MoonCycle Privacy Policy

Effective date: 2026-10-22

This policy explains what happens to your data when you use the MoonCycle app. It covers what stays on your phone, what leaves it, who receives it and what rights you have. We wrote it from the app's code. If the app changes what it sends, we change this policy first.

MoonCycle is not a medical device, not contraception and not a diagnosis.

1. Who we are

Fittcoaching LLC, a Washington limited liability company, publishes MoonCycle and is responsible for your data. Laws such as the GDPR call this the "controller".

Fittcoaching LLC
7654 19th St W, Tacoma, WA 98466-3615, United States
Phone: +1 253-255-8369
Email: bertbertov@gmail.com

Our developer, Kamalov Systems, builds the app. Kamalov Systems also runs our AI relay (section 4) for us, under a written contract and our instructions.

2. The short version

• Your cycle data stays on your phone. We have no account system and keep no copy of your cycle on any server.
• Data leaves your phone only when you turn on a feature that needs it: the AI features (including AI transcription of voice notes and copying the results from a lab report you send), Ask MoonCycle, the online city lookup, partner sharing or Health Connect. Each one asks you first.
• The AI features and Ask MoonCycle send what their screens list to OpenAI OpCo, LLC in the United States, through our relay. OpenAI does not train its models on it. It keeps it for up to 30 days, or longer where the law requires it or to protect people from harm. They are offered in the United States only, to people 18 and over, and are off until you turn them on.
• If you report an AI answer, we keep that question and answer for 90 days.
• We do not sell your data: we give it to no one in exchange for money or any other valuable consideration. We do not show ads. We do not use analytics, advertising or crash-reporting tools in the app.
• We do not collect, use or sell personal data to train large language models.

3. What stays on your phone

MoonCycle stores the following on your phone only:

• Cycle log. Period days and flow, bleeding between periods, cervical mucus, basal body temperature, sexual activity, symptoms, mood, energy, stress, weight (only if you turn weight on), and whether you took a logged pill.
• Your mode. Cycle, trying to conceive, pregnancy or perimenopause. The trying-to-conceive mode is offered in the United States only.
• About you. What you choose to tell the app about yourself: conditions you mark, your birth control method, your goals, how many children you have and when you last gave birth, whether you are breastfeeding, your height, your stress, how you train, night shifts and time-zone travel, your age range, and the medicines you list. Every answer is optional.
• Notes. Text notes, voice notes and their transcripts, and attachments such as a lab report or a photo. A voice note's transcript is written on your phone by its own speech recognition, unless you turn on AI transcription (4.1b).
• Lab results. The results you save on a note: the test, the value and unit, the lab's reference range and flag, and the date. You type them yourself, or have them copied with AI from a lab report you send (4.1c), and the app notes which.
• Birth details for the readings. Birth date, birth time and birth place (the city, its time zone and its coordinates). A name, if you type one.
• Ask MoonCycle. Your conversations and your signed authorization (its version, your initials, the day you signed, the day it ends and your four switches), and, while "Read my notes" is on, the summaries of your older notes (4.1).
• Settings and choices. Your reminders, your settings, and a record of which consents you gave and when.

The app works out your predictions, your readings (astrology, numerology, Human Design, BaZi and the birth moon) and your reports on your phone. Reminders are scheduled on your phone; we run no push server.

Your backup file (Settings > Export) contains your log, your notes, the lab results saved on them, what you told the app about yourself and your settings. On Android, MoonCycle opts out of Google's automatic cloud backup, so your data is not copied to Google Drive. On iPhone, MoonCycle keeps its data out of iCloud backups. If you delete the app, its data is deleted with it.

The medicines you list go only into the doctor PDF, which you create and share yourself. They are never sent anywhere by the app.

4. When data leaves your phone

Data leaves your phone only in the cases below. Each one starts with your choice.

4.1 AI features (off until you turn them on)

The AI features are part of MoonCycle Plus. They are offered in the United States only, to people 18 and over. Your request goes to our relay at ai.kamalov.systems, which passes it to OpenAI at api.openai.com.

The AI switch (Settings) controls three features. With it off, they send nothing.

