Publish this at a public URL (GitHub Pages, Notion, Carrd) and paste that URL into App Store Connect. Replace the bracketed placeholders before publishing.

---
Privacy Policy for Eva Cycle

Last updated: 6 August 2026

Summary

Eva Cycle does not collect, transmit, or store your personal information on any server. There are no accounts, no cloud sync, and no analytics. Everything you record stays encrypted on your device. We
— the developers — cannot see your data, and neither can anyone else.

1. Who we are

Eva Cycle ("the app") is developed and published by [Your legal name or company name] ("we", "us"). You can contact us at [sang89vh@icloud.com].

2. What data the app stores

Eva Cycle stores the following only on your device:

- Cycle records — period start and end dates, and calculated cycle lengths.
- Daily entries — menstrual flow intensity, mood, cervical mucus observations, basal body temperature, pain level, free-form notes, and, if you explicitly enable it, intercourse and protection status.
- Preferences — your average cycle and period length, chosen language, reminder settings, and whether the biometric lock is enabled.
- Purchase status — a single flag recording whether you have bought the lifetime unlock.

We never receive any of this. It is not uploaded, backed up to our servers, or shared with third parties, because no such servers exist.

3. How your data is protected

- Encryption at rest. All data is stored in a SQLCipher database encrypted with AES-256.
- Device-bound key. The encryption key is generated on your device and held in the iOS Keychain. It is not included in device backups and cannot be extracted or transferred to another device.
- Biometric lock. You may optionally require Face ID or Touch ID before the app will open.
- Emergency erase. A single control in Settings permanently deletes all data and destroys the encryption key. This action cannot be undone.

4. Network activity

Eva Cycle makes no network requests to transmit your health data — ever. The app has no analytics SDK, no advertising SDK, no crash reporting, and no telemetry.