English

Trial claims and lifetime unlocks use Apple In-App Purchase. The app verifies transactions and the trial deadline on device. Purchase access is not included in Wristlab account archives; iPhone sends only access status and the deadline to its paired Watch, without health content. Claiming or restoring a purchase requires an Apple connection. Existing records remain viewable, exportable and deletable without a purchase or after trial expiry.

After sign-in, this app separately submits Apple-signed purchase evidence for server verification and account association. The server stores the product, original transaction, purchase time, trial deadline, revocation status, Apple storefront, transaction environment and latest verification time to track trial, lifetime purchase and refunds. Buying without sign-in remains available. A historical purchase without an account token belongs to the first account that successfully links it; one transaction cannot be linked to multiple accounts. These records are independent of operator grants, are outside the cycle archive, and contain no health records or notes. Deleting the Hello Cycle account removes its server purchase association, but does not delete Apple's purchase records.

Core commitment: Without sign-in, Hello Cycle records are processed only on your iPhone, paired Apple Watch, and in Apple HealthKit. Full account sync details are available under Data & Privacy in Settings before you choose to sign in. Continuing and successfully completing Sign in with Apple means you agree that the app may contact Wristlab, send the Apple credential and account identifier required for authentication, and automatically merge and sync the limited Hello Cycle archive described below with the selected account over encrypted transport for same-app device sync.

What the app processes on your device

• Entries you make: period dates, flow, blood color, pain, daily emotional and physical states (including custom items), severity, impact on daily life, notes, and other cycle entries you choose to save. An unfilled date is never treated as “no state.”
• Health data you authorize: on first use, the app first explains the on-device purpose of Health data. You may continue to Apple’s system permission sheet or skip; skipping does not affect manual logging or the basic estimate. Only after you continue and allow access does the app automatically read visible Apple Health period history plus up to 420 days of sleeping wrist temperature, resting heart rate, heart-rate variability (HRV; HealthKit uses SDNN), and sleep summaries. It processes them after authorization and refreshes automatically when the app launches or returns to the foreground. It does not use HealthKit background delivery or require a manual import or refresh in Settings. A device from an earlier beta that requested Health access but never confirmed a history import receives the same read-and-sync disclosure once more; automatic period-history import starts only after you continue. Only an older archive with a confirmed non-empty import ledger migrates directly to automatic import. Hello Cycle forms a history-based center from real period records and may form an optional physiology reference from those signals. Before a complete historical signal cycle exists, it shows only a low-confidence, wide preliminary reference after a sustained current wrist-temperature rise; personalization starts after one complete signal cycle. Sleep summaries adjust data quality only. In the estimate layer, recorded bleeding starts may be labeled “more like a new period start,” “more like not a new period start,” or “not enough information to tell,” but the real records are never rewritten. Temporary long-gap calculation boundaries exist only in the on-device derivation.
• Data saved to Health: when you choose to save to Health, only period and flow records you actively enter and authorize are written to HealthKit and managed by Apple’s Health data permissions and storage. Blood color, pain, notes, built-in or custom daily states, severity, and daily-life impact are not written to HealthKit.
• Settings and reminders: display state and necessary configuration stay on device. After Apple sign-in, the two independent reminder choices and automatic-fill preferences may sync with the Hello Cycle archive, while system notification access and actual schedules remain specific to each device. Upcoming-period and daily-log reminders start on for new users, and onboarding requests system notification permission. An older beta archive that can be identified as untouched uses the same defaults; an old off value that cannot be distinguished from an opt-out conservatively stays off, and an explicit choice is never overwritten. If permission is denied, this iPhone delivers neither reminder and Settings clearly reports that access is off, without turning reminders off on another device. Reminders are scheduled locally by the operating system and do not use remote push notifications. The iPhone UI, dialogs, PDFs, and local notifications use the system language selected for this app in iOS; Hello Cycle does not separately store or upload a language preference, and Apple Watch continues to follow watchOS.
• Reports and system sharing: only when you explicitly choose to generate or share does the app create a report on device and open Apple’s system share sheet. A prediction-diagnostics JSON contains only algorithm/report versions, reason codes, thresholds, counts, coverage, bounded quality/confidence scores, and Boolean decisions—never raw Health values, period dates, HealthKit UUIDs/source identifiers, account IDs, or device identifiers. The app does not upload reports automatically; you choose the recipient, app, or save location.