• Daily AI note. Today's cycle phase and the language of the note. While your readings are in your cycle notes, also today's moon phase and your sun sign.
• The analysis in your report. These figures:
  • how many cycles and days you have logged;
  • your cycle length average, middle value, range and spread, and how regular it is;
  • your average period length;
  • a summary of your temperature readings (how many, how many cycles show a temperature shift, and the length of the phase after it);
  • the names of symptoms you logged often enough to show a pattern, with the phase they cluster in;
  • the app's plain-language observations, including any marked "worth raising with a clinician", and how many days a logged pill was taken or missed;
  • today's cycle day and phase, and today's moon phase;
  • while your readings are in your cycle notes: your sun and moon signs, your numerology life path number, and your Human Design type, authority and profile.
• The five-system reading. Your sun sign, its element and your moon sign; your numerology number; your Human Design type, authority and profile; your BaZi day master and element balance; the moon phase at your birth; how they relate; and today's cycle phase. Together these labels can point back to your birth date.

These three never send your name, your birth date, your logged days or their dates, your moods, your notes, or your mode.

AI transcription (4.1b) and copying lab results (4.1c) also work only while the AI switch is on.

Ask MoonCycle sends only after you sign its own authorization, and you can withdraw it at any time in Settings. Each time you ask, it sends:

• your question and the last few messages of the chat;
• today's date;
• your age range, such as 30 to 34;
• a code our relay makes for your copy of the app. The relay changes the code it gives OpenAI every month, so OpenAI can spot misuse without knowing who you are.

Your question is first checked by OpenAI's safety filter. Only if you switch it on, it also sends:

• "Read my log": today's cycle day and phase, your period start dates and cycle lengths, your averages, your next predicted period, and the symptoms, moods, stress levels, spotting, heavy days and low-energy days you logged, each with its date.
• "Read my notes" (only together with "Read my log"): your notes and their dates, with the lab results saved on them, newest first, and the summaries of your older notes (below).
• "Use what I shared in About you": your birth control method, the conditions and goals you chose, how many children you have and how long ago you last gave birth, whether you are breastfeeding, your stress, training, night-shift and travel answers, and the weights you logged in the last year.
• "Include my readings" (offered only while your readings are in your cycle notes): your sun and moon signs, your Human Design type, authority and profile, your BaZi day master and your birth moon. These can point back to your birth date.

Summaries of older notes. While "Read my notes" is on, Ask MoonCycle reads your older notes as summaries, one for each month. To make a month's summary, the notes of that month, with their dates and the lab results saved on them (each result's test, value and unit, the lab's range and flag, and its date), are sent through our relay to OpenAI once, and again whenever you change or delete one of them. OpenAI writes the summary, which is kept on your phone and sent in place of those notes. MoonCycle leaves out of it anything it finds about wanting to get pregnant, or to avoid or end a pregnancy. Summaries are made only while you have MoonCycle Plus with the AI switch and "Read my notes" on, and only from your notes, never from your chats. You can read them in Settings, under Ask MoonCycle. Changing or deleting a note deletes its month's summary until a new one is made. Turning "Read my notes" off, turning "Read my log" off or withdrawing the authorization deletes them all, and so does Settings > Delete all data.

Whatever you type is sent, even about sex, pregnancy, abortion, birth control, medicines or your mental health. Email addresses, phone numbers and links are removed on your phone before sending.

Never sent by any AI feature, except where you say or type it yourself in a voice note you send for AI transcription (4.1b), a question to Ask MoonCycle or a note it reads, or where it is printed on a lab report you send and left uncovered (4.1c): your name, your birth date, your mode, your height, the medicines you list, the sex, pill, temperature and cervical mucus entries in your daily log (the report's pill count above is the one exception), or anything that came from Health Connect. If you marked an eating disorder, it is not sent and neither is your weight: MoonCycle only tells the AI not to talk about weight.

