Cycle Five

Privacy Policy for Anya

Effective date: June 13, 2026 Last updated: June 13, 2026

This Privacy Policy explains how Cycle Five Syndicate, a Delaware corporation (“Cycle Five Syndicate,” “we,” “us,” or “our”), collects, uses, and shares information when you use Anya, our AI habit-coaching and accountability companion mobile application and related services (collectively, the “Service”).

By using Anya, you agree to this Privacy Policy. If you do not agree, please do not use the Service.

1. Summary

Anya is an AI-powered habit coach. To provide it, we collect account information (including your date of birth), the messages and habit data you share with Anya, and limited technical and usage information. Your chat messages are processed by a third-party AI provider (Amazon Web Services Bedrock, running the DeepSeek model) to generate Anya’s responses. We do not sell your personal information, and we do not use your information for cross-app advertising or tracking. You can delete your account and associated data from within the app. Anya is for motivation and accountability only — it is not a medical, mental-health, or professional advice service.

2. Data We Collect

We collect the following categories of information:

(a) Account & contact information. Information you provide when creating an account: your name or display name, email address, password (stored only in hashed form), and date of birth. We collect your date of birth to confirm you meet our minimum age requirement and to restrict the Service to adults.

(b) Habit, goal & check-in content. The goals, habits, reminders, streaks, journal entries, and check-ins you create in Anya. This includes check-in logs such as sleep and workout entries. We treat this information as user-generated content you choose to record in the app, not as health or medical data, and we do not use it to infer health conditions or for any medical purpose.

(c) AI chat content. The messages and prompts you send to Anya, and the AI-generated responses you receive. See Section 4 for how this is processed.

(d) Product-usage analytics. Limited, pseudonymous information about how you interact with the Service (for example, features used and screens viewed), collected through PostHog. Analytics are opt-out — you can disable them in the app’s settings — and are not tied to advertising.

(e) Diagnostics & crash data. Crash reports and error diagnostics, collected through Sentry. These reports are scrubbed to remove personal content before they reach us, and are used only to diagnose and fix problems.

(f) Push notification token. If you enable notifications, we process an Expo push notification token to deliver reminders and notifications. This is the only device-level token we use for this purpose, and notifications are the only operating-system permission Anya requests.

(g) Purchase information. If you make in-app purchases or subscriptions, we receive transaction confirmations and status from the Apple App Store or Google Play. We do not receive your full payment card details — those are handled by the app store.

(h) Support communications. Information you provide when you contact us for support.

We do not intentionally collect special-category or “sensitive” data (such as health diagnoses, precise geolocation, biometric data, or contacts), and Anya requests no device permissions other than notifications.

3. How We Use Your Information

We use the information we collect to:

  • provide, operate, and maintain the Service, including generating AI coaching responses;
  • create and manage your account, verify your age, and personalize your experience;
  • send reminders, notifications, and Service-related messages you’ve enabled;
  • analyze pseudonymous usage to improve and develop features (where you have not opted out);
  • maintain security, prevent fraud and abuse, and enforce our Terms;
  • provide customer support and respond to your requests; and
  • comply with legal obligations.

Legal bases (where GDPR/UK GDPR applies): we process data to perform our contract with you (providing the Service), based on your consent (e.g., push notifications, optional analytics), for our legitimate interests (improving and securing the Service), and to comply with legal obligations.

4. AI Processing and Third-Party AI Provider

Anya’s coaching responses are generated using a third-party large language model (“LLM”): the DeepSeek model hosted on Amazon Web Services (AWS) Bedrock. When you chat with Anya, the content of your messages (and relevant context such as your goals or recent check-ins) is transmitted to AWS Bedrock to generate a response.

  • AWS Bedrock processes this content on our behalf, as our service provider, to return AI output. Model inputs and outputs processed through AWS Bedrock are not used to train the underlying foundation models.
  • AI output may be inaccurate, incomplete, or inappropriate. Anya’s “tough-love” persona is designed for motivation and entertainment. It is not professional, medical, psychological, legal, or financial advice, and it is not a substitute for a qualified professional. If you are in crisis or need help, contact a qualified professional or your local emergency services.
  • Do not share information with Anya that you would not want processed by a third-party AI provider.

5. How We Share Information

We do not sell your personal information, and we do not share it for cross-context behavioral advertising or cross-app tracking.

We use the following categories of service providers, who process information on our behalf and under contract, and not for their own purposes:

  • AWS Bedrock (DeepSeek model) — processes chat content to generate Anya’s responses (Section 4).
  • Fly.io — hosting and storage of the application backend and your account data.
  • PostHog — pseudonymous product analytics (opt-out).
  • Sentry — scrubbed crash and error diagnostics.
  • Expo — delivery of push notifications via push token.
  • Apple App Store / Google Play — purchases and subscriptions, if you make them.

We may also disclose information when required by law, to respond to legal process, or to protect the rights, safety, and security of users, the public, or Cycle Five Syndicate; and in connection with a merger, acquisition, or sale of assets, subject to this Policy.

6. Data Retention

We keep personal information only as long as needed to provide the Service and for the purposes described here, unless a longer period is required by law. When you delete your account, we delete or de-identify the personal data associated with it, except data we are legally required to retain or that is necessary for legitimate purposes such as fraud prevention or dispute resolution. Backups are purged on a rolling basis.

7. Your Rights and Choices

Depending on where you live (including under GDPR/UK GDPR and U.S. state privacy laws such as the CCPA/CPRA), you may have the right to access, correct, delete, and port your data, to object to or restrict certain processing, and to withdraw consent at any time.

Account & data deletion. You can delete your account and associated personal data directly within the Anya app (Settings → Account → Delete Account), or request deletion at hello@cyclefive.xyz or https://cyclefive.xyz/anya/delete-account. We will not discriminate against you for exercising your rights.

Analytics opt-out. You can disable product analytics at any time in the app’s settings.

To exercise any right, contact us at hello@cyclefive.xyz. We may need to verify your identity. EU/UK users may also lodge a complaint with their local data protection authority.

8. Children’s Privacy

Anya is not directed to children and is intended for users 18 and older. We collect your date of birth to enforce this. We do not knowingly collect personal information from children under 18. If we learn that we have collected such information, we will delete it. If you believe a child has provided us information, contact us at hello@cyclefive.xyz.

9. Security

We use reasonable technical and organizational measures to protect your information, including encryption in transit and access controls. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

10. International Data Transfers

We are based in the United States, and our service providers may process your information in the United States and other countries, which may have different data-protection laws than your own. Where required, we rely on appropriate safeguards (such as the EU Standard Contractual Clauses) for transfers of EU/UK personal data. By using the Service, you understand your information may be transferred and processed in these locations.

11. Changes to This Policy

We may update this Policy from time to time. We will post the updated version with a new “Effective date” and, where required, notify you. Your continued use of the Service after changes take effect constitutes acceptance.

12. Contact Us

Cycle Five Syndicate 76 Jasmine Lane, Goffstown, NH 03045, USA Email: hello@cyclefive.xyz