In short
- moncycle.app is a cycle tracking notebook for natural methods. It is a wellbeing tool, not a medical device.
- You must be 18 or older and have been trained in your method (Billings, FertilityCare…). If in doubt, turn to the association or organisation that teaches it.
- The app guarantees nothing: neither that a pregnancy is avoided, nor that one happens. The decisions are yours, and your partner's if you have one.
- Do not enter any information that identifies you (name, first name, an address like firstname.lastname@…) nor any medical health data (illness, treatment, diagnosis).
- Free, no advertising, your data is never sold. It is hosted in France.
- You can export, edit or delete everything, whenever you want, from “Mon compte” (“My account”).
- An account with no activity for 4 years is deleted, after a warning.
- A question, a request about your data:
.
1. Who is behind moncycle.app?
moncycle.app (“the App”) means the web application tableau.moncycle.app and its API. It is published by:
- Tech 4 Fertility, a French non-profit association (law of 1 July 1901) – tech4fertility.org
- RNA number: W271007328
- Registered office: 15A rue Valentin Gaumont, 27200 Vernon, FRANCE
- Contact, including for your personal data:
Host: OVH SAS, 2 rue Kellermann, 59100 Roubaix, France (RCS Lille Métropole 424 761 419). The servers and the data are in France.
Tech 4 Fertility is the controller of your personal data. The association is too small to have a data protection officer (DPO): any question about your data goes to the address above.
2. Purpose and acceptance
These terms govern your use of the App. They form a contract between you and Tech 4 Fertility. By ticking the boxes at sign-up you confirm that you have read and accept them. If you do not agree, do not create an account.
The App is free and ad-free.
3. What the app does (and does not do)
moncycle.app is a cycle tracking notebook for natural methods (Billings, FertilityCare, with or without temperature). You record your observations; the App shows them as a chart and exports them (PDF, CSV, NFP).
It is a wellbeing tool, not a health service:
- it is not a medical device, not a contraceptive, and not a diagnostic tool;
- it does not interpret your observations and never tells you whether you are fertile or not: the marks on the chart are the ones you enter;
- it replaces neither a healthcare professional nor the teaching of a method.
Training is required
The App assumes you have been trained in the natural method you use. Without that training, do not rely on it to make decisions. If you have trouble keeping or reading your chart, contact the association or organisation that teaches your method.
No method, app included, is 100% effective. For any medical question (pain, unusual bleeding, a late period, pregnancy, treatment), see a healthcare professional. In an emergency, call 112 (European Union) or 911 (United States).
4. Your account
To create an account you must:
- be at least 18 years old;
- open only one account, with accurate information;
- choose a nickname (your initials are enough) and an e-mail address that does not identify you (no firstname.lastname@…);
- confirm that address with the link sent by e-mail (valid for 3 days): an unconfirmed account is deleted after 7 days;
- choose a password of at least 10 characters that you use nowhere else.
Account security
You are responsible for your credentials. Turn on two-factor authentication in “My account”. Every sign-in is reported to you by e-mail; the list of your sign-ins is in “My account”, where you can close them. If you think your account has been compromised, change your password, close your other sign-ins and tell us.
Notification addresses
You can add up to 5 addresses that will receive, like your sign-in address, the account's e-mails, including the full export of each finished cycle. Add only addresses whose owner agrees (partner, instructor…): they receive your cycle data.
Demo accounts
The two demo accounts are public: their password is displayed, anyone can read and change them, and they are reset every hour. Do not enter anything personal in them.
5. Rules of use
moncycle.app is not designed to receive medical health data, nor data that identifies you. You therefore agree to:
- enter no information that identifies you: no name, first name, postal address or phone number, anywhere (nickname, comments, descriptions, e-mail address);
- enter no medical health data: illness, diagnosis, drug, treatment, test result (“endometriosis”, “the pill”, “antibiotic”…). Only the cycle observations the App provides for are expected;
- enter only your own data, and import only files that belong to you;
- not disrupt the service: no attacks, no attempts to reach another account, no circumventing the protections (captcha, attempt limits), no automated harvesting, no overloading. The API may be used for your own account, in line with its documentation;
- comply with the law.
We have no intention of reading what you enter. If content that breaks these rules is reported to us, we may delete it and, in case of repeated breaches, suspend the account (section 9). If you entered identifying or medical information by mistake, delete it yourself (the day concerned, or the account).
