sCycle Privacy Policy

If you connect a sapplify Account

If you connect a sapplify Account to sCycle, the sapplify Account Privacy Policy and sapplify Account Terms of Service additionally apply to your use of account-related features (sign-in, profile, cross-device sync). Connecting an account and turning on Sync are optional. sCycle works fully without either, and without an internet connection.

1. Introduction

Welcome to the Privacy Policy for sCycle ("we", "us", or "our"). sCycle is a period tracking app with a companion character that helps you keep track of your cycle.

This policy describes what the sCycle app stores and sends. If you connect a sapplify Account, the sapplify Account Privacy Policy additionally applies to the data your account holds on our servers.

Please read this policy carefully to understand how we treat your health information. By using sCycle, you acknowledge that you have read and understood this Privacy Policy.

Data Controller

The data controller responsible for your personal data is:

Anthony Eli Rasch - sapplify
PO Box 004
91501 Nové Mesto nad Váhom
Slovakia
IČO: 56665032

Email: contact@sapplify.com
Privacy inquiries: privacy@sapplify.com

Data Protection Officer

sapplify operates at a scale that does not require the designation of a Data Protection Officer under Article 37 GDPR. For any data protection inquiry, contact privacy@sapplify.com.

2. What sCycle Stores on Your Device

Everything you enter in sCycle is saved in a database on your phone. It stays there unless you turn on sapplify Sync (Section 4) or export it yourself.

Cycle data you enter

• Periods: the days your periods started and, where known, the day they ended
• Daily check-ins: flow (none, light, medium, heavy), mood (good, okay, low) and body symptoms (cramps, fatigue, bloating, headache, breast tenderness)
• Your usual cycle and period length, or that you were not sure when you set up the app

Data from the earlier sCycle app

On 28 September 2026 sCycle was replaced by the current app. If you used the earlier version on the same phone, the current app copies its data into its own database once, the first time it opens. Besides the data listed above, this can include notes, pain levels, other symptoms and intensities, and the settings the earlier app kept. They are kept as they were, so nothing you recorded is lost.

The earlier app kept its data in an encrypted database file. Once the one-time copy has succeeded, the current app deletes that file and then its key from your phone. If the file is still there on a later launch, it is deleted then, and "Delete all data" removes it too.

Your companion and settings

• Which companion you chose, and the name you gave it
• The time of your daily check-in reminder, if you set one
• Appearance and language
• When you accepted the Terms of Service and this Privacy Policy
• Whether you own sCycle Pro (see Section 7)
• If you are signed in, the session that keeps you signed in to your sapplify Account

How it is stored

Your cycle data is kept in a standard SQLite database inside sCycle's private app storage. The database is not encrypted by sCycle. It is protected by your phone's own security: app sandboxing, your lock screen, and the storage encryption your operating system applies. Settings are kept in the app's preferences on your phone.

Strictly necessary storage

Storing your entries and settings on your phone is strictly necessary to provide the period tracking you asked for, so it needs no separate consent under the EU ePrivacy rules. The random identifier used for analytics is described in Section 3.

What sCycle does not do

• We DO NOT require an account. Sign-in and Sync are optional
• We DO NOT upload your cycle data unless you turn on sapplify Sync
• We DO NOT sell your data or use it for advertising
• We DO NOT show ads or include advertising or third-party analytics SDKs
• We DO NOT share your cycle data with a partner or anyone else from inside the app
• We DO NOT access your location, contacts, photos, camera or microphone

3. Usage Analytics and Error Reports

To find out which parts of sCycle work and which are broken, the app sends usage analytics and error reports to our own servers in Ireland (EU). They are on by default, starting once you have accepted the Terms of Service and this Privacy Policy. Before that nothing is sent, not even the installation identifier. You can switch them off at any time in You > Privacy > Share anonymous usage data. When it is off, nothing more is sent and any reports still waiting on your phone are discarded.

What is sent

• With every event: the app and its version, the platform, a randomly generated identifier for this installation, a session identifier and the time. While you are signed in to a sapplify Account, your account identifier is attached.
• Events: app sessions and launches, onboarding steps, whether you set a reminder, that a check-in was saved (the event name only), opening the app from the reminder, which tab you open, which companion you picked or switched to, when the Pro offer is shown and closed, purchase and restore outcomes, rating prompts, whether data from the earlier sCycle was copied across, Sync outcomes with an error code, and creating an account (with the sign-in method), signing in or signing out.
• Device facts: manufacturer, model and operating system version, and on Android whether Google Play services are available.
• Error reports: the type of error, its message, the stack trace, and what the app was doing at the time. Error messages and stack traces can incidentally contain fragments of the data the app was handling when it failed.

