Privacy Policy for CycleAlign

Last Updated: October 2026

CycleAlign interacts with Google user data in two optional ways:

• Sign in with Google: to create and sign in to your CycleAlign account.
• Connect Google Calendar: to show your calendar events in the app and help you plan them around your cycle.

Both are optional. You can use CycleAlign with an email and password, without connecting Google Calendar.

1. Data Accessed

Sign in with Google (scopes: openid, email, profile): We receive:

• Your name
• Your email address
• Your Google account identifier

Google Calendar (scope: https://www.googleapis.com/auth/calendar.events): Only if you choose to connect it, we access events on your primary Google Calendar for the next 30 days. From each event we use only:

• The event title and its start and end date and time
• Whether the event is marked private
• Whether the event repeats
• Whether you are the event’s organizer, and whether it has other guests, so that we never change an event that belongs to someone else

We do not access your contacts, emails, files, or any other Google service.

2. Data Usage

Name and email: Used only to create your CycleAlign account, sign you in, and show your name in the app.

Calendar events: Used only to:

1. Show your existing events inside CycleAlign;
2. Give each event a timing score (green, yellow, or red) based on your cycle phase or your own daily check-ins, so you can see which days may be more demanding;
3. Suggest better dates for demanding events;
4. Move an event to a new date, but only when you tap a suggested date and confirm it. When an event is moved, only its date and time change. The title, description, guests, and all other details stay the same.

CycleAlign never creates or deletes events in your Google Calendar, and never changes an event without your confirmation. We do not use Google user data for advertising, and we do not sell it.

AI and Machine Learning: No Google user data, whether raw, aggregated, or derived, is ever sent to any AI or machine-learning service. That includes the AI assistant in the app (“Ask AI Align”). Google user data is not used to develop, improve, or train any AI or machine-learning model, whether ours or a third party’s.

3. Data Sharing

We do not share, sell, rent, or transfer Google user data to any third party. This includes advertisers, data brokers, and AI providers.

The only exceptions are:

• Our hosting provider, Supabase: Stores your account name and email so you can sign in. It acts only on our instructions and does not use the data for its own purposes. Google Calendar data is never sent to our servers or to Supabase.
• Legal requirements: If we are legally required to disclose data, for example by a valid court order, we disclose only what is required.

4. Data Storage & Protection

• Google Calendar data: Your events and the Google Calendar access tokens are stored only on your own device, in CycleAlign’s private app storage. It is never uploaded to our servers. The app connects directly to Google over an encrypted connection (HTTPS/TLS).
• Sign-in data: Your name and email from Google sign-in are stored in our secure database (Supabase). They are encrypted in transit (HTTPS/TLS) and at rest, and protected by access rules that let only your own account access your data.
• Access to our systems is limited to authorised personnel who need it to run the service.

5. Data Retention & Deletion

• Google Calendar data: Kept on your device only while Google Calendar is connected. When you tap Disconnect in the app’s Calendar tab, the stored events and access tokens are deleted from your device immediately, and CycleAlign stops all access. Uninstalling the app also removes them.
• Revoking access: You can remove CycleAlign’s access to your Google account at any time at https://myaccount.google.com/permissions.
• Sign-in data: Name and email are kept while your account is active.
• Deleting your data: You can delete your account and all associated data at any time in the app, under About → Delete account. You can also email us at hellocyclealign@gmail.com to request deletion. We permanently delete your data from our servers within 30 days of your request.