Privacy policy

Who we are

Cypha is operated by The Digital Llama ABN 37 323 291 257. For privacy enquiries, contact us at contact@cypha.co.

Kinds of personal information we collect

To use Cypha, you must create an account. We collect and hold:

• Account information: your name and email address
• Health information (sensitive): menstrual cycle dates, daily symptom logs (pain, mood, energy, sleep), health conditions you disclose, life stage information (e.g. pregnancy, postpartum)
• Wellness data: workout history, supplement tracking, meal plans, dietary preferences and allergies
• App preferences: notification settings, display preferences, onboarding selections

How we collect information

We collect personal information directly from you when you create an account, complete onboarding, log daily entries, or update your profile settings. We do not collect information from third parties. Some of the information we collect is classified as sensitive information (health information) under the Privacy Act - we only collect this with your explicit consent, which you provide by choosing to enter it into the app.

Purposes of collection

We collect and use your personal information for the following purposes:

• To personalise your cycle tracking, workout plans, meal plans, and wellness insights
• To provide daily wellbeing insights and weekly/monthly summaries
• To sync your data across your devices via your account
• To authenticate your identity and maintain your account security

How we store and protect your data

Your data is stored locally on your device and securely synced to your cloud account via Firebase (Google Cloud). We use industry-standard TLS encryption for data in transit and AES-256 encryption at rest. Access to your data requires authentication through your account credentials.

Overseas disclosure

Your personal information is stored on Google Cloud (Firebase) servers, which may be located in the United States. Google Cloud is certified under internationally recognised security standards and is bound by its own privacy obligations. We take reasonable steps to ensure that overseas recipients handle your information consistently with the APPs. We do not disclose your personal information to any other overseas recipients.

What we never do

We never sell, share, or monetise your personal or health data. We do not display advertising. We do not disclose your data to insurance companies, employers, data brokers, or any other third party. Your health information is never used for purposes other than providing your personal Cypha experience as described above.

Access and correction

You can access and update your personal information at any time through your Cypha profile settings. You can also export a complete copy of your data via "Export my data" in your profile. If you believe any information we hold about you is inaccurate, incomplete, or out of date, you can correct it directly in the app or contact us at contact@cypha.co.

Deletion

You can permanently delete your account and all associated data at any time via "Delete my account & data" in your profile settings. Once deleted, your data cannot be recovered. We do not retain personal information after account deletion.

Complaints

If you believe we have breached the Australian Privacy Principles, you may lodge a complaint by emailing contact@cypha.co. We will acknowledge your complaint within 7 days and aim to resolve it within 30 days. If you are not satisfied with our response, you may lodge a complaint with the Office of the Australian Information Commissioner (OAIC) at www.oaic.gov.au.

Changes to this policy

We may update this privacy policy from time to time. We will notify you of material changes via the app. The current version will always be available in your profile settings.

Contact

For questions about your data or this privacy policy, contact our privacy officer at contact@cypha.co.