Privacy Policy

Christ + Cycle ("we," "us," "the app") is a faith-based wellness app that combines cycle tracking with devotional content and a prayer community. This Privacy Policy explains what information we collect, how we use it, and the choices you have. By using Christ + Cycle, you agree to this policy.

What We Collect

We collect information in two categories: information that stays on your device, and information that is stored on our servers.

Stored on our servers (when you create an account or share content):

• Your first name
• Your email address
• Your password (stored in encrypted form — we cannot see it)
• Community posts and prayer requests you choose to share
• Encouragements and prayers you send on others' posts
• Username displayed with your shared posts

Stored only on your device (never sent to our servers):

• Personal devotions you do not share
• Personal prayer requests you do not share
• Cycle tracking data (period dates, cycle phase, period and cycle length)
• Personal reflections and journal entries
• App preferences and notification settings

The distinction is based on your choice. Anything you write inside the app stays on your device unless you explicitly choose to share it to the community.

How We Use Your Information

We use the information we collect to:

• Create and maintain your account
• Personalize your cycle phase guidance, devotionals, and content
• Display your shared posts and prayers to other users in the community
• Send account-related emails (verification, password reset)
• Send push notifications you have opted into
• Respond to support requests
• Comply with legal obligations

We do not sell your data. We do not share your data with advertisers. We do not use your data to train AI models.

How Your Data Is Stored

Your account information and shared community content are stored on Supabase, a third-party database service that we use to operate the app. Supabase processes this data on our behalf and is contractually required to protect it. Supabase's privacy practices are available at supabase.com/privacy.

Content from the daily devotional and wellness content is delivered through our backend hosted on Railway, but no personal information about you is sent to Railway servers — only requests for content.

Information stored on your device is held in your device's secure storage and is not transmitted to us or any third party.

Community Posts and Public Content

When you share a post, prayer request, encouragement, or prayer to the Christ + Cycle community, the following becomes visible to other users of the app:

• The content of your post
• Your first name (as your username)
• The date the post was shared

Anyone using the app can see this content. Do not share information in the community that you would not want other users to read. You can delete your own posts at any time. You cannot edit posts after they are shared — you must delete and repost if you want to make changes.

Email Communications

When you create an account, we send you a verification email. You must verify your email address before you can use the app. We may also send password reset emails when you request them. We do not currently send marketing or promotional emails.

Push Notifications

If you allow notifications when prompted, Christ + Cycle can remind you about devotionals, prayer, and your cycle. These reminders are scheduled and generated entirely on your device based on your preferences — we do not operate a push notification server, and we do not send your personal data through the notification system. You can disable notifications at any time in your device settings or in the app's notification preferences.

Account Deletion

You may delete your account at any time from the Settings → Delete Account screen.

When you delete your account, we permanently delete:

• Your account, name, email, and password
• All community posts, prayer requests, encouragements, and prayers you have shared
• All on-device data associated with the app (reflections, cycle data, preferences)

Deletion is permanent and cannot be undone. We process deletion requests immediately, though some information may be retained briefly in encrypted backups for up to 30 days before being permanently erased. We may also retain limited information if required by law.

You can also email hello@christandcycle.com at any time to request deletion if the in-app option is unavailable.

Children's Privacy

Christ + Cycle is not intended for users under the age of 13. We do not knowingly collect information from children under 13. If you believe a child under 13 has created an account, please email hello@christandcycle.com and we will delete the account and associated data.

Data Security

We use industry-standard security practices, including TLS encryption for data in transit, password hashing, and access controls on stored data. However, no method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

Your Rights

You may:

• Access the personal data we hold about you by emailing hello@christandcycle.com
• Correct inaccurate information by editing your account or contacting us
• Delete your account and data through the Settings screen or by emailing us
• Withdraw your consent to processing at any time by deleting your account

If you are located in the European Union, United Kingdom, or California, you have additional rights under GDPR or CCPA, including the right to data portability and the right to object to processing. Email us to exercise these rights.

Changes to This Policy

If we change this Privacy Policy in a way that affects how we collect, use, or share your information, we will notify you in the app and update the "Last updated" date. Continued use of the app after changes means you accept the updated policy.