6. Liability
Your decisions
The App is a recording aid. The decision, and the responsibility for how you use your method, rest with you and, where applicable, your partner. Neither Tech 4 Fertility, nor its members, volunteers or developers can be held liable for:
- an unintended pregnancy;
- the absence of pregnancy when that is the couple's goal;
- the consequences of an error in entering, reading or interpreting your chart.
The service
The App is provided free of charge by an association, “as is”. We do our best to maintain it, secure it and keep it available, but we do not guarantee continuous availability, freedom from errors, or that no data will be lost. Outages, maintenance and updates may happen. Export your data from time to time (NFP format), or keep the automatic e-mailing of cycles turned on.
We are not responsible for e-mails that do not arrive, for what the owners of the addresses you configured do, or for interruptions caused by a provider or by force majeure.
What the law does not allow us to exclude
Nothing in these terms excludes or limits a liability that cannot be excluded or limited by law (gross negligence or wilful misconduct, personal injury), or your rights as a consumer.
7. Your personal data (GDPR)
We collect only what is necessary, we tell you why and for how long, and you stay in control. This section meets our duty to inform you (articles 13 and 14 of the GDPR). Your data comes from you, or from your use of the App. We take no automated decisions and do no profiling.
7.1 What we collect, why, and on what basis
| Data | Why | Legal basis |
|---|---|---|
| Account: nickname, sign-in e-mail, notification addresses (optional), password (kept as a hash, never readable), birth year, method and preferences, dates of registration and last sign-in | Create and secure the account, run the App, write to you | Contract (art. 6.1.b) |
| Observations: for each day, whatever you choose to record (stamps, mucus, bleeding, temperature, peak, first day of cycle, pregnancy noted, intercourse, free comment, custom descriptions) | Show your chart, work out the cycle day, export, send your finished cycles | Explicit consent (art. 9.2.a) – see 7.2 |
| Sign-ins: name, token fingerprint (not the token), creation and last-use dates, IP address and browser | Secure the account, show you your devices, spot suspicious access | Legitimate interests: security (art. 6.1.f) |
| Technical logs: date, IP address, internal account id, action (“day saved”…), never the content | Security, abuse detection, traceability | Legitimate interests: security (art. 6.1.f) |
| Sign-in attempts: IP address and time | Block repeated-guess attacks | Legitimate interests: security (art. 6.1.f) |
| Service e-mails: confirmation, new sign-in, finished cycle, reminder, warning before deletion | Run the service and keep you informed | Contract (art. 6.1.b) |
| Sign-up comment: how you found the App | Know how the App is discovered | Legitimate interests (art. 6.1.f) |
| Contribution to research (optional box, then a second consent) | Exports without identifiers for research on natural methods and the menstrual cycle | Consent (art. 6.1.a and 9.2.a) |
To create an account, the e-mail, password, nickname, birth year, method and sign-up comment are mandatory: without them, no account. Everything else is optional, including each observation.
We publish aggregated, rounded figures (number of accounts, cycles, observations). They do not identify anyone.
7.2 Intimate data: your explicit consent
moncycle.app is a wellbeing tool, not a health service. But your cycle observations, a pregnancy noted and your intercourse are very intimate information. We process them at the protection level of sensitive data (art. 9 GDPR): only with your explicit consent, given by ticking the box at sign-up.
You can withdraw it at any time, without giving a reason: erase the days concerned or delete your account. Withdrawal does not affect what was done before. Without this consent, the App cannot be provided to you.
7.3 Who receives your data
- Tech 4 Fertility. Your observations are not consulted: the association has no reason to read them. In a very exceptional case (a serious technical incident), work on the database is done anonymously, with no link to the account's identifier or identity.
- OVH SAS, our processor (art. 28), which hosts the servers (in France) and sends the e-mails.
- The e-mail addresses you added, which receive your cycles.
- Research, only with your agreement: the sign-up box is optional, you can untick it at any time in “My account”, and a second consent will be asked of you before your cycles are used for a research programme on natural methods or the menstrual cycle. These exports contain no e-mail, no nickname and no free text (comments, descriptions). They are never sold or handed over for commercial purposes. Once the box is unticked, your cycles are left out of later exports; what has already been shared cannot be taken back.
- Authorities, on a legal request only.
We do not sell your data, we show no advertising and we use no tracking tool.