What is never sent

• Your period dates, cycle day, phase, or cycle and period length
• Your flow, mood, symptoms or notes
• The name you gave your companion

The identifier is random, created by the app, and not derived from your device's hardware. Uninstalling the app removes it. We use no third-party analytics SDK and nothing is sent to an advertising network. How long these records are kept is described in Section 11.

4. sapplify Sync

sapplify Sync keeps your sCycle data on your other devices and backs it up to our servers. It is free, optional, and needs a sapplify Account. It is off until you turn it on for sCycle in the account screen. Signing in alone does not upload anything.

What is synced

• Period start and end days
• Daily check-ins: date, flow, mood, symptoms, and any notes and pain level carried over from the earlier sCycle
• Symptom records and notes carried over from the earlier sCycle

Your companion, its name, your reminder, your cycle and period length settings and the app's predictions are not synced. They stay on the phone.

Where and how it is stored

Synced data is stored in the sapplify database hosted by Supabase in Ireland (EU). It is encrypted in transit (TLS) and at rest. It is not end-to-end encrypted: our service could in principle read it, and we access it only as needed to operate the service. Sub-processors, retention and security are described in the sapplify Account Privacy Policy.

Turning it off

• You can turn Sync off for sCycle in the account screen at any time. Uploads stop, and the server copy of your sCycle data is deleted 30 days later. The data on your phone is not touched.
• Deleting your sapplify Account from inside sCycle deletes the server copy of your data straight away.
• "Delete all data" in sCycle also deletes your entries from Sync (see Section 11).

5. Legal Basis for Processing

Under the General Data Protection Regulation (GDPR) and applicable data protection laws, we process your personal data on the following legal grounds:

Explicit consent (Article 9(2)(a) GDPR)

• Your cycle data is health data. You give your explicit consent by entering it into the app, and it is used only to provide sCycle to you. You can withdraw it at any time by deleting your data.
• Uploading your cycle data to our servers through sapplify Sync is a separate, explicit consent that you give by turning Sync on for sCycle. You withdraw it by turning Sync off.

Contract performance (Article 6(1)(b) GDPR)

• Storing your entries and settings on your phone and working out your predictions
• Scheduling the daily reminder you set
• Recording whether you own sCycle Pro

Legitimate interest (Article 6(1)(f) GDPR)

• Usage analytics and error reports: knowing which features are used and what breaks, so we can fix and improve an app we ship without advertising. We build no profile and send nothing to advertisers. You can object at any time with the switch in You > Privacy.
• Answering feedback and support requests you send us

Legal obligations (Article 6(1)(c) GDPR)

We may process data when required by law, such as responding to valid legal requests from authorities.

Withdrawing consent does not affect processing carried out before you withdrew it.

6. App Permissions

Permissions sCycle uses

• Internet access: for usage analytics and error reports, purchases through your app store, signing in, sapplify Sync, and feedback you send
• Notifications: only for the daily check-in reminder, and only if you set one. sCycle asks for permission when you do
• Run at startup (Android): so a reminder you set still arrives after your phone restarts

Permissions sCycle does not request

• Location
• Contacts or calendar
• Camera or microphone
• Photos or files (an export is handed to your phone's share sheet, and you choose where it goes)
• Biometrics. sCycle has no app lock
• Health app integration (Apple Health, Health Connect)

7. Purchases & Payments

Tracking your cycle in sCycle is free. sCycle Pro is a one-time purchase that unlocks every companion, now and later. There is no subscription and no recurring charge. A purchase made in the earlier sCycle app also unlocks Pro in the current app.

Payment processing

Purchases are made and charged by your app store:

• Apple App Store: Apple Privacy Policy
• Google Play: Google Privacy Policy
• Huawei AppGallery: Huawei Privacy Policy

The store tells the app on your phone whether you own Pro. We never see or store your payment details.

What is recorded

• On your phone: whether you own Pro, the product identifier and the date it was unlocked. A purchase record kept by the earlier sCycle app, which can include a store transaction identifier, is kept as it was.
• In your sapplify Account, if you are signed in: whether you own sCycle Pro and the product identifier, so your account can show it.
• Usage analytics: purchase and restore outcomes (Section 3).

Refunds and purchase management are handled by the store you bought from.

8. Feedback & Support

You can send us feedback from You > Send feedback, or write to support@sapplify.com.

What the feedback form sends

When you send feedback, the following goes to our servers in Ireland (EU) over an encrypted connection:

• Your message and its type (bug report, feature request, general feedback)
• Your email address, only if you enter one
• Your sapplify Account identifier, if you are signed in
• App version, device model, operating system, language, text size, light or dark mode, and screen size

If you are offline, it is queued on your phone and sent when you are back online.

What it does not send

• Your cycle data (periods, check-ins, symptoms, notes)

Feedback is optional. We use it only to improve sCycle and to answer you.

