Kiyo Nevada Consumer Health Data Privacy Policy
About this policy
This Nevada Consumer Health Data Privacy Policy supplements the Kiyo Privacy Policy and applies where information that Kiyo processes is "consumer health data" under Nevada law, NRS 603A.400 to 603A.550. Kiyo is operated by Project July ("we", "us").
We do not sell consumer health data, and we do not use it for advertising.
If you are a Washington consumer, our Consumer Health Data Privacy Policy covers you instead.
Categories of consumer health data we collect, and how we use it
We collect the following categories of consumer health data:
- Menstrual cycle records. Period start and end dates, whether a period is ongoing, the history of those records, average cycle length, period length, and your Cycle Syncing settings.
- Menstrual cycle records imported from Apple Health, if you choose to start an import.
We collect this data only if you turn on Cycle Syncing and give separate consent to it, and we use it only to:
- show and predict your cycle phases and provide reference information in Kiyo; and
- sync those records between the devices you are signed in on, including the web version.
If you use Kiyo without an account, your menstrual cycle records stay in storage on your own device and we do not receive them.
We do not use consumer health data for any other purpose. Our usage records β which screens are opened and which features are used β never include the contents of your cycle records.
Categories of sources we collect it from
- You. The records you enter in Kiyo yourself.
- Your device. Menstrual cycle records held in the Apple Health app, read only if you start an import yourself and allow it in iOS. Kiyo never changes or deletes what is stored in Apple Health.
Categories of consumer health data we share
We share the categories listed above β menstrual cycle records, including any imported from Apple Health β only with the service providers that store and transmit them for us, and only so that Kiyo can work.
We do not sell consumer health data. We do not share it with advertisers, data brokers, analytics companies, or anyone else for their own purposes.
Categories of third parties and affiliates we share it with
We have no affiliates. Kiyo is operated by a single Korean sole proprietorship, and there are no parent, subsidiary, or sister companies to share data with.
We share consumer health data with these categories of third parties:
- Cloud service providers that process it on our behalf. Specifically Supabase Pte. Ltd and the sub-processors it engages, including Supabase, Inc. (support) and Amazon Web Services, Inc. (hosting) β our database, authentication and server functions. Our data is held in the AWS Asia Pacific (Tokyo) region (
ap-northeast-1), in Japan. They may use it only to provide those services to us. - Law enforcement or government authorities, only where the law requires it or where an investigative authority makes a lawful request following the procedures the law sets out.
Why we collect, use, and share it
We collect and use consumer health data for one purpose: to provide Cycle Syncing, which shows and predicts your cycle phases and provides reference information in Kiyo.
We share it for one purpose: so that the service providers named above can store your records and sync them between the devices you are signed in on, including the web version.
We do not collect, use, or share consumer health data for any other purpose. We do not use it for advertising or marketing, and we do not sell it.
How we process it
Your cycle records are stored on the device you enter them on. If you are signed in and have given separate consent to Cycle Syncing, they are also sent to our database so they can sync between your devices and the web version. Kiyo reads them to work out and show your cycle phases.
- Where they are held. Our database, authentication and server functions run on Supabase, in the AWS Asia Pacific (Tokyo) region (
ap-northeast-1), in Japan. - How they travel. All communication between Kiyo and our servers is encrypted with TLS.
- Who can reach them. Access to our servers and database is limited to the minimum needed to operate the service.
- What our service providers may do with them. Only what our contract with them allows, which is to provide the storage, authentication and server functions Kiyo runs on.
- How long we keep them. Until you turn the feature off and delete the records, or until you delete your account.
How to make a request about your consumer health data
If you are a Nevada consumer, you have the right to ask us to:
- confirm whether we are collecting, sharing, or selling your consumer health data;
- give you a list of all third parties we have shared it with or sold it to;
- stop collecting, sharing, or selling it; and
- delete it, including from our backups.
You can do the following yourself in Kiyo:
- Withdraw consent and delete: in settings, tap Withdraw cycle syncing consent. Your cycle records are deleted from this device straight away and removed from our servers the next time the app syncs. Withdrawal applies to your whole account, so the other devices you are signed in on delete their copies as well.
- Turn the feature off without deleting: the Cycle Syncing switch stops the feature but keeps your records, so you can turn it back on later. Use Withdraw cycle syncing consent if you want the records gone.
- Delete everything: delete your account in settings.
For anything else β including a request for the list of recipients β write to team@kiyoplanner.com from the email address on your Kiyo account. We may ask you for information we need to confirm that the request is really yours, and if we cannot confirm it we cannot act on the request.
We will respond without undue delay and within 45 days of receiving your request. If the request is complex we may extend that once by a further 45 days, and we will tell you why before we do.
When we act on a request to delete, we delete your cycle records from our systems within 30 days and tell the service providers that hold them for us to do the same.
If we refuse to act on your request, we will tell you why and how to appeal. To appeal, reply to that message or write to team@kiyoplanner.com with "Appeal" in the subject line β the same address you used to make the request. We will tell you in writing within 45 days what we decided and why, and if we still do not act, we will give you the contact information for the Nevada Office of the Attorney General so that you can submit a complaint.
How you can review and change your records
Your cycle records are shown to you in Kiyo on the Cycle tab, and Cycle records βΊ there opens the full list of the cycles you have recorded. In that list you can change the start or end date of any record, or delete it.
You do not need to ask us to make a change. The records you keep in Kiyo are the records we hold, so an edit or a deletion you make there is applied on our servers and on the other devices you are signed in on the next time the app syncs.
How we tell you about changes to this policy
We will not collect, use, or share categories of consumer health data, or use it for purposes, or share it with third parties or affiliates, that are not described in this policy without first disclosing them to you and obtaining your affirmative, voluntary consent.
When this policy changes, we post the change on our website (kiyoplanner.com) at least 7 days before it takes effect β at least 30 days before, if the change materially affects your rights. The effective date at the top of this page changes with it.
Third-party collection across websites and services
No third party collects consumer health data over time and across different websites or online services when you use Kiyo.
The app uses no cookies and no tracking SDKs for advertising or behavioral analysis, and sends nothing about you to third-party analytics services. The web version uses the website visit statistics feature provided by our web host, Vercel, Inc., which uses no cookies and no browser storage, does not follow you across other sites, and is never combined with what you entered in Kiyo β your events, to-dos, habits or menstrual cycle records.
Contact us
- Project July (Representative: Sol Kim)
- 40-14, Yonghwahaebyeon 1-gil, Geundeok-myeon, Samcheok-si, Gangwon State, Republic of Korea
- team@kiyoplanner.com