Privacy Policy

1. Who This Policy Covers

This Privacy Policy applies to all users of the Cyla mobile application and any related services operated by Sola Athletics LLC ("we," "us," "our"). It does not apply to third-party services you may access through links within the app.

Cyla is not intended for users under 16. We do not knowingly collect data from anyone under 16. If you believe we have inadvertently collected data from a minor, contact us immediately at support@cylaai.app and we will delete it.

2. What Data We Collect

Data you provide directly:

• Email address and account credentials
• Age (used to personalize insights by life stage)
• Last period start date and typical cycle length
• Health conditions you optionally disclose (e.g., PCOS, endometriosis)
• Food sensitivities (gluten, dairy)
• Personal wellness goals
• Meal photos and meal logs you submit
• Daily wellness check-in scores

Data collected automatically:

• App usage patterns (screens visited, features used)
• Device type, operating system version
• Crash logs and error reports
• IP address (used for security, not profiling)

Data we do NOT collect:

• Your precise GPS location
• Contacts, calendar, or other apps on your device
• Biometric data (fingerprint, Face ID — these are handled by your OS, not us)
• Payment card numbers (handled by Apple/Google, not us)

3. How We Use Your Data

We use your data exclusively to:

• Provide and personalize the Cyla experience
• Generate AI-powered food recommendations tailored to your cycle and health history
• Identify patterns between your food choices and how you feel
• Send optional check-in reminders (if you enable them)
• Improve app performance and fix bugs
• Respond to your support requests
• Comply with legal obligations

We do not use your health or cycle data for advertising, profiling for third parties, or any purpose beyond directly operating and improving Cyla.

4. AI & Your Health Data

Cyla uses AI (including third-party AI models) to analyze your meal history and wellness check-ins to generate personalized food recommendations. When this happens:

• Your data is sent to AI providers solely to generate your recommendation
• We use data minimization — only the data needed for the task is sent
• AI providers are contractually prohibited from training on your personal health data
• Results are returned to you and are not retained by the AI provider

5. Who We Share Data With

We do not sell your personal data. Ever. We share data only with:

• Infrastructure providers — cloud hosting and database services that store your data on our behalf, under strict confidentiality agreements
• AI model providers — only to process your personalized recommendations, as described above
• Payment processors — Apple App Store or Google Play handle all payments; we receive only your subscription status, never your payment details
• Law enforcement — only when legally required, and only to the minimum extent required by law

6. Where Your Data Is Stored

The majority of your app data (meals, check-ins, cycle settings) is stored locally on your device. Account credentials and subscription status are stored on secure servers in the United States. We do not currently transfer personal data internationally.

7. Data Retention

We retain your account data for as long as your account is active. If you delete your account, we delete your personal data within 30 days, except where we are required by law to retain it longer (e.g., billing records for tax purposes, which are retained for 7 years).

8. Your Rights & Choices

You have the right to:

• Access — request a copy of the personal data we hold about you
• Correct — update inaccurate data via the Profile tab in the app
• Delete — delete your account and all associated data from the Profile tab at any time
• Export — request a machine-readable export of your data
• Opt out — disable wellness check-in reminders in the Profile tab

To exercise any of these rights, contact us at support@cylaai.app. We will respond within 30 days.

9. Security

We use industry-standard security measures including encrypted data transmission (TLS), secure authentication, and access controls. No system is 100% secure. If you believe your account has been compromised, contact us immediately at support@cylaai.app.

10. California Privacy Rights (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act, including the right to know what personal information we collect and the right to opt out of the sale of personal information. We do not sell personal information. To exercise your CCPA rights, contact us at support@cylaai.app.

11. Changes to This Policy

We may update this Privacy Policy periodically. We will notify you of material changes within the app. The effective date at the top of this page reflects the date of the most recent update.

12. Contact Us

Sola Athletics LLC
Utah, United States
support@cylaai.app