Our relay. The relay runs on the network of Cloudflare, Inc. It passes the request to OpenAI and the answer back to you. It keeps no request or answer, with one exception: if you tap "Report this answer", it keeps your question, that answer, the reason you chose and the time, for 90 days, so we can check what went wrong. Only Fittcoaching LLC and the people at Kamalov Systems named in our contract can read reports. To stop abuse the relay counts requests per network address: a per-minute count is deleted after 2 minutes and a per-day count after 48 hours. It also keeps daily totals with no address in them. It reads the country of your network address, at the moment of the request and without keeping it, to refuse countries where OpenAI does not offer its service. It does not pass your IP address to OpenAI. Cloudflare, Inc. runs the network the relay uses, under Cloudflare's data processing addendum.

OpenAI. OpenAI OpCo, LLC (United States) runs the AI model. It processes requests for us under its services agreement and data processing addendum. OpenAI may use what it receives only to provide its service to us, to follow the law, to enforce its usage policies and to prevent abuse. It does not train its models on it. It keeps API requests in abuse-monitoring logs for up to 30 days, or longer if the law requires it or if that is reasonably needed to protect its services or other people from harm. Its staff may review requests its systems flag. Read OpenAI's API data policy at https://developers.openai.com/api/docs/guides/your-data before you turn the AI features on.

We pay OpenAI to write the text, and we receive nothing for your data.

If you turn an AI feature off or withdraw the Ask MoonCycle authorization, the app stops sending at once. What OpenAI already received is kept under the policy above. We cannot recall it.

4.1b AI transcription of voice notes (off until you turn it on)

Your phone writes a voice note's transcript itself, with its own on-device speech recognition, and the recording stays on your phone. With MoonCycle Plus and the AI switch on, you can choose AI transcription instead: the app asks the first time you record, and you can turn it off in Settings, under AI. While it is on, the recording of each voice note goes through our relay at ai.kamalov.systems to OpenAI at api.openai.com, which writes the transcript and sends it back. Only the app's language goes with the recording, to help with the transcript. A recording can contain anything you said, including health details.

Our relay passes the recording on and keeps nothing. OpenAI handles it under the same terms as the AI features above: it does not train its models on it and keeps it for up to 30 days, or longer where the law requires it or to protect people from harm. We do not create a voiceprint or any other identifier from your voice.

4.1c Copying lab results with AI (only when you send a report)

You can keep the results of a lab test on a note. Typing them yourself sends nothing. With MoonCycle Plus and the AI switch on, and once you have signed the authorization that lists lab reports, you can instead send a lab report to have its results copied:

• Covering first. Before anything is sent, your phone looks for your name, your birth date and ID numbers on each page, with text recognition that runs on the phone and sends nothing, and covers what it finds. It cannot find everything. You see each covered page and can cover more by hand. Anything you leave uncovered is sent.
• What is sent. Pictures of the pages you choose, with the covers burnt in. A PDF is turned into pictures on your phone first. The original photo or PDF, its file name, the photo's details (such as when and where it was taken), your note and the rest of your data in the app are not sent. Your original stays on your phone as you attached it.
• Where it goes. Through our relay at ai.kamalov.systems to OpenAI at api.openai.com, each time you send a report. OpenAI copies each result it can read: the test, the value and unit, the lab's reference range and flag, and the date. It does not say what a result means.
• You check before saving. The app shows the copied results. You can correct, remove or add rows, and only the rows you confirm are saved. You can change or delete a saved result later.
• Where results are kept. On your phone, on the note. They show on the note and in the doctor PDF you create. Ask MoonCycle sends them to OpenAI with your notes only while "Read my notes" is on (4.1).

Our relay passes the pages to OpenAI and the copied results back to your phone, and keeps nothing. OpenAI handles them under the same terms as the AI features above: it does not train its models on them, and it keeps them for up to 30 days, or longer where the law requires it or to protect people from harm.

Deleting a note deletes the reports attached to it and the results saved on it. Deleting a report deletes the results that came from it. Settings > Delete all data erases them all. What OpenAI already received is kept under its policy above.

4.2 Online city lookup (off until you turn it on)

To find your birth place, the app first searches a list of cities built into the app. If you turn on "Find more towns online", the letters you type are also sent to the Open-Meteo geocoding service at geocoding-api.open-meteo.com. Open-Meteo also receives your IP address and the app name. It returns matching places with their coordinates and time zone. Open-Meteo says it deletes its logs after 90 days. Its terms are at https://open-meteo.com/en/terms.

