating or review interactions on iPhone and iPad under its own terms, and Google processes them on Android under Google Play's terms. Stack Trace Studios receives aggregate App Store sales reports from Apple. For each Android tip, Google Play gives the studio an order record with the order number, the tip, the price and tax, the date and the buyer's country and, in some countries, the buyer's state and postal code. The studio uses these records for accounting, tax and refunds, and they contain no health records. Cloudflare delivers this website, and Google processes email sent to the published support address. Stack Trace Studios does not sell or use app data for advertising or tracking.
Children
Cycle Cipher is not directed to children under 13. It does not create accounts or collect health records through a developer-operated service.
Your rights
You control Cycle Cipher's local records through the app's export and Reset Cycle Cipher data controls, or by deleting the app. Stack Trace Studios cannot access, correct or export records stored only on your device. For a support email, a Google Play order record or other information the studio holds about you, you may ask what the studio still holds or request deletion, subject to legal obligations such as tax record keeping. Send requests to the contact address below.
Changes
If this policy changes, the revised version is published here with a new date. Material changes that affect what is collected will also be noted in the app's release notes.
Contact
Questions about this policy: OmarAppSupport@gmail.com.