Privacy policy

Who we are

Cycles ("we") is an independent, free service. We are responsible for the personal data described in this policy. Contact us at support@compoundcycles.com.

Information we hold

• Account details: your name, your email address and a hashed version of your password. We never store the password itself.
• Your writing: the session ideas, plans, cycle notes, reviews and reflections you write, and the timings of your sessions and cycles. This is your own content. We store it only so the app can show it back to you.
• Technical data: when you sign up or after a failed sign-in we keep a hashed form of your internet (IP) address for up to one day to prevent automated sign-ups and password guessing. Our hosting provider also keeps standard server logs for a short period.

How we use it

We use your data to provide the service you signed up for, and to keep it secure and prevent abuse. Where data protection law asks for a legal basis, these are the performance of our agreement with you and our legitimate interest in running a safe service.

We do not sell your data, use it for advertising, or use what you write for any purpose other than showing it back to you. We use no analytics or tracking tools.

Who we share it with

We do not share your data with anyone except the service providers that host the site and its database, which handle it only on our behalf. Your data is stored in the United States.

Cookies

We use only cookies that are necessary to sign you in and keep sign-in secure. Your browser also stores the state of a running timer, and the try-it-out session if you use it, on your device.

How long we keep it

We keep your data for as long as you have an account. When you delete a session or your account it is removed immediately; copies in routine backups are removed as those backups expire.

Your rights

You can export everything as JSON or CSV, delete any session, or delete your account in Settings at any time. Depending on where you live, you may also have the right to ask for a copy of your data, to have it corrected or deleted, to object to or restrict how we use it, and to complain to the data protection regulator in your own country if you think we have handled your data wrongly. To use any of these rights, contact us and we will reply within 30 days.

Security

Data is encrypted in transit and passwords are stored hashed. Access to the database is limited to what is needed to run and maintain the service. No online service can promise complete security; if a breach affects your data we will tell you.

Children

Cycles is not intended for anyone under 16.

Changes to this policy

We will post any changes on this page and update the date at the top.