Cycle Decoded Her Portal
Privacy Policy
Last updated: [DATE]
This policy explains what [BUSINESS LEGAL NAME] ("we", "us") collects when you use Cycle Decoded Her Portal (the "Portal") at herportal.cycledecoded.com, and what we do with it.
1. Information that stays on your device (we never receive it)
Your name as you enter it, journey stage, cycle dates, check-in answers, habits, water and sleep logs, energy, mood and stress ratings, body notes, support people, practice ratings, decisions and personal notes are stored only in your browser's local storage on your device. They are not sent to us or to anyone else. You can download them ("Download my data") or erase them ("Erase all my data on this device") at any time from My Profile.
2. Information we do receive
- Purchase information. When you buy access, our payment processor Stripe collects your email address, name, payment card details and billing information. We receive your email address and confirmation that you paid. We never see or store your full card number. Stripe handles payment data under its own privacy policy.
- Sign-in requests. If you use "Email me a sign-in link," we check your email address with Stripe to confirm a purchase and send you a one-time link by email.
- Access cookie. After you sign in, we place one cookie on your device that proves you have access. It contains your email address and an expiry date, is digitally signed, and is strictly necessary for the Portal to work. We do not use advertising or analytics cookies in the Portal.
- Server logs. Our web host, Hostinger, automatically records basic technical information, such as IP address, browser type and the pages requested, for security and operations. [Confirm Hostinger's log retention period.]
Because you bought a fertility-focused program, your email address and purchase could suggest an interest in fertility. We treat that information as sensitive and use it only as described here.
3. How we use it
- To give you access, confirm purchases, send sign-in links and handle refunds.
- To answer your messages.
- To keep the Portal secure and prevent misuse, such as shared access.
- To meet legal, tax and accounting obligations.
[If you plan to add clients to a newsletter, say so here and get separate consent. As written, we do not use your email for marketing.]
4. What we don't do
- We do not sell or rent your personal information.
- We do not share it for advertising.
- We do not collect your health entries. They never leave your device.
5. Who else processes it
- Stripe, for payments.
- Hostinger, for website hosting and sending sign-in emails.
Fonts are hosted on our own site, so loading the Portal does not contact Google or other font services. Library articles link to cycledecoded.com, which has its own [link to your website's privacy policy].
6. How long we keep it
Purchase records are kept as long as needed for your access and for tax and accounting law (often up to 7 years). Your access cookie expires after one year. Your on-device data stays until you delete it.
7. Your rights
Depending on your state, you may have the right to know what personal information we have about you, to get a copy, to correct it, or to ask us to delete it. Some states, including Washington under its My Health My Data Act, give specific rights over consumer health data. To make a request, email hello@cycledecoded.com. We'll respond within the time the law requires and won't treat you differently for asking. Some records (such as purchase records we must keep for tax purposes) may be kept even after a deletion request, as the law allows.
8. Security
The Portal uses encrypted connections (HTTPS), signed access cookies and one-hour sign-in links. Because your entries live on your device, their security also depends on your device. Use a passcode and keep your backups somewhere safe.
9. Children
The Portal is for adults 18 and older. We do not knowingly collect information from anyone under 18.
10. Changes
If we change this policy, we'll update the "Last updated" date and note important changes on the sign-up page.
11. Contact
[BUSINESS LEGAL NAME]
[MAILING ADDRESS]
Email: hello@cycledecoded.com