Privacy Policy

1 The Short Version

cyclyn stores your account and tracking data in a secure cloud database so it syncs across your devices, whether you use iPhone or Android. Only you can access your data. We never sell it, never use it for advertising, and never share it with anyone except the service providers that run the app.

• •You need an account to use cyclyn. You can sign up with email, Apple or Google.
• •Your protocols, dose logs, vial photos, blood test files and notes are stored in our cloud database so they follow you across devices.
• •Database rules ensure each account can only ever read its own records.
• •The app does not use third-party analytics, ad networks, ad SDKs or tracking tools.
• •To decide which compounds to add to the built-in library, the app counts which compounds people add. That count is anonymous: it never includes your name, email, account ID or doses.
• •We do not sell or rent your personal information or health data. Ever.
• •Payments are handled by Apple (App Store) or Google (Google Play), and subscription status is managed by our billing provider, RevenueCat. We never see your card details.
• •You can delete your account and all of its data at any time, in the app or from our website.

The rest of this policy explains each point in detail.

2 Who We Are

cyclyn ("cyclyn," "we," "us" or "our") is a mobile app for tracking peptide, GLP-1 and hormone protocols, available for iPhone on the Apple App Store and for Android on Google Play. It is developed and published by Danhoff Dynamics LLC, an Ohio limited liability company. Danhoff Dynamics LLC is the developer named on our App Store and Google Play listings and is responsible for your information under this policy. This policy applies to the cyclyn app, our website and our support channels.

By creating an account or using cyclyn, you agree to this Privacy Policy. If you don't agree, please don't use the app.

Privacy contact: you can reach us about anything in this policy at [email protected] or by mail at Danhoff Dynamics LLC, Morrow, OH.

3 Information We Collect

We collect information in three ways: directly from you when you create an account and use the app, from Apple or Google if you choose to sign in with them, and automatically when the app connects to our servers.

3.1 Account information

If you use Sign in with Apple and choose "Hide My Email," we receive a private relay address instead of your real email. If you use Sign in with Google, Google may also share your profile picture, but we don't store it. We never receive your Apple or Google password, and we don't access your contacts, Gmail, Drive, calendar or any other Google or Apple data.

3.2 Health and tracking information

This is the information you choose to enter to use the app. Because it can describe medication use and health, we treat all of it as sensitive health information.

• •Compounds and medications you track, including injectables, prefilled pens and oral pills, and custom compounds you create
• •Item details: how it's taken, amounts, diluent volume, pills per bottle and mg per pill, reconstitution and expiration dates, batch numbers, notes
• •Schedules and cycls: dosing patterns, start and end dates, dose times
• •Dose logs: taken, skipped or rescheduled status, actual dose, time taken, injection site, notes
• •Blood test files (PDFs or images) and the dates, labels and notes you add to them
• •Photos of vials, pens or bottles
• •Reminder preferences, such as lead time and quiet hours
• •Weights you enter yourself, with the date you weighed in (Premium)

3.3 Technical information

When you sign in or sync, our hosting provider automatically processes basic technical data such as your IP address, device and app version, and timestamps. This is used to keep your session secure, prevent abuse and troubleshoot problems. We do not use it to profile you or track you across other apps or sites.

Our website, cyclyn.co, uses essential cookies to work. If you click Accept on the cookie banner, it also uses GoDaddy's website analytics to count visits and see which pages are viewed. This applies only to the website, not the app. We don't use advertising cookies on the site, and you can click Decline to turn analytics off.

3.4 Apple Health and Health Connect (optional)

If you have Premium and choose to connect Apple Health (iPhone) or Health Connect (Android), cyclyn asks for permission to read two types of data: weight and body fat percentage. We use them for one purpose: to show your weight on a chart next to your doses and dose changes inside the app.

• •cyclyn only reads this data. It never writes, changes or deletes anything in Apple Health or Health Connect.
• •Data read from Apple Health or Health Connect is shown on your device and is not uploaded to our servers or stored in your cyclyn account.
• •We never use it for advertising or marketing, never sell it, and never share it with anyone, including our service providers.
• •It is not used to make decisions about you, and cyclyn does not give medical advice based on it.
• •You can turn access off at any time: tap Disconnect on the Weight card in cyclyn. On iPhone, also go to Settings > Health > Data Access & Devices > cyclyn. On Android, open Health Connect > App permissions > cyclyn.

Weights you type in yourself are different: they are saved to your cyclyn account so they sync across your devices, like the rest of your tracking data (see 3.2).

cyclyn's use of information received from Health Connect adheres to the Health Connect Permissions policy, including the Limited Use requirements.

3.5 Anonymous compound statistics

When you add an item to My Stack, the app also records, separately from your account, the compound's name, whether it came from the built-in library or was entered by you, and how it's taken (vial, pen or pill). This record has no account ID, name, email, dose, schedule or other details that could identify you, and it can't be linked back to your account. We use these anonymous counts only to decide which compounds to add to the built-in library. They are never sold, shared or used for advertising.

