The short version
- We collect only what the app needs to work. There is no advertising, no analytics SDK, and no tracking.
- We do not sell your data. We do not share it with advertisers, data brokers, or any third party.
- Your cycle data and your partner notes are encrypted on your phone and again on our server,
and travel only over HTTPS.
- Nobody sees your cycle data unless you link a partner and choose what they can see.
- You can delete your account and everything in it at any time.
Who we are
Crescent Cycle is an Android application operated by I am Geek. If you have a question about
this policy or your data, contact support@iamgeek.com.
What we collect
Sent to our server
| Data | Why |
|---|
| Email address | Identifies your account and is how you sign in. |
| Password | Stored only as a bcrypt hash. We never store or see your actual password. |
| Display name | Shown to you and to a linked partner. |
| Account role | Whether you are the tracking partner or the supporting partner. |
| Device identifier | A random ID generated by the app so multiple devices can sync. It is not your phone's hardware ID or advertising ID. |
| Cycle entries | Period start and end dates, flow intensity, mood, energy level, symptoms, free-text notes, and the moon phase for that date. This is health information. |
| Couple code and partner link | Connects two accounts and records the permission level you granted. |
| Shared notes | Messages you send to a linked partner. |
| Session tokens | Keeps you signed in. Expires after 90 days. |
Kept only on your phone, never sent to us
- Your date of birth
- Medications and medication reminders
- Achievements, badges, streaks and level progress
- Support-log entries written by a supporting partner
- Appearance settings — theme, dark mode, cycle nickname, emoji, font size, date format, haptics
These never leave your device. They are stored in an encrypted database on the phone and are
erased when you sign out or delete your account. Because we never receive them, they are also
not recoverable by us if you lose your phone.
What we do not collect
No location. No contacts, calendar, photos, videos, audio or files. No advertising identifier.
No browsing or search history. No purchase history. No installed-app list. The app contains no
advertising SDK, no analytics SDK, and no crash-reporting SDK.
How your data is protected
- On your phone — the local database is encrypted with SQLCipher (AES-256).
The encryption key is generated on first run, stored in the Android Keystore, and never leaves
the device. App settings and your session token are held in encrypted storage.
- In transit — every request uses HTTPS with TLS 1.3. The app refuses plaintext
connections and rejects user-installed certificates, so the connection cannot be intercepted by a
proxy.
- On our server — cycle entries and partner notes are encrypted with
AES-256-GCM using a key unique to your account. That per-account key is itself encrypted with a
master key held outside the database, so a copy of the database alone cannot be read. Server
disks are encrypted at rest, and the servers run on Amazon Web Services under a signed Business
Associate Agreement.
- On screen — the app blocks screenshots and hides its contents from the Android
recent-apps preview.
- Notifications — reminder text is deliberately generic. No cycle data, symptom,
or name ever appears on your lock screen.
No system is perfectly secure, and we will not claim otherwise. What we can tell you is exactly
what protections exist, which is what this section describes.
Partner sharing
Crescent Cycle is built for two people. Sharing is entirely opt-in and works like this:
- The tracking partner generates a couple code and chooses who to give it to.
- The supporting partner enters that code to link the two accounts.
- The tracking partner sets the permission level — View Only, Can Add, or Full Access — and can
change or revoke it at any time.
- Unlinking immediately ends the other person's access and deletes the notes shared between you.
We do not share your data with anyone else. Not advertisers, not data brokers, not other users.
The only person who can see your cycle information is a partner you deliberately linked.
Your choices
Export
Insights → Export to CSV produces a file containing your entire cycle history, which you can save
or send wherever you like.
Delete your account
Settings → Account → Delete Account inside the app, or
delete-account.html from any browser without installing the app.
Your account is deactivated immediately, your partner link is severed, shared notes are removed
from both sides, and you are signed out everywhere. All remaining data is permanently erased after
30 days. During those 30 days you can cancel; afterwards nothing can be recovered, by you or by us.
We keep a one-way cryptographic hash of your email address and the date of deletion, so we can
demonstrate that the deletion happened. It contains no health information and cannot be reversed
back into your email address.
Sign out
Signing out invalidates your session on our server and erases the app's local database from your
phone. Your data remains on the server and returns when you sign in again.
How long we keep things
- Account and cycle data — until you delete your account, then 30 more days.
- Session tokens — 90 days, or immediately on sign-out.
- Encrypted server backups — daily snapshots kept for 7 days, plus a monthly snapshot kept
for 6 months. Snapshots are encrypted and held by our hosting provider, not on the server itself.
- Because a snapshot is a frozen copy of an earlier moment, a deleted account can still appear
in one taken before the deletion — for up to 6 months. Those snapshots are only ever used to
rebuild the service after a failure, never to look anything up, and each ages out on the schedule
above. Your live data is gone at 30 days as described.
- Deletion audit records — retained indefinitely. Hashed email and timestamp only.
Children
Crescent Cycle is not directed at children under 13 and we do not knowingly collect their
information. If you believe a child has created an account, contact us and we will remove it.
Changes
If this policy changes materially we will update the date at the top and notify you in the app
before the change takes effect.