What optional account sync collects

When you use Sign in with Apple, Wristlab processes the account user identifier and Apple credentials required to authenticate, maintain the session, and support revocation; the Apple refresh credential retained by the service is encrypted. After Apple sign-in succeeds, Hello Cycle automatically collects and syncs the period/not-period facts, daily records (flow, blood color, pain, built-in states, and notes), structured daily states you explicitly enter (Emotional/Physical category, built-in or custom item, severity, and daily-life impact), active-period state, preferences, and deletion markers visible in the app. If a daily-state entry is deleted concurrently across devices, sync retains only random deletion-version markers containing no state name, severity, impact, or entry text, so an old device cannot revive deleted content; it does not retain a deleted conflict-content copy. If you switch to another Apple sign-in account, current phone data may include records from a prior account or local-only use and is automatically merged into the newly selected account; sync bases are not reused across accounts. Those archive data are used only to sync Hello Cycle between your iPhones and are isolated by the app’s app_id from other Wristlab apps. Period facts imported from Apple Health and visible in Hello Cycle are stripped of source identifiers and sample UUIDs before sync.

When you upgrade, custom-symptom text stored by an earlier beta in ordinary daily records without enough information to classify it as Emotional or Physical is removed during local migration and cleared from the account archive after the new version first syncs successfully. Period/not-period dates, flow, blood color, pain, built-in states, notes, existing structured states, daily-life impact, preferences, and deletion markers are preserved. New custom states require an Emotional or Physical category and are stored in the structured daily-state record.

Hello Cycle does not upload daily wrist-temperature, resting-heart-rate, HRV, or sleep summaries; HealthKit source identifiers or UUIDs; import ledgers; prediction-assistance state; the status-burden heatmap or premenstrual-pattern analysis; Health or notification permissions; system notification schedules; the iOS-managed app language; PDFs; caches; or diagnostic logs. Period and flow facts that are visible in Hello Cycle after automatic import belong to the limited archive described above: only after you use Apple sign-in are source identifiers and sample UUIDs removed and those visible facts included in account sync. The original Health samples are never uploaded. Status burden and premenstrual patterns are recalculated on iPhone from synchronized raw structured daily states. The app integrates no first-party or third-party analytics, crash-reporting, advertising, or tracking SDK, does not sell personal data, and does not expose Hello Cycle business data to other Wristlab apps such as Wrist Signal. Apple may provide diagnostics according to your device analytics-sharing setting and Apple’s policies.

Stress and HRV complications automatically use available Health data without a separate switch. The app sends only the latest HRV, stress trend score and model version, measurement time, sample day, update/expiry times and a reset version to your paired Watch. It sends no history, raw sample arrays, source identifiers or account information and never uploads this projection to a server. Stress is estimated on iPhone from your recent HRV and available resting heart rate for everyday reference only. The protected, backup-excluded Watch cache displays only today’s or yesterday’s values. Missing data or an archive reset clears them on the next successful sync; offline values still expire.

Account membership: If you sign in, the app also queries membership grants for this app. Wristlab stores your account identifier, grant source and order or operation reference, effective and expiration dates, and creation or revocation audit fields. These records do not contain cycle or HealthKit data. The app keeps a protected, backup-excluded cache with a limited offline validity period and sends only an expiring access snapshot to your paired Watch. Signing out clears this account cache; deleting this app account deletes its grants.

HealthKit and Apple sync boundary

Apple manages HealthKit. If Health iCloud sync or device backup is enabled in your Apple device settings, Apple may sync or back up Health data according to those settings. That is not an upload to Wristlab; the developer cannot access or control it. Revoking Health permission stops future access or writes for the relevant types, but does not automatically delete records already in HealthKit.

Custom themes process only the four phase images you select with the system photo picker. Background removal and cropping run locally on iPhone. Re-encoded images exclude original photo metadata and remain on this iPhone and its paired Apple Watch; they are not uploaded to our servers or account cloud archive. Incomplete themes remain local drafts. Clearing app data removes themes and drafts; an offline Watch clears them after the next sync. The system may need internet access to download an original stored only in iCloud.

