Horcycles Privacy Policy

Who Is Responsible

Kalyan Kurkure, the developer of Horcycles, is responsible for the limited personal information described in this policy. Privacy requests may be sent to shoutout@lil.business.

This policy covers the Horcycles Apple-platform apps, the Horcycles web companion, and support communications. A separate Consumer Health Data Privacy Policy gives additional information for consumer health data.

Local-First Design

Horcycles does not operate accounts, advertising, tracking or analytics SDKs, managed cloud sync, or a developer-operated cloud AI service. The developer does not receive the cycle, period, symptom, mood, strength, injury, medication, supplement, discharge, journal, HealthKit, calendar, local AI prompt, model endpoint, payload, or response information you store in or send from the product unless you deliberately include information in a support request.

Native app-only data is stored in the app container on your device. Web companion data is stored in your browser's IndexedDB for the Horcycles website origin. Local diagnostics contain bounded operational event names, outcomes, timestamps, and redacted metadata; they stay on your device unless you choose to share them.

Purposes And Legal Bases

Local health and wellness information is processed only to provide the logging, display, prediction, export, permission, and optional local AI features you request. Where data-protection law applies to this local processing, it is performed at your request to provide the product and, for sensitive health information where required, on the basis of your explicit choice to enter or import it. You can stop this processing by deleting the information or the app.

Support contact details and correspondence are processed to answer your request, protect the product and users, prevent abuse, comply with law, and establish or defend legal claims. Depending on the context, the legal basis is performance of a contract or steps you request, compliance with law, or the developer's legitimate interests in support, security, and legal administration. Horcycles does not use personal information for advertising or automated decisions that produce legal or similarly significant effects.

Apple Health And Calendar

If you grant Health write access, Horcycles writes only supported cycle, mood, temperature, ovulation, cervical mucus, and strength entries you explicitly save. Horcycles does not read Apple Health records. Health records remain controlled through Apple Health settings.

Horcycles exports estimated wellness calendar events only when you choose. Write-only access is the default. Full calendar access is optional and used only to manage an app-created calendar. Calendar estimates include uncertainty and are not medical, fertility, contraception, legal, emergency, or safety-critical guidance.

Local AI

Local AI is optional. Horcycles shows the payload before sending summarized data to a model endpoint you configure. Unencrypted HTTP is restricted to loopback on the same device; other private LAN or Tailscale endpoints must use HTTPS. Redirects are rejected, request and response sizes are bounded, and no cloud AI endpoint is configured by default.

Your chosen model server is a recipient under your control. Its operator may have separate privacy and retention practices. Do not configure an endpoint you do not trust.

Subscriptions, Website Hosting, And Service Providers

Horcycles Plus purchases are processed through Apple's StoreKit under Apple's terms and privacy policy. Horcycles does not send health content or product-interaction analytics to a third-party subscription service.

Cloudflare hosts and protects the public Horcycles website and routes support email to a Gmail mailbox operated by Google. Like ordinary website and email infrastructure, these providers may process limited request, delivery, security, and device/network metadata such as IP address, timestamp, user agent, routing information, message content, and message headers. They do not receive web companion health entries because those entries remain in browser storage unless you put them in an email. Cloudflare and Google process information under their own terms, privacy notices, locations, retention practices, and legal obligations.

Retention, Security, Export, And Deletion

Local records remain until you delete them, clear browser storage, or remove the app. Local diagnostics are size-bounded and remain until cleared or included in full local-data deletion. Encrypted exports remain wherever you save or share them until you delete those copies. Horcycles does not keep or recover archive passphrases.

Support and security correspondence is retained only while reasonably necessary to resolve the request, maintain an appropriate record, prevent abuse, meet legal obligations, or establish or defend claims. The exact period depends on the request and applicable law. You should not send menstrual, health, journal, Apple Health, archive password, or other sensitive content to support.

Horcycles uses Apple app-container protections, complete file protection for sensitive native files where available, authenticated encryption for user exports, data minimization, redacted diagnostics, and bounded local-model transport. No security measure eliminates all risk, so protect your device, browser profile, passphrases, exported files, and local model server.

Your Choices And Rights

You can access and correct local records in the product, export them in an encrypted archive, delete individual records, delete all local Horcycles data, clear diagnostics, withdraw Apple Health or Calendar permissions in system settings, and stop local AI by not sending a payload. Copies already written to Apple Health, Calendar, exported files, or your model server remain under those services or your control.

Depending on where you live, you may also have rights to information, access, correction, deletion, restriction, portability, objection, withdrawal of consent, non-discrimination, or appeal. Because the developer does not possess your local health records, support cannot retrieve or alter them. For information the developer does possess, email a request using the contact above. You may complain to your local privacy or data-protection authority.

Horcycles does not sell personal information, share it for cross-context behavioural advertising, or use it for targeted advertising. There is therefore no sale, advertising-sharing, or sensitive-data advertising opt-out to exercise.

International Use And Children

Horcycles is offered from Australia. Website and support infrastructure may process limited technical or correspondence information in other countries under provider safeguards and applicable law. The product is intended only for people aged 18 or older and is not directed to children. Do not use Horcycles or provide information if you are under 18.

Wellness And Consumer-Law Boundary

Horcycles is a wellness logging and planning tool. It is not medical care, diagnosis, treatment, contraception, fertility certification, emergency support, legal advice, clinical decision support, or safety-critical guidance. Do not rely on Horcycles for urgent, medical, legal, or safety-critical decisions.

Nothing in this policy or the Terms of Use excludes rights or remedies that cannot lawfully be excluded, including applicable consumer guarantees.

Changes And Contact

Material changes will be published on this page with a new effective date. For support, legal, privacy, cybersecurity, or rights requests, email shoutout@lil.business.