Privacy Policy

Draft version 0.1 · Last updated November 1, 2026

This is a working draft. It is not in effect yet and will be reviewed by a lawyer before Cycled launches or takes any payment. Details marked [in brackets] will be filled in before launch.

The short version

You can watch Cycled without an account.
We collect only what we need to run Cycled: your sign-in, your posts, your bids, and basic usage.
No ads, no ad tracking, and we never sell your information.
We never show anyone's location, and we don't collect it.
Card details are handled by Stripe. We never see or store your full card number.
You can delete your account and your data at any time.

1. Who this covers

This policy explains how [Operator name] ("Cycled," "we," "us") handles information when you use the Cycled app or cycled.vip. Questions: [email protected].

2. What we collect

If you only watch

Usage information: which posts were shown and liked, how far you got through the daily drop, time spent, and basic device and app information (device type, operating system, app version, language). We use this to run the feed (for example, "37 of 100 seen") and to understand how Cycled is used.
Notification token, if you turn on the 7 AM notification.

If you create an account

Sign-in details: your email address, and your name and profile photo if you sign in with Google or Apple.
Profile: your username, photo, bio, bio link, and any discount code you add.
Applications and Wildcard entries: the social accounts you link and their follower counts, and your confirmation that you're 18 or older.
Posts: the photos and videos you upload, their schedule, and whether they're marked as sponsored and by which brand.
Moderation records: review results, reports, blocks, appeals, and our decisions.
Bids and payments: your bids, maximums, spending cap, and payment history. Card details go directly to Stripe; we receive only limited details such as card type, last 4 digits, and expiration date.
Messages you send us, such as support emails.

What we don't collect

Your location. Cycled never shows or collects location.
Your contacts or photo library beyond the files you choose to upload.
Advertising identifiers. Cycled has no ads and no ad trackers.

3. How we use it

To run Cycled: sign-in, posting and scheduling, the daily drop, the Board, bidding, the Wildcard draw, and notifications.
To review content and keep Cycled safe, including automated and AI review of posts, text in them, audio, and bio links, and to handle reports and appeals.
To process payments, prevent fraud and fake accounts, and enforce our Terms.
To email you about your account, bids, outbid alerts, and important changes.
To measure and improve Cycled, using our own analytics.
To meet legal obligations.

4. What's public

Spot holders' usernames, profile photos, bios, bio links, discount codes, and posts, along with their like counts and any "Paid partnership" label.
Who holds a creator or Wildcard spot each week, on the Board.
The weekly creator price to get in.
Company names, only once that company's posts go live.

Never public: individual bids and maximums, the company price, your email address, your linked accounts' follower counts, reports you make, and who you block. Cycled has no followers or following lists.

5. Who we share it with

We don't sell your information or share it for advertising. We share it only with:

Service providers that run Cycled for us, under contracts that limit how they use it: hosting and database (Supabase, Cloudflare), file storage (Cloudflare), email (Resend), payments (Stripe), content-review tools [provider names to be added], and push notifications (Apple and Google).
The law: when required by law or legal process, or to protect the safety of people, Cycled, or the public.
A new owner: if Cycled is sold, merged, or reorganized, your information may transfer to the new owner, who will be bound by this policy for the information it receives.

6. How long we keep it

Account information: for as long as your account is open.
Posts: while they're on Cycled. Past drops may stay viewable on the creator's profile until the creator deletes them or their account.
Payment and moderation records: as long as needed for legal, tax, fraud-prevention, and dispute purposes (generally up to 7 years for payment records).
Backups: deleted information may remain in encrypted backups for up to [30] days.

7. Your choices and rights

Delete your account anytime in the app or on cycled.vip. This deletes your profile and posts, except records we must keep (see above).
See, correct, or download your information by emailing [email protected].
Notifications: turn them off in your phone's settings.
Emails: unsubscribe from non-essential emails with the link in each one.

Depending on where you live (for example, California), you may have additional rights. We honor these requests for everyone. We won't treat you differently for using them.

8. Children

Cycled is not for children under 13, and we don't knowingly collect information from them. You must be 18 or older to create a posting or bidding account. If you believe a child under 13 has given us information, contact [email protected] and we'll delete it.

9. Security

We use encryption in transit, access controls, and two-factor sign-in for bidders to protect your information. No system is perfectly secure, so please keep your sign-in safe and tell us about anything suspicious.

10. Where your data is stored

Cycled is run from the United States, and your information is stored and processed in the United States.

11. Changes

If we make a material change to this policy, we'll tell you in the app or by email before it takes effect.

12. Contact

[email protected]. [Mailing address to be added.]