Last updated: 21 May 2026
CycleBox ("the app", "we") is published by Lumenly. This privacy policy explains what information we collect when you use CycleBox, why we collect it, and your choices. It is written in plain English by design.
Everything you enter — cycle entries, mood, symptoms, notes, name (if you provided one), birth year, settings — is stored locally on your device only. We do not have access to it. We have no servers that store this data.
If you turn on the iCloud sync toggle in Settings, your data is replicated through Apple's iCloud private database. This is end-to-end encrypted by Apple. Lumenly never sees your data; not even Apple does. You can turn iCloud sync off at any time, which stops further syncing — local data remains intact.
If you turn on Apple Health sync, CycleBox can read your existing menstrual cycle data from Apple Health and write new entries you log into it. This permission is granular and you control which data types in iOS Settings → Health.
If the app crashes, Apple may collect anonymous crash logs to send to us. This is governed by Apple's privacy policy and you control it in iOS Settings → Privacy → Analytics & Improvements.
CycleBox is rated 12+ and is not directed at children under 13. We do not knowingly collect any data from children under 13. The app does not collect personal data from anyone.
If you are in the EU/UK, Brazil, India, or California: under GDPR / LGPD / DPDP / CCPA, you have the right to know what data we hold about you (which for CycleBox is: nothing personally identifying) and to request deletion. Since we don't hold personal data, there's nothing to delete on our side — uninstalling CycleBox removes all your local data.
Material changes will be announced in the app's "What's New" section before they take effect.