3.6 What we don't collect

• •Your precise or approximate location
• •Your contacts, microphone or browsing activity
• •Your device's advertising identifier
• •Payment card or bank information

4 How We Use Your Information

We use your information only to provide and improve cyclyn:

• •Create and secure your account, and sign you in on your devices
• •Store and sync your protocols, logs, photos and files across your devices
• •Power app features like My Cycl scheduling, the System Level Estimator, adherence stats, reminders and the physician export
• •Decide which compounds to add to the built-in library, using the anonymous counts described in Section 3.5
• •Run your 7-day free trial and unlock the features of your plan
• •Send account emails, such as sign-up confirmation and password resets
• •Respond to your support requests
• •Detect and prevent fraud, abuse and security incidents
• •Comply with legal obligations

What we never do:

• •Sell, rent or trade your personal information or health data
• •Share your information with advertisers or data brokers
• •Use your health data to show you ads, inside or outside the app
• •Track you across other companies' apps or websites
• •Read your health records for any purpose other than running the app or helping you when you ask for support

5 Service Providers We Use

We share information only with the providers we need to run cyclyn. They process it on our behalf, and we require each of them to protect your data with the same or equal protection described in this policy. They may not use it for their own purposes, such as advertising. We don't include any third-party analytics, advertising or tracking SDKs in the app.

We may also disclose information if required by law, subpoena or court order; to protect the rights, safety or property of cyclyn, our users or the public; or as part of a merger, acquisition or sale of company assets. In a sale, your information would stay protected by this policy or one at least as protective, and we would notify you first.

Google user data. cyclyn's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We use the basic profile information Google shares (email and name) only to create and sign in to your cyclyn account.

6 Where Your Data Is Stored and How It's Protected

Your data is stored with Supabase on servers located in the United States. We protect it with:

• •Encryption in transit (HTTPS/TLS) between the app and our servers
• •Encryption at rest on our provider's infrastructure
• •Row-level security rules in the database, so every record is tied to your account ID and can only be read or changed by you
• •Private file storage for vial photos and blood tests, organized by account and never publicly accessible
• •Your sign-in session is kept in the app's private, sandboxed storage on your device, which other apps can't read
• •Access to production systems limited to the people who need it to operate and support cyclyn

No system is 100% secure, and we can't guarantee absolute security. If we learn of a breach that affects your personal information, we will notify you and the authorities as required by law.

7 Permissions, Notifications and Lock Screen Visibility

cyclyn only asks for a permission when you use the feature that needs it. You can change these anytime in your iPhone's Settings app, or on Android in Settings > Apps > cyclyn > Permissions.

cyclyn does not request access to your microphone, location, contacts or calendar, and blocks Android's microphone and "display over other apps" permissions entirely. It only asks for Health data (weight and body fat, read-only) if you choose to connect Apple Health or Health Connect.

Reminders are scheduled on your device, not sent from our servers. Your reminder preferences sync to your account so they follow you to a new phone.

Heads up: reminders can show the compound name, dose and vial batch number. Depending on your settings, that may be visible on your lock screen. For more privacy on iPhone, go to Settings > Notifications > cyclyn and set Show Previews to "When Unlocked" or "Never." On Android, go to Settings > Notifications > Notifications on lock screen and choose to hide sensitive content.

8 Free Trial, Subscriptions and Purchases

Every new account starts with a 7-day free trial of Premium. No payment information is needed to start it. We use your sign-up date to know when the trial ends, and after that your account moves to the free plan unless you subscribe. From time to time we may also give someone early or beta access to Premium for a set period. That access ends on its own date, and we store only the end date on your account.

Premium is available as a monthly or annual auto-renewing subscription, purchased through the Apple App Store on iPhone or Google Play on Android. Apple or Google processes your payment under its own privacy policy, and we never receive your card number or billing address.

We use RevenueCat to confirm purchases with Apple and Google and keep track of your subscription. When you sign in, the app links your RevenueCat record to your cyclyn account ID (not your name or email), so Premium follows you to any device you sign in to.

To manage or cancel a subscription on iPhone, go to Settings > [your name] > Subscriptions. On Android, open the Google Play Store, tap your profile icon, then Payments & subscriptions > Subscriptions. Subscriptions renew automatically unless you cancel at least 24 hours before the end of the current period. Deleting the app or your cyclyn account does not cancel a subscription, so cancel it through Apple or Google first.

9 Exports, Retention and Deleting Your Account

Exports

Premium members can export an Excel report of their cycls, doses and adherence, for example to share with a physician. The file is created on your device and handed to your phone's share sheet. Once you send it somewhere, it's handled by that app or person under their own privacy practices, and we can't recall it.

Retention

We keep your account and data for as long as your account is active. If you're inactive for 24 months, we may contact you and then delete the account.