To let a paired iPhone and Apple Watch display the same estimate, iPhone sends a validated compact derived projection and its validity period through Apple WatchConnectivity: the history-based center, optional physiology-based center, final most-likely date and range, body-signal evidence strength, and aggregate readiness. It contains no raw or daily HealthKit samples, source identifiers or UUIDs, detailed bleeding-event classifications, temporary-boundary dates, daily emotional or physical states, custom states, status-burden heatmaps, or premenstrual patterns, and it is not included in the account cloud archive. Watch does not sign in, hold a service session, or contact the service; structured daily states are currently recorded and viewed on iPhone only.

Records received from the Hello Cycle account archive retain cloud provenance on the local phone; cycle records eligible for Watch sync retain it in the Watch copy as well. Structured daily-state entries are not sent to Watch. Account merging, an app restart, or a later Health refresh does not write those records into Apple Health. Only an explicit subsequent edit on a device that supports the record creates a new local version that follows the local save rules.

Deleting the app and deleting Health data

• Deleting Hello Cycle removes local data and settings in the app container on that device according to iOS/watchOS behavior.
• Deleting the app does not delete data already in HealthKit. Use Apple’s Health app to inspect or delete those records by data type or data source.
• A report you sent or saved through the system share sheet has left the app container. Deleting the app does not delete those copies; manage them in the recipient app, file location, or service you selected.
• Signing out stops sync and keeps phone and Watch data. A previously synchronized server-side Hello Cycle archive remains until you sign in to manage it or delete the Hello Cycle account.
• Delete Hello Cycle Account & Data requires two confirmations. After server confirmation, Hello Cycle deletes its app user/archive for the current account and clears phone and Watch copies. It does not delete HealthKit data or data, memberships, or entitlements in other Wristlab apps such as Wrist Signal.
• Apple-managed backups and Health sync are controlled by your Apple account and system settings; Wristlab cannot delete Apple-managed copies for you.

Permissions and security

Apple system permissions control Health and notification access. Denying or revoking Health access stops future reads and refreshes, but it does not automatically erase daily summaries already saved in the app’s local archive or a body-sign assistance state still within its validity period; uninstall the app to remove that device’s local content. Uninstalling alone does not clear a previously synchronized cloud archive. A signed-in user can choose Delete Hello Cycle Account & Data under Account Management; after two confirmations it removes the server, phone, and Watch copies. Neither method deletes original Apple Health records. Manual logging and the basic prediction still work. The account session is stored only in this app’s ThisDeviceOnly Keychain; the local archive and sync base use complete file protection and are excluded from backup; the signed build supplies an HTTPS-only service address. HealthKit data is never used for advertising, marketing, or sale.

Health and prediction notice

Cycle, period, and estimated ovulation results are estimates based on limited records and available signals and can be wrong. A valid body-signal estimate takes priority. When it is unavailable, expired, or too far from the history-based estimate, the app uses cycle history. Insights shows the selected estimate’s date, range and confidence, along with the actual signals, their evidence strength and available data. Before a complete signal cycle exists, the body-signal estimate remains a low-confidence preliminary reference with a wide range. Personalization starts after one complete signal cycle. Temperature-only evidence is labeled only as a wrist-temperature rise, never as three-signal support, and no result confirms ovulation. Hello Cycle is not a medical device and does not provide diagnosis, treatment, emergency alerts, or medication advice.

“Irregular periods,” “infrequent periods,” and “prolonged periods,” estimated bleeding-event classifications, and short-interval or prediction-sensitive record notices are all non-diagnostic. A classification never changes a real record, and a temporary calculation boundary never becomes a real period. The app does not automatically interpret missing records as a real health condition.

Premenstrual patterns compare only the entries you explicitly complete in the 7 days before a period with cycle days 5–10; built-in and categorized custom states follow the same rules. One cycle is preliminary; a recurring pattern needs multiple eligible cycles. Persistent all-month states are distinguished from states that rise further before a period. Wrist temperature, heart rate, HRV, and Health sleep summaries never infer mood or replace an entry. You never need to decide or label PMS, and no result diagnoses PMS or PMDD.

Do not use this app as contraception or rely on it alone to avoid or plan pregnancy. Ask a qualified health professional about health concerns, unusual symptoms, possible pregnancy, or medication; contact local emergency services in an emergency.