MoonCyclePrivacy policy
Version 2026-10-21 · Last updated 21 October 2026
- What you log (periods, symptoms, mood, notes) stays on your phone. We never receive it.
- Our server holds your email, a scrambled form of your password, and, only if you turn on partner sharing, the summary you choose to share.
- No advertising, no selling of data, no tracking or analytics tools.
- You can delete your account and data at any time, in the app.
1. Who we are
MoonCycle is provided by IONCODEX LTD, a company registered in England and Wales (company number 16798601), registered office 127 Calshot Road, Birmingham, B42 2BZ, England. We are the controller of the personal data described here.
Questions about your data: mooncycle_contact@ioncodex.org, or write to us at the address above.
2. What we hold, why, and on what legal basis
| Information | Why | Legal basis (UK GDPR) |
|---|---|---|
| Your email address and password (stored only as a scrypt hash, which cannot be turned back into your password) | To create your account and sign you in | Providing the service you asked for (contract, Article 6(1)(b)) |
| Sign-in sessions (a token stored only as a hash) | To keep you signed in | Contract |
| The version of these terms you agreed to, and when you gave consent for health data | To show we have your agreement and consent | Our legal obligation to be able to demonstrate consent; legitimate interests |
| Only if you turn on partner sharing: the summary you choose: your cycle phase and day, when your next period is expected, the mood, energy, pain or discomfort you logged that day, and whether jokes are suitable that day | So the partner you connect with can see it | Your explicit consent (Article 9(2)(a)), given on the sharing screen. Turning sharing off withdraws it. |
| Partner connection: the pairing code, who is connected to whom, one-tap messages between you (stored as short codes, such as "I could use a hug"), and the tip style your partner chose | To connect you with your partner and pass your messages | Contract; explicit consent for anything that reveals health information |
| Ratings you give to daily partner tips (nice, not funny, not okay) | To improve the tips and remove unsuitable ones | Legitimate interests |
| Technical records: your IP address, the time and the page or request, kept in our server logs | Security, preventing abuse and fixing faults | Legitimate interests (Article 6(1)(f)) |
What stays on your phone
Everything you log (period dates and flow, symptoms, mood, energy, sleep, temperature, discharge, sex, notes), your quiz answers, your reminders, your insight cards and anything imported from Health Connect is stored only on your device. We do not receive it and cannot see it. MoonCycle processes it on your phone to show predictions, insights and reminders, with your explicit consent (Article 9(2)(a)), which you give when you create your account. If you delete the app or your account, it is erased from your device.
3. What we do not do
- We do not sell or rent your data, or share it for advertising.
- We do not use advertising, analytics or tracking tools.
- We never send your personal data to AI services.
- We make no decisions about you that have legal or similarly significant effects. Predictions and insight cards are worked out automatically on your phone, for information only.
4. Who else is involved
- Hetzner Online GmbH (Germany) hosts our server in its data centre in Germany, under a data processing agreement. The UK recognises the EU as giving adequate protection to personal data.
- Our email provider sends account emails, such as password resets, once that feature is available. We will name it here.
- Google Fonts: the app currently downloads one typeface from Google's servers, which means your device's IP address is visible to Google when it does. We plan to include the typeface in the app instead.
- Apple and Google provide the app stores. When you download MoonCycle, their own privacy policies apply to that.
If your partner connects with you, they see only the summary and messages you choose to share. They are responsible for treating it with respect.
5. How long we keep it
- Your account, consent records and ratings: until you delete your account.
- Sign-in sessions: until you sign out or delete your account, or after 90 days without use, when you are asked to sign in again.
- Pairing codes: deleted when used, or 24 hours after they are created.
- The shared summary: replaced each time it updates, and deleted straight away when you turn sharing off or delete your account.
- One-tap messages and the replies to them: deleted 24 hours after they are sent, or sooner if replaced by a new one or sharing ends.
- Server logs: up to 14 days.
6. Your rights
You have the right to access your data, correct it, have it erased, restrict or object to how we use it, receive it in a portable form, and withdraw consent at any time (this does not affect what we did before you withdrew it).
- Delete everything: in the app, go to Settings, then "Delete my account and data". You can also ask by email: see how to delete your account.
- Stop sharing: turn partner sharing off in the app. The shared summary is removed from our server immediately.
- Anything else: email mooncycle_contact@ioncodex.org. We will reply within one month.
Data that is only on your phone is under your control: we cannot see, export or delete it for you, but deleting the app or your account in the app erases it.
7. Age
MoonCycle is for people aged 18 or over. We do not knowingly hold data about anyone younger. If you think a child has created an account, contact us and we will delete it.
8. Security
All connections use encryption (HTTPS). Passwords are stored only as scrypt hashes. Access to our server is restricted. Most of your information never leaves your phone in the first place.
9. Cookies and storage
MoonCycle does not use cookies. The app and the website store your settings and your sign-in on your own device, which is strictly necessary for them to work.
10. Complaints
If you are unhappy with how we handle your data, please contact us first. You can also complain to the Information Commissioner's Office (ICO): ico.org.uk/make-a-complaint, telephone 0303 123 1113.
11. Changes
If we change this policy in a way that matters, the app will ask you to read and agree to the new version before you continue.