4.3 Health Connect (Android, optional)

If you connect Health Connect, MoonCycle can write the days you logged and read days from other apps. It covers five types of data: period and flow, bleeding between periods, cervical mucus, basal body temperature and sexual activity. Health Connect lets the app read the last 30 days. Data read from Health Connect stays on your phone. It is never sent to the AI provider, our relay or anyone else, and neither is anything worked out from it. You can disconnect in Health Connect at any time.

4.4 Partner sharing (optional)

When you share with a partner, the app makes a private link. It encrypts the shared data on your phone (AES-256-GCM) before it leaves. The decryption key is part of the link after the "#" sign. Browsers never send that part to a server, so our share relay stores only encrypted data that it cannot read.

You choose what to include:

• the name you type;
• today's date and your next expected period;
• your cycle length and how much it varies;
• for up to 120 days: the phase, cycle day, and whether it is a period day or a fertile day;
• if you choose, mood, energy and symptoms.

Anyone with the link can see what you shared.

The share relay runs on Cloudflare. It deletes the encrypted data 60 days after your last update, or when you stop sharing. After a deletion it keeps a short record, with no shared data in it, for 30 days so the link cannot be reused. It checks IP addresses to limit abuse but does not store them.

4.5 Purchases

MoonCycle Plus is sold through Google Play (and, when the iPhone app ships, the App Store), as a monthly or yearly plan or once as Plus for life. Google or Apple processes your payment. On your phone, the app receives from the store whether you have a MoonCycle Plus plan or Plus for life, whether it is paid, still pending or on hold, whether a plan renews, when you bought it, and the store's purchase token for it. When you buy on this phone, the app also keeps a note of which plan you chose. We never receive your card details, your billing address or your name. If we ever check a purchase on a server, only the purchase token goes there.

4.6 Contacting us

If you email or call us, we receive your email address or phone number and what you tell us.

4.7 Exports and backups you make

You can export a backup, a spreadsheet or a PDF report (including the doctor PDF) and send it wherever you choose. These files are not encrypted. Once a file leaves the app, whoever holds it controls it.

4.8 App stores

Apple and Google may give us summary statistics and crash reports from users who allowed that in their phone settings. Those reports do not include your cycle data. Apple's and Google's privacy policies cover them.

When you first open MoonCycle, the app asks Google Play (and, on iPhone, Apple) for the age range your account shares, if it shares one. The app uses it only to keep MoonCycle to people 18 and older. It keeps only whether the range was under 18, never the range itself, and sends nothing about it anywhere. Where the law has app stores confirm ages and Google Play has not confirmed yours yet, the app asks you to confirm it in Google Play first.

5. How we use data

We use data only to run the features you choose:

• to show predictions, readings and reports;
• to write AI text and answer your questions when you ask;
• to sum up your older notes for Ask MoonCycle, while "Read my notes" is on;
• to transcribe a voice note or copy a lab report, when you send it;
• to check AI answers you report;
• to find your birth place;
• to keep a shared link working;
• to know whether you have MoonCycle Plus;
• to send you subscription reminders as notifications from the app;
• to answer you when you contact us;
• to protect our servers from abuse.

We do not use your health data for advertising or marketing. We do not build profiles about you. We do not sell your data. We do not share it for advertising.

We do not track your location, and we do not use geofences.

6. Legal bases (EU, EEA, UK and Switzerland)

If the GDPR or the UK GDPR applies to you, we rely on these legal bases:

• Your explicit consent for health data you choose to send off your phone, including to our AI provider. You can withdraw it at any time; that does not affect what happened before.
• Our contract with you to provide the app and any purchase.
• Our legitimate interest in keeping our servers safe, for the network-address counters.

In this version the AI features are offered in the United States only. If they are offered elsewhere later, requests go to OpenAI OpCo, LLC in the United States under the standard contractual clauses in OpenAI's data processing addendum, through Cloudflare, Inc., which relies on the EU-US Data Privacy Framework and standard contractual clauses in its addendum, and through Kamalov Systems under our contract.