We do not transfer your data outside the European Union. The e-mails we send arrive at the mail provider of their recipient, which we do not control.
A monitoring service, updown.io, regularly checks that the site responds; it receives no account data.
7.4 How long we keep it
| Data | Duration |
|---|---|
| Account and observations | As long as the account exists. Deleted immediately when you delete the account. |
| Inactive account | Deleted after 4 years without activity (sign-in or entry). A reminder e-mail is sent after 35 days without an entry, and a warning 10 days before deletion, to the sign-in address and the notification addresses. |
| Unconfirmed account | Deleted after 7 days. |
| Links received by e-mail (confirmation, new password, change of address) | From 1 hour to 3 days, single use. |
| Sign-ins (token, IP address, browser) | Until they are closed or expire: 40 days unused, 1 year at most (365 days at most for an API token you create), or deletion of the account. |
| Sign-in attempts (IP address) | 24 to 48 hours. |
| Technical logs | 12 months. The lines of a deleted account stay there until they expire. |
| Backups | 90 days. What you delete disappears from the backups 90 days later at the latest. They are used only to restart the service after a serious incident. |
7.5 Your rights
You have the right to access your data, to have it corrected or erased, to restrict its processing, to object to it (for processing based on legitimate interests), to take it with you in a reusable format (portability) and to withdraw your consent. You can also give instructions about what happens to your data after your death.
Most of these rights can be exercised by yourself in “My account”: editing your profile, exports (PDF, CSV, NFP), export of all the raw data of the account, import, deleting the account (with your password).
For anything else, write to . We answer within one month (up to three months for a complex request; we tell you). It is free. To protect you, we may ask you to write from the account's sign-in address; we do not ask for ID, unless absolutely necessary.
If you believe your rights are not respected, you can lodge a complaint with the CNIL, the French data protection authority: 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, France – cnil.fr/fr/plaintes. We invite you to write to us first: we would rather sort it out with you.
7.6 Security
- Encrypted connection (HTTPS), servers in France.
- Passwords stored as a hash (bcrypt) and never sent by e-mail; sign-in tokens stored as a hash; optional two-factor authentication; captcha and attempt limiting; an e-mail at every new sign-in.
- Our logs never contain the content of your days, your e-mails or your passwords.
No system is infallible. Cycle e-mails carry your data as attachments and travel like any e-mail, without end-to-end encryption: turn this sending off in “My account” if you prefer.
In the event of a data breach, we notify the CNIL within 72 hours and, if the risk to you is high, we notify you without delay.
7.7 Cookies and local storage
- A single cookie,
MONCYCLEAPP_TOKEN: it keeps you signed in (HttpOnly, Secure, SameSite Strict). - A copy of your data is kept in your browser's local storage, so that the App is fast and works offline. It is erased when you sign out or when the session ends. On a shared device, sign out.
These two items are strictly necessary for the service: they do not require consent. The App contains no advertising, no tracking tool and no third-party cookie.
8. Ownership and licences
Your data remains yours. You only allow us to keep and process it to provide the service, as described in section 7. Your exports belong to you: you may share them with whoever you like.
The code of the App is open source, under the Creative Commons CC BY-NC-SA 4.0 licence (source code). This licence covers the code only, not your data.
9. Ending your account
- By you, at any time: “My account”, “Supprimer définitivement mon compte” (permanently delete my account). It is immediate and irreversible. Export your data first if you want to keep it.
- By us, if you break these terms (section 5), after a warning and a chance to reply, except in an emergency or where the security of the service is at risk.
- Automatically: unconfirmed or inactive account (section 7.4).
- End of the service: we notify you by e-mail at least 30 days beforehand so that you can export your data, except in cases of force majeure.
10. Changes to these terms
We may update these terms (law, new features). For an important change, we notify you by e-mail and in the App at least 30 days before it takes effect. If you do not accept it, delete your account before that date. If a change requires your consent (a new purpose, for example), we ask for it again. Minor corrections are published here with the new date.
11. Governing law and disputes
These terms and any dispute arising from them are governed by French law, whatever your country of residence. If you disagree with us, write to us first: we always look for an amicable solution. Failing that, only the French courts have jurisdiction, even if you live outside France.
If a clause of these terms were invalid, the others would remain applicable. The French version prevails; the English version is a courtesy translation.
12. Contact
Question, request about your data, report of a security flaw: