Privacy Policy

Last updated: 01-05-25

At Cysterapp, your privacy and trust are paramount. We are committed to protecting your personal data and being transparent about how we collect, use, and safeguard your information. This Privacy Policy explains how we handle your data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

Cysterapp is a UK-based digital health platform dedicated to supporting people with PCOS. For the purpose of UK data protection laws, Cysterapp is the Data Controller of your personal information.

If you have any questions, you can contact us at:

Email: admin@cysterapp.co.uk
 

We may collect and process the following data:

• Personal Identifiers: name, email address, username
   
• Health & Symptom Data: cycle dates, symptoms, mood tracking, custom notes
   
• Technical Data: IP address, device type, operating system, usage statistics
   
• Communication Data: responses to surveys, StoryShare submissions, or customer support queries
   

We do not collect or store financial information within the app.

We use your data to:

• Provide and personalise your experience with the app
   
• Track symptoms and cycles to offer relevant insights
   
• Respond to enquiries and support requests
   
• Improve our platform and user experience
   
• Send service-related communications (e.g. app updates)
   

We do not use your data for automated decision-making or profiling beyond your selected app preferences.

Under the UK GDPR, we rely on the following lawful bases to process your data:

• Consent: For optional features (e.g. email newsletters, community features)
   
• Contractual necessity: To provide core app services
   
• Legitimate interests: For internal analysis and app improvement
   
• Explicit consent: For processing sensitive health data
   

You can withdraw your consent at any time via app settings or by contacting us directly.

We take your trust seriously. We do not sell, rent, or share your personal data with third parties for marketing purposes.

Your data may be processed by trusted third-party providers who help us deliver our services (e.g. cloud hosting, analytics tools). These providers are contractually obligated to protect your data and comply with GDPR.

We retain your data only as long as necessary for the purposes set out above, or to comply with legal or regulatory requirements. You may request deletion of your data at any time.

You have the right to:

• Access the personal data we hold about you
   
• Request correction or erasure of your data
   
• Restrict or object to processing
   
• Data portability
   
• Withdraw consent at any time
   

To exercise any of these rights, please contact us at: admin@cysterapp.co.uk

We use strong security measures to protect your data from unauthorised access, alteration, disclosure, or destruction. This includes encrypted databases, secure servers, and strict internal controls.

All data is stored within the UK or EEA. If any data is transferred outside of these regions, we ensure appropriate safeguards are in place, in line with GDPR standards.

We may update this policy from time to time. If we make material changes, we’ll notify you via the app or email. Please review this policy periodically.

If you have any concerns about your data or this policy, you have the right to lodge a complaint with the Information Commissioner's Office (ICO):
https://ico.org.uk

For anything else, we’re here:
admin@cysterapp.co.uk