Privacy Policy

Last updated: September 20, 2026

Velvet Cycle ("we", "our", "the app") is a period and cycle tracking app. This page explains what information the app collects, how it's used, and the choices you have. We built Velvet Cycle to work fully offline on your device, and we only store what's needed to make the app work for you.

1. Information we collect

Velvet Cycle collects the following information, which you provide directly by using the app:

• Cycle profile — your last period start date, average cycle length, average period length, cycle regularity, any symptoms or health conditions you choose to record, what you use the app for (tracking, trying to conceive, or pregnant), and an optional due date.
• Daily logs — mood, symptoms, spotting, flow, sexual activity, basal temperature, water, sleep, medication taken, ovulation test results, and notes for the days you log.
• Account information — the app creates an anonymous account for you automatically. If you choose to sign in with Google, Apple, or email, we receive the basic profile information (such as name and email) that Google or Apple shares with us for authentication purposes.
• Subscription information — if you buy Velvet Premium, the App Store or Google Play processes the payment. We and our subscription provider, RevenueCat, receive your subscription status and purchase details, linked to your app user ID. We never receive your card or payment details.
• Apple Health / Health Connect (optional, off by default) — if you tap Import, the app reads your menstrual-flow entries from Apple Health or Health Connect once and saves them as period days in your Velvet log. If you turn on “Save period days to Health”, the days you log are written to that health store. Nothing is sent to us or anyone else by this feature, and you control access in your device’s Health settings.
• Partner sharing (optional, off by default) — only if you create an invite code and a partner enters it, that partner can see a small summary of your cycle: your cycle day, phase, expected period date, and fertile window. They never see your logs, moods, symptoms, notes, or any other detail, and they cannot change anything. You can remove a partner or stop sharing at any time in Profile > Partner sharing, and the summary is deleted when you stop.
• Usage statistics (optional, off by default) — only if you turn on “Share usage statistics” in Profile > Privacy, anonymous app events (for example that a log was saved or the Premium screen was opened) are collected through Firebase Analytics. This never includes what you log, your cycle data, dates, or notes. You can turn it off at any time.
• Diagnostic data — basic crash and performance data collected automatically via Firebase Crashlytics, used only to identify and fix bugs.
• Push notification token — if you enable reminders, a device token is used via Firebase Cloud Messaging to deliver notifications to your device.

2. How your data is stored

Velvet Cycle is offline-first: your cycle and log data is stored locally on your device first, so the app works without an internet connection. When you're online, this data automatically syncs to your private account in Google Cloud Firestore (part of Firebase, operated by Google), so it's backed up and available if you sign in on another device.

Your data is stored under your unique, private user ID and is not accessible to other users. Access is enforced by Firestore security rules, which only allow your authenticated account to read or write your own data, with one exception: the developer of the app can access stored data through a restricted admin account, only for support, security, and privacy requests (for example, deleting your data when you ask).

3. How we use your information

• To provide core app functionality: logging entries, showing your cycle phase, and predicting your next period and fertile window.
• To sync and back up your data across sessions and devices.
• To send optional reminder notifications, if you enable them.
• To manage your Velvet Premium subscription and restore it on a new device.
• To diagnose and fix crashes or bugs.

We do not use your cycle or health data for advertising, and we do not sell your data to third parties. We do not share it with anyone except the service providers listed below, who process it on our behalf, and a partner you choose to invite, who sees only the small summary described above.

4. Third-party services

Velvet Cycle uses the following third-party services to operate the app:

• Firebase Authentication — manages sign-in (anonymous, Google, and Apple).
• Cloud Firestore — stores your cycle profile and daily logs.
• Firebase Analytics — optional anonymous usage statistics, only if you opt in.
• Firebase Crashlytics — collects crash and diagnostic reports.
• Firebase Cloud Messaging — delivers optional reminder notifications.
• RevenueCat — manages subscription status across the App Store and Google Play.
• Apple and Google — process purchases and, if you choose, sign-in.

These providers may process data on servers outside your country. You can review Google's privacy practices at policies.google.com/privacy and RevenueCat's at revenuecat.com/privacy.

5. Your choices and rights

• You can edit or delete any cycle profile or log entry directly within the app at any time.
• You can disable notifications at any time from your device settings or within the app.
• You can delete your account in the app: Profile → Delete Account. This permanently deletes your cycle profile and logs from our cloud storage and from your device, then removes your sign-in. You need to be online so the cloud copy can be removed too.
• Deleting your account does not cancel a subscription. Cancel it in your App Store or Google Play subscription settings first. Apple, Google, and RevenueCat may keep purchase records as their own policies and the law require.
• You can also contact us to ask questions or request deletion (see below).

6. Data retention

We retain your data for as long as your account is active, so the app can function. When you delete your account, your stored profile and log data are deleted as described above.

7. Children's privacy

Velvet Cycle is not directed at children under 13, and we do not knowingly collect information from children under 13.

8. Changes to this policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated "Last updated" date.

9. Contact us

If you have questions about this Privacy Policy or want to request deletion of your data, contact us at envdotdev@gmail.com.