9. Data Sharing

We do not share your data with

• Advertisers or marketing companies
• Data brokers
• Social media platforms
• Insurance companies or employers
• Anyone else for their own purposes

Service providers

• Supabase (Ireland, EU): hosts our database. It stores usage analytics and error reports, feedback, your sapplify Account if you have one, and your synced cycle data if you turn on Sync
• Apple App Store, Google Play, Huawei AppGallery: process purchases and refunds
• Apple, Google, Huawei: process sign-in if you choose to sign in with them

Further providers involved in the sapplify Account, such as the email service for account emails, are listed in the sapplify Account Privacy Policy §6. A Data Processing Agreement is in place with our processors where Article 28 GDPR requires one.

Sharing you start yourself

You can export your periods and check-ins as a CSV file (Section 12). The file goes to your phone's share sheet, and you decide where it goes. Once you share it, the recipient's own privacy practices apply.

Automated decision-making

We do not use automated decision-making or profiling that produces legal effects or similarly significantly affects you. Predictions are worked out on your phone for your own use.

Legal requirements

We may disclose information if required by law, such as in response to a valid court order. Data that exists only on your phone is not available to us. Requests for synced data are handled under the sapplify Account Privacy Policy. We will tell you about such a request when we are legally allowed to, and we have not received one to date.

10. Data Security

On your phone

• Your data lives in sCycle's private app storage, which other apps cannot read
• sCycle does not add its own encryption to the database. Its protection is your phone's lock screen and the storage encryption of your operating system
• sCycle has no app lock or biometric lock. Anyone who can unlock your phone can open sCycle
• The daily reminder shows your companion's name and a short check-in prompt. It does not show dates or your cycle phase

In transit and on our servers

• Everything sCycle sends to us uses TLS encryption
• Synced data, analytics and feedback are stored encrypted at rest in Ireland (EU)
• Sync is not end-to-end encrypted

See the sapplify Account Privacy Policy §9 for server-side security.

Device backups

Independently of sapplify Sync, sCycle's data may be included in your phone's own backup if you have it turned on (iCloud Backup on iPhone, Google or manufacturer backup on Android). Those backups are run by Apple, Google or your phone's manufacturer, not by us. You can manage them in your phone's settings.

What you can do

• Use a lock screen PIN, password or biometric unlock
• Keep your phone and sCycle updated
• Think about who can see your phone's notifications
• Be careful with exported files, which are not encrypted

11. Data Retention & Deletion

On your phone

• Your entries stay on your phone until you delete them, use "Delete all data", or uninstall sCycle
• Uninstalling removes the app's data from the phone, including the earlier sCycle's database file if it is still there

Delete all data

In You > Privacy > Delete all data. It cannot be undone, and it:

• removes every period, check-in and symptom, and the settings the earlier sCycle kept
• resets your companion, its name, your cycle settings, reminder, appearance and language
• cancels the daily reminder
• if you use Sync, deletes those entries from Sync too: they are marked deleted on the server at the next sync, so your other devices remove them, and are erased from the server 30 days later

It keeps your analytics choice, your acceptance of the terms and your Pro purchase. It also removes the earlier sCycle's database file and its key if they are still on your phone (Section 2). It does not delete your sapplify Account.

Synced data

• Kept while Sync is on for sCycle and your sapplify Account exists
• Deleted 30 days after you turn Sync off for sCycle
• Deleted immediately when you delete your sapplify Account. See the sapplify Account Privacy Policy §8 for backups

Usage analytics and error reports

• Kept in our live database for 30 days
• After that, analytics move to a long-term statistical archive with the account identifier removed. For error reports, only the classification is kept (app, version, platform, severity, type of error)
• Deleting your sapplify Account removes records still within the 30 days that carry your account identifier

Feedback

• Kept as long as we need it to handle your message and improve the app
• You can ask us to delete it at privacy@sapplify.com

12. Your Rights

Most of your data is on your phone, so you can exercise most of your rights directly in the app.

In the app

• Access and portability: You > Privacy > Export my data creates a CSV file with your period starts and your check-ins (date, flow, mood, symptoms, note)
• Correction: mark, move or remove period starts and ends in the calendar, and change today's check-in. Past check-ins cannot currently be edited in the app
• Erasure: You > Privacy > Delete all data (Section 11)
• Objection to analytics: switch off Share anonymous usage data in You > Privacy
• Withdrawing Sync consent: turn Sync off for sCycle in the account screen, or delete your sapplify Account

GDPR rights (EU users)

• Right of access to the data we hold about you
• Right to rectification of inaccurate data
• Right to erasure
• Right to restrict processing in certain circumstances
• Right to data portability in a structured, machine-readable format
• Right to object to processing based on legitimate interests
• Right to withdraw consent at any time
• Right to lodge a complaint with a supervisory authority (Section 18)

For data on our servers that you cannot manage in the app (analytics, error reports, feedback, synced data), email privacy@sapplify.com. Analytics are tied to a random installation identifier, so we may need help to find yours.