7. How long data is kept

8. Security

• Your data is kept in the app's private storage on your phone, which other apps cannot read.
• Network connections use HTTPS.
• Shared data is encrypted on your phone, and the key never reaches our server.
• The AI relay keeps no content except reported answers, which only named people can read.
• Only the people named in our relay contract can reach the relay's settings and its reports, and only our staff can read our mailbox.
• Service providers work for us under written contracts.

No system is perfectly secure. Use a screen lock on your phone; it protects your data more than anything we can do.

9. Data breaches

If a breach affects your data, we will tell you without undue delay. We will also tell the authorities the law requires us to tell, such as the US Federal Trade Commission and state attorneys general. We have no email address for most users, so we also post the notice on our website and in the app. Where the GDPR or the UK GDPR applies, we tell the data protection authority within 72 hours where feasible, unless the breach is unlikely to put you at risk.

10. Requests from law enforcement and governments

We keep no readable cycle data on any server, so we have none to hand over. Our relay keeps no AI content except reported answers for 90 days. Our share relay holds only data it cannot decrypt.

If we receive a legal demand for data, we will:

• require valid legal process;
• push back on demands that are too broad;
• tell you before we disclose, unless the law forbids it.

We will not voluntarily give anyone data about reproductive health care.

Data you sent to OpenAI is held in the United States under the retention rules in section 4.1.

11. Children

MoonCycle is for people 18 and older. Where Google Play or Apple shares an age range under 18, the app stops at the first screen. We do not knowingly collect data from children. If you believe a child has sent us data, email bertbertov@gmail.com and we will delete it.

12. Your rights

Wherever you live, you can ask us to:

• tell you what data we hold about you and who we shared it with;
• give you a copy;
• correct it;
• delete it;
• withdraw a consent.

Because your cycle data is on your phone, you can also do most of this yourself:

• Copy: Settings > Export.
• Delete everything: Settings > Delete all data. Deleting the app has the same effect.
• Withdraw consent: turn the feature off in Settings, or withdraw the Ask MoonCycle authorization there.

How to ask. Email bertbertov@gmail.com. Someone you authorize may ask for you. We may need to confirm the request came from you. We answer within 30 days. If a request is complex, we may take up to 45 more days and will tell you why. If you live in Nevada, we delete within 30 days after confirming the request is yours. Requests are free.

What we can delete. We can delete your emails to us and any report you sent. We can delete shared data, which you can also delete yourself by stopping the share. We pass your request on to the companies that received your data for us. Requests reach OpenAI with no name or account attached to them, so OpenAI cannot find one person's requests; its logs delete themselves within 30 days, except where the law or harm prevention requires longer.

Appeals. If we turn down your request, you can appeal by replying with the word "Appeal". We will decide within 45 days. If we turn down the appeal, you can complain to your state attorney general. In Washington, that is the Attorney General's Office at atg.wa.gov.

EU and UK. You can also object to processing, ask us to restrict it, and complain to your data protection authority.

We will not treat you differently for using your rights.

13. Notices for US states

• Washington, Nevada and Connecticut. Our Consumer Health Data Privacy Policy at https://mooncycle.kamalov.systems/health-data gives the details these states require.
• California. We collect the categories in sections 3 and 4. They include sensitive personal information about health, which we use only to provide the features you ask for. We do not sell personal information. We do not share it for cross-context behavioral advertising. Before any AI feature sends medical information, the app asks for your signed authorization.
• Connecticut. We do not collect, use or sell personal data to train large language models.
• Virginia. We obtain or disclose reproductive or sexual health information only with your consent.
• Other states. The rights in section 12 apply to you as well.

14. Changes to this policy

If we change what the app collects or sends, we update this policy before the change ships. We change the effective date at the top. For an important change, we tell you in the app before it applies. A new use of health data needs your consent first.

15. Contact

Fittcoaching LLC, 7654 19th St W, Tacoma, WA 98466-3615, United States
Phone: +1 253-255-8369
Email: bertbertov@gmail.com