The short version
- We collect only what the app needs to work. There is no advertising, no analytics SDK, and no tracking.
- We do not sell your data. We do not share it with advertisers, data brokers, or any third party.
- Your cycle data and your partner notes are encrypted on your phone and again on our server,
and travel only over HTTPS.
- Nobody sees your cycle data unless you link a partner and choose what they can see.
- You can delete your account and everything in it at any time.
- If you subscribe, Apple or Google takes the payment. We never see your card or bank details.
Who we are
Crescent Cycle is an app for Android and iPhone, operated by I am Geek. If you have a question about
this policy or your data, contact support@iamgeek.com.
What we collect
Sent to our server
| Data | Why |
|---|
| Email address | Identifies your account and is how you sign in. |
| Password | Stored only as a bcrypt hash. We never store or see your actual password. |
| Display name | Shown to you and to a linked partner. |
| Account role | Whether you are the tracking partner or the supporting partner. |
| Device identifier | A random ID generated by the app so multiple devices can sync. It is not your phone's hardware ID or advertising ID. |
| Cycle entries | Period start and end dates, flow intensity, mood, energy level, symptoms, free-text notes, and the moon phase for that date. This is health information. |
| Couple code and partner link | Connects two accounts and records the permission level you granted. |
| Shared notes | Messages you send to a linked partner. |
| Session tokens | Keeps you signed in. Expires after 90 days. |
| Subscription records | If you or your partner subscribe: which store (Apple or Google), the plan, its
transaction ID, when it renews or ends, and whether it is active, in a billing grace period, expired or refunded.
The store sends us this, signed, so we can tell whether your couple has access. No card or payment details. |
| Free-trial record | A one-way hash of your email address and the dates of the free trial your
couple used. It is how we give each couple one free trial. See How long we keep things. |
Kept only on your phone, never sent to us
- Medications and medication reminders
- Support-log entries written by a supporting partner
- Appearance and app settings — theme, dark mode, haptics, reminders, App Lock
- On Android: your date of birth; achievements, badges, streaks and level progress; cycle
nickname, emoji, font size and date format
- On iPhone: the short summary shown by the home-screen widget (cycle day and next-period
estimate), stored in the app's private, encrypted storage on the phone
These never leave your device. They are stored in an encrypted database on the phone and are
erased when you sign out or delete your account. Because we never receive them, they are also
not recoverable by us if you lose your phone.
What we do not collect
No location. No contacts, calendar, photos, videos, audio or files. No advertising identifier.
No browsing or search history. No card or payment details. No installed-app list. The app contains no
advertising SDK, no analytics SDK, and no crash-reporting SDK.
How your data is protected
- On your phone — the local database is encrypted with SQLCipher (AES-256).
The encryption key is generated on first run and never leaves the device: on Android it is held
in the Android Keystore; on iPhone in the Keychain, locked to that one device. On iPhone the
database is also left out of iCloud and computer backups, so your health data is not copied off
the phone that way. Your session token is held in encrypted storage (Android) or the Keychain
(iPhone).
- In transit — every request uses HTTPS. The app refuses plaintext
connections. On Android it also requires TLS 1.3 and rejects user-installed certificates, so the
connection cannot be intercepted by a proxy.
- On our server — cycle entries and partner notes are encrypted with
AES-256-GCM using a key unique to your account. That per-account key is itself encrypted with a
master key held outside the database, so a copy of the database alone cannot be read. Server
disks are encrypted at rest, and the servers run on Amazon Web Services under a signed Business
Associate Agreement.
- On screen — on Android the app blocks screenshots and hides its contents from
the recent-apps preview. On iPhone the app hides its contents in the app switcher, can be locked
with Face ID, Touch ID or your passcode (App Lock), and the home-screen widget shows only the app
name and moon phase while App Lock is on.
- Notifications — reminders are discreet by default: generic text, with no cycle
data, symptom or name on your lock screen. If you switch discreet reminders off, a reminder's title
(for example "Period starting soon") can appear on your lock screen.
No system is perfectly secure, and we will not claim otherwise. What we can tell you is exactly
what protections exist, which is what this section describes.
Partner sharing
Crescent Cycle is built for two people. Sharing is entirely opt-in and works like this:
- The tracking partner generates a couple code and chooses who to give it to.
- The supporting partner enters that code to link the two accounts.
- The tracking partner sets the permission level — View Only, Can Add, or Full Access — and can
change or revoke it at any time.
- Unlinking immediately ends the other person's access and deletes the notes shared between you.
We do not share your data with anyone else. Not advertisers, not data brokers, not other users.
The only person who can see your cycle information is a partner you deliberately linked.
Subscriptions and payments
- One subscription covers both linked partners, whichever of you pays. New couples get a free
trial first; each couple, and each person, gets one free trial.
- Payment is handled entirely by Apple (App Store) or Google (Google Play) under their own privacy
policies. We never receive your name on the card, card number or bank details.
- We receive only the subscription records listed above, signed by the store, and use them only
to decide whether your couple has access. They are not used for advertising or shared with anyone.
- If your subscription ends, everything you have logged stays readable and exportable.
- Manage or cancel your subscription in your Apple ID settings (iPhone) or the Google Play
Store (Android). Deleting your Crescent Cycle account does not cancel it.
Your choices
Export
Insights → Export to CSV produces a file containing your entire cycle history, which you can save
or send wherever you like.
Delete your account
Inside the app: Settings → Account → Delete Account on Android, or More → Account → Delete
Account on iPhone. Or use delete-account.html from any browser
without installing the app.
Deleting your account does not cancel an App Store or Google Play subscription. Cancel it in the
store first, or you will keep being charged. If you are the partner who pays, your partner loses the
subscription's benefits when your account is deleted.
Your account is deactivated immediately, your partner link is severed, shared notes are removed
from both sides, and you are signed out everywhere. All remaining data is permanently erased after
30 days. During those 30 days you can cancel; afterwards nothing can be recovered, by you or by us.
We keep a one-way cryptographic hash of your email address and the date of deletion, so we can
demonstrate that the deletion happened. If you used a free trial, we also keep a one-way hash of
your email address with your trial dates, so that deleting and re-registering does not start a
second free trial. Neither contains health information, and neither can be reversed back into your
email address.
Sign out
Signing out invalidates your session on our server and erases the app's local database from your
phone. Your data remains on the server and returns when you sign in again.
How long we keep things
- Account and cycle data — until you delete your account, then 30 more days.
- Session tokens — 90 days, or immediately on sign-out.
- Encrypted server backups — daily snapshots kept for 7 days, plus a monthly snapshot kept
for 6 months. Snapshots are encrypted and held by our hosting provider, not on the server itself.
- Because a snapshot is a frozen copy of an earlier moment, a deleted account can still appear
in one taken before the deletion — for up to 6 months. Those snapshots are only ever used to
rebuild the service after a failure, never to look anything up, and each ages out on the schedule
above. Your live data is gone at 30 days as described.
- Subscription records — while your account exists; deleted with your account.
- Deletion audit records — retained indefinitely. Hashed email and timestamp only.
- Free-trial records — retained indefinitely, to prevent repeat free trials. Hashed email and
trial dates only.
Children
Crescent Cycle is not directed at children under 13 and we do not knowingly collect their
information. If you believe a child has created an account, contact us and we will remove it.
Changes
If this policy changes materially we will update the date at the top and notify you in the app
before the change takes effect.