Cycella Privacy Policy
Version 1 · Effective at launch, December 2026
This policy explains what happens to your information when you use Cycella, a period tracker. We wrote it in plain words. If anything is unclear, write to us at the address in “Contact and complaints”.
Who we are
Cycella is made by Pixelridge Web, Bardiya, Nepal (“we”). We decide how the Cycella app and its backup server work. We serve users in Nepal, India and other countries, and we follow the privacy laws of the countries our users live in.
The short version
- You do not make an account. We never ask for your name, email, phone number or location.
- Your period, mood, symptom, note and pad logs are stored only on your phone.
- Backup and partner sharing are optional. If you turn them on, your data is locked on your phone before it leaves, and only you (and your partner, for what you choose to share) hold the key. We cannot read it.
- There are no ads, no analytics and no trackers in Cycella. We do not sell or share your data.
- You can delete everything at any time from Me › Delete all my data.
What Cycella keeps on your phone
- Your setup answers (language, last period date, usual cycle length) and whether you are 18 or older.
- Your daily logs: flow, mood, symptoms and notes.
- Your pad count and reminder settings.
- Your app lock PIN, stored as a secure one-way hash, and your backup key, stored in your phone's secure key storage.
This data never reaches us unless you turn on backup or partner sharing. Android's own cloud backup is switched off for Cycella so this data is not copied to Google.
What reaches our server, and why
Our server runs on Vercel in Mumbai, India, so data from users in Nepal is stored in India. It receives data only when you use these optional features:
Backup (18 or older). A copy of your logs and settings, encrypted on your phone with a 12-word key before upload. The server stores the encrypted file, a random box number and a scrambled (hashed) password for it. It cannot open the file. Purpose: so you can get your data back on a new phone.
Partner sharing (18 or older). Only what you switch on: your mood, your next period date and your pad status, encrypted on your phone with a key that only your phone and your partner's phone know. Your partner can send back “I'll bring pads” and a short preset note. Flow, symptoms, notes and your doctor report are never shared. Purpose: so your partner can support you.
Pairing codes. When you invite a partner, the server relays a 6-character code and the encrypted messages that let the two phones agree on a key. Codes expire after 10 minutes and are deleted after pairing.
Network details. Like any internet service, our hosting provider sees your phone's IP address and the time of each request when backup or sharing talks to the server. Our code does not log or store these. Vercel may keep short-lived platform logs for security and reliability under its own policy.
Our legal reason for this processing is your consent, which you give when you turn a feature on. You can withdraw it by turning the feature off.
What we never do
- We do not use your data for advertising, and Cycella has no ads.
- We do not sell, rent or trade data.
- We do not use analytics, crash-reporting or tracking tools.
- We do not try to identify you or link your encrypted data to you.
How long we keep data
- Data on your phone stays until you delete it or uninstall the app.
- An encrypted backup stays on the server until you turn off backup, change your key or delete all your data. We will delete backups that have not been updated for 2 years.
- A partner box is deleted when either of you stops sharing.
- Pairing codes are deleted after pairing, after 3 wrong tries, or after 10 minutes.
Your choices and rights
Under India's Digital Personal Data Protection Act 2023, Nepal's Individual Privacy Act 2018 and similar laws, you can:
- See your data: it is all on your phone, in the app. Me › Backup › Save a copy exports it.
- Correct it: edit any day in the Calendar.
- Delete it: Me › Delete all my data removes everything from your phone and deletes your backup and partner boxes from our server. Me › Backup › Turn off backup deletes only the server copy.
- Withdraw consent: turn off backup or partner sharing at any time.
- Nominate someone: you can name a person to use these rights if you die or cannot act, by writing to us.
- Complain: write to us first (see below). In India you may also complain to the Data Protection Board of India.
Because we hold no account or contact details, we cannot identify you from a request by email alone. For most requests, the controls in the app are the fastest way.
Children
Cycella is for anyone who has periods, including teenagers. If you are under 18, Cycella works fully on your phone, but backup and partner sharing are turned off, so nothing about you is sent to our server. We do not knowingly collect data from anyone under 18.
Security
Backup and partner data are end-to-end encrypted with modern encryption (currently XChaCha20-Poly1305), using keys that never leave your devices. You can protect the app with a PIN or fingerprint. No system is perfectly secure. If we learn of a security incident that affects you, we will tell you in the app and report it to the authorities as the law requires.
Your 12-word key
Your backup can only be opened with your 12 words or QR code. We do not have a copy. If you lose every copy of your key and your phone, we cannot recover your data.
Health information
Cycella shows estimates, including predicted periods and fertile days. They are not medical advice and not a method of birth control. See our Terms of Use.
Changes
If we change this policy, we will update the version and date above and show a notice in the app before the change applies to you.
Contact and complaints
Grievance Officer: Sandeep Sharma, Pixelridge Web
Email: info@pixelridgeweb.com
We reply within 30 days.