Privacy Policy

• Cycle logs: period days and flow, symptoms, moods, discharge, sex (protected or not), ovulation and pregnancy test results, basal body temperature, pill taken and notes.
• Body and wellbeing: weight, sleep hours, water and daily mood check-in ratings (PMS and PMDD).
• Pregnancy: due date and how it was calculated, status (ongoing, baby arrived or ended), end date, kick counts, contraction times, checklist ticks, appointments and a baby names shortlist.
• Bump diary photos (CycleNest Plus): photos you take or pick. They are kept in the app's private storage on your phone, not in your gallery, protected by Android's app sandbox.
• Settings: typical cycle and period length, your goal (track or trying to conceive), theme, reminder times and lock settings.
• App lock PIN: only a salted, stretched hash of your PIN is kept, in Android Keystore-backed secure storage. The PIN itself is never stored.

None of this is sent to us or to anyone else by the app.

• Your logs are kept in a database encrypted with a random 256-bit key that is created on your phone and stored in the Android Keystore.
• Android cloud backup and device-to-device transfer are turned off for CycleNest, so your data is not copied into Google backups. This also means that if you uninstall the app or lose your phone without making a backup file, we cannot recover your data.
• Optional PIN lock and fingerprint or face unlock. Biometric checks are done by Android; the app never sees your fingerprint or face data.
• Optional "Hide in recent apps" blanks the app preview in the app switcher and blocks screenshots.
• Reminders are discreet by default (for example "Reminder" or "A gentle check-in" instead of period or pregnancy words) and their content is hidden on a locked screen.

No method of storage is perfectly secure, but your data never leaves your device unless you export it.

• Backup file (Settings > Backup and restore): contains your logs, pregnancy data, settings and bump diary photos. It is encrypted with AES-256-GCM using a key derived from a password you choose (PBKDF2-HMAC-SHA256, 120,000 iterations). You decide where to save or send it. We never receive it and cannot open it without your password.
• Exports (CycleNest Plus): a PDF cycle summary and a CSV of your logs, created on your phone and handed to Android's share sheet. Exports are not encrypted. Once you share a file, the app you share it with (email, cloud drive and so on) handles it under its own privacy policy.

The free version shows ads from Google AdMob: a banner on the calendar screen, an occasional full-screen ad when you close certain reading screens, and an optional video ad you can choose to watch for a 24-hour pass to Plus content. Ads never appear on the logging, kick counter or contraction timer screens. CycleNest Plus subscribers see no ads, and the ads library is not started for them.

CycleNest requests non-personalised ads only. The app removes the advertising ID permission and Android's Privacy Sandbox ad permissions (Topics, Attribution and the ad services ID), so no interest profile is built from your use of CycleNest. No health or cycle data, notes or other app content is ever included in an ad request.

To show, measure and protect ads, Google AdMob itself may collect your IP address (which can indicate approximate location), device and app information (such as model, OS version, app version and language), ad interactions (views and taps), diagnostic and fraud prevention signals, and app-set or device identifiers where available. See Google's privacy policy and How Google uses information from sites or apps that use our services.

In the European Economic Area, the UK and Switzerland, CycleNest shows Google's consent form before any ad is requested where required. You can change your choice at any time in Settings > Ad privacy choices.

CycleNest Plus is an optional subscription sold through Google Play Billing. Google handles the payment and your payment details; the app only learns from Google Play whether your subscription is active, and remembers that on your phone. You can manage or cancel it in Google Play > Payments & subscriptions.

• Internet and network state: only to load ads (free version) and talk to Google Play for purchases. Your health data never uses the network.
• Google Play billing: the Plus subscription.
• Notifications: reminders you switch on (period, PMS and PMDD, fertile window, pill, pregnancy week, appointments).
• Run at startup: re-schedules your reminders after the phone restarts.
• Biometric: optional fingerprint or face unlock.
• Vibrate, wake lock, foreground service: added by Google libraries (ads, billing, notifications) to deliver notifications and purchases reliably.

CycleNest does not use location, contacts, microphone, camera or storage permissions, or the advertising ID. The bump diary uses Android's own camera and photo picker, so the app only receives the single photo you choose.

• We do not run a server for CycleNest and do not collect your health data.
• We do not use analytics, crash-reporting or tracking SDKs (no Firebase, no Crashlytics, no Facebook SDK).
• We do not sell or share personal data, and we do not use your data to train AI.

We do not collect "consumer health data" as defined by laws such as Washington's My Health My Data Act, Nevada SB 370 or Connecticut's privacy law, because your health information stays on your device and is never transmitted to us or to third parties by the app.

Under the GDPR and UK GDPR, health data is special category data. It is processed only on your device, by you, so we do not process it. For the limited data Google processes for ads, the legal basis is your consent where required and otherwise legitimate interests; Google acts under its own policies.

Your data is already in your hands. You can view and edit it in the app, take a copy with a backup or CSV export, and delete everything with Settings > Delete all data, which erases the database, bump diary photos, PIN and settings. Uninstalling the app also removes everything it stored. Backup and export files you saved elsewhere are yours to delete. There is no account, so there is nothing for us to delete on a server. For ad data, use Settings > Ad privacy choices or Google's tools.

CycleNest shows estimates based on your own logs. It is not medical advice, not a diagnostic tool and not a form of birth control. Pregnancy content is general information; talk to your midwife or doctor about your own care.

CycleNest is not directed at children under 13 (or 16 where local law requires), and we do not knowingly collect information from children.

Questions about this policy: [email protected]

If CycleNest starts handling information differently, we will update this page and the date above, and note significant changes in the app's release notes.