CCPA/CPRA rights (California users)

You have the right to know what personal information we collect, to have it deleted or corrected, to opt out of its sale or sharing, and not to be discriminated against for using these rights.

We do not sell or share your personal information as those terms are defined by the CCPA, and we show no advertising. Your cycle data is sensitive personal information under California law. We use it only to provide the app and, if you turn it on, Sync, and never for any other purpose.

Response time

We respond within one month, as required by Article 12(3) GDPR.

13. How Predictions Work

sCycle estimates your next period, your likely ovulation day and fertile window, and the phase of your cycle. It works these out on your phone with simple date arithmetic from the period starts you logged and your usual cycle and period length. No artificial intelligence or machine learning is involved, and nothing is sent anywhere to calculate them. Predictions are not synced.

The companion's messages come with the app and are chosen on your phone from your phase and your check-ins. The companion makes no network requests.

Medical disclaimer

sCycle's predictions are estimates for information only. They are not medical advice, not a method of contraception, and not a diagnosis. Always consult a healthcare professional for medical concerns.

14. Children's Privacy

sCycle is intended for people aged 13 and older. In some EU member states the minimum age for consenting to data processing is higher (up to 16, GDPR Article 8). Users below the applicable age should use sCycle only with a parent or guardian.

• sCycle can be used without an account or any personal details
• A sapplify Account is only for people aged 16 and older
• Parents and guardians can switch off usage analytics in You > Privacy

If you believe a child under 13 has sent us personal information, for example through the feedback form, contact privacy@sapplify.com and we will delete it promptly.

15. International Users

sCycle is available worldwide. Wherever you are, the data sCycle sends to us is processed in the European Union.

Where data is kept

• Cycle data: on your phone, and on our servers in Ireland (EU) only if you turn on sapplify Sync
• Usage analytics, error reports and feedback: our servers in Ireland (EU). The long-term statistical archive, without account identifiers, is kept in Slovakia
• Purchases: processed by Apple, Google or Huawei under their own privacy policies

Where a provider in the sapplify Account processes data outside the EU, the transfer is covered as described in the sapplify Account Privacy Policy §7.

16. Data Breach Notification

A breach of our servers cannot expose cycle data that exists only on your phone. It could expose the data we do hold: usage analytics, error reports, feedback, and, if you use them, your sapplify Account and your synced cycle data.

If a personal data breach affects data we hold, we will:

• notify the Slovak Office for Personal Data Protection within 72 hours of becoming aware of it, as required by Article 33 GDPR, unless it is unlikely to result in a risk to you
• notify you without undue delay if it is likely to result in a high risk to your rights and freedoms (Article 34 GDPR)
• tell you what happened, what data was affected, the likely consequences, what we have done, and what you can do

The security of the data on your phone depends on your phone. Keep it locked and updated.

17. Changes to This Privacy Policy

We may update this Privacy Policy to reflect changes to sCycle, our practices, or the law. We will update the "Last updated" date at the top of this page. For material changes we will tell you in the app, for example by asking you to accept the updated policy the next time you open sCycle.

If you do not agree with a change, you can export your data and stop using the app.

18. Governing Law

This Privacy Policy and any disputes arising from it are governed by the laws of the Slovak Republic, without regard to conflict of law principles. This does not affect your mandatory consumer protection rights under EU law, which may provide additional protections regardless of the governing law.

Jurisdiction

For users in the European Union, any disputes shall be subject to the jurisdiction of the courts in Slovakia, unless mandatory consumer protection laws in your country of residence provide otherwise.

EU Users

If you are located in the European Union, you have the right to lodge a complaint with your local data protection supervisory authority if you believe we have violated your data protection rights.

As we are based in Slovakia, our lead supervisory authority is:

Úrad na ochranu osobných údajov Slovenskej republiky
(Office for Personal Data Protection of the Slovak Republic)
Hraničná 12
820 07 Bratislava 27
Slovak Republic
Website: dataprotection.gov.sk
Email: statny.dozor@pdp.gov.sk

Dispute Resolution

We encourage you to contact us first at privacy@sapplify.com to resolve any concerns or disputes. We are committed to working with you to reach a fair resolution.

19. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or your data, please contact us:

Anthony Eli Rasch - sapplify
PO Box 004
91501 Nové Mesto nad Váhom
Slovakia

General Inquiries: contact@sapplify.com

Privacy & Data Protection: privacy@sapplify.com

We are committed to addressing your privacy concerns and will respond to your inquiry within 30 days.

Data Protection Inquiries

For specific data protection requests (access, deletion, correction of feedback data), please email us with:

• A clear description of your request
• Your email address (if you provided one when submitting feedback)
• Any relevant details to help us locate your data

We may need to verify your identity before processing certain requests to ensure the security of your data.