Deleting your account

You can delete your account and all of its data at any time:

• •In the app: go to Profile, scroll to Account and tap Delete account. To confirm, type DELETE and tap the delete button. You'll be signed out as soon as it's done.
• •On the web, without the app: visit cyclyn.co/delete-account or email [email protected] from the address on your account. We'll confirm the request came from you, then delete the account within 30 days.

Deletion is permanent and can't be undone. It is not a pause, freeze or deactivation. When you delete your account in the app, it happens immediately: your sign-in account is removed, your uploaded photos and blood test files are deleted from storage, and your profile, protocols, cycls, dose logs, weights you entered, custom compounds, reminder settings and subscription status are erased from our active systems. Copies in our provider's encrypted backups are overwritten within 30 days after that.

Deleting your account does not cancel an App Store or Google Play subscription. Cancel it through Apple or Google first (see Section 8).

We may keep a small amount of information when the law requires it or to prevent fraud, such as a record of the deletion request. Apple, Google and RevenueCat keep their own records of purchases you made, which they need for billing, refunds and tax purposes. RevenueCat's record is tied only to an account ID that no longer exists in cyclyn, and you can ask us to have it removed.

Deleting the app from your phone does not delete your account. Signing out removes your session from that device but keeps your data in your account.

10 Your Privacy Rights

Wherever you live, you can:

• •Access and correct your information by viewing and editing it in the app
• •Download your tracking history using the export feature, or request a full copy of your data by email
• •Delete your account and data as described in Section 9
• •Withdraw consent by deleting your account, which stops all processing

Consumer health data. Some U.S. states, including Washington (My Health My Data Act), Nevada and Connecticut, give extra protection to health-related data. The health and tracking information described in Section 3.2 is consumer health data. We collect it only to provide the features you use, we process it only with your consent given when you create your account and enter it, and we do not sell it or share it with third parties other than the service providers in Section 5. You can request access to, or deletion of, your consumer health data at any time.

California and other state laws. Residents of California and other states with comprehensive privacy laws may have additional rights, including the right to know what we collect and the right to opt out of the sale or sharing of personal information. We do not sell or share personal information as those laws define it, and we do not use sensitive personal information to infer characteristics about you.

EU and UK users. If you're in the EU or UK, we process your data to perform our contract with you (providing the app) and, for health data, based on your explicit consent. You may also object to processing and lodge a complaint with your local data protection authority.

To make a request, email [email protected] from the address on your account. We'll respond within 45 days, or sooner where the law requires. We won't discriminate against you for exercising your rights.

11 Children, Medical Disclaimer and Your Responsibilities

Age requirement

cyclyn is for adults 18 and older. We don't knowingly collect information from anyone under 18. If we learn that we have, we'll delete the account.

Not medical advice

cyclyn is an informational tracking tool. The compound library, reconstitution calculator and System Level Estimator are for organization and reference only. They are not medical advice, diagnosis or treatment. Always talk to a qualified healthcare provider before starting, stopping or changing any protocol.

HIPAA

cyclyn is a consumer app, not a healthcare provider, health plan or business associate, so HIPAA generally doesn't apply. We still protect your information as sensitive health data, as described in this policy.

Your part

You can help keep your data safe by:

• •Using a strong, unique password, or signing in with Apple or Google
• •Using a passcode, Face ID or Touch ID on your phone
• •Signing out on devices you share or no longer use
• •Telling us right away at [email protected] if you think someone accessed your account
• •Being careful about who you send exports to

We're not responsible for access that results from a shared or compromised password, a lost or unlocked device, or files you choose to share outside the app.

12 App Store and Google Play Disclosures

This section summarizes how cyclyn meets Apple's and Google's privacy rules. It matches the App Privacy details on our App Store listing and the Data safety section on our Google Play listing.

Health data. Information you log in cyclyn is health information. We do not use it or share it for advertising, marketing or data mining. We do not use it for health research. We do not store your health information in iCloud. If you connect Apple Health or Health Connect, the weight and body fat data read from those services is displayed on your device only and is not uploaded to our servers. The only exception is the anonymous compound count in Section 3.5, which is not linked to you.

No tracking. We do not track you across other companies' apps or websites, we do not use your device's advertising identifier, and none of your data is used for third-party advertising.

Data we collect, by store category:

Data sharing. We don't share your data with third parties as Google Play defines it. Transfers to the service providers in Section 5, which process data only on our behalf, aren't considered sharing.

Security. All data is encrypted in transit. You can request deletion of your data anytime, in the app or on the web (Section 9).

13 Changes to This Policy and Contact Us

Updates. We may update this policy as cyclyn grows. When we do, we'll change the effective date at the top. For significant changes, especially any new use or sharing of health data, we'll notify you in the app or by email and ask for your consent where the law requires it.

Contact. Danhoff Dynamics LLC, Morrow, OH · [email protected]