Privacy Policy

1. Introduction

Cycl Factory ("we", "us", "our") operates Da Cycl at dacycl.com and on mobile platforms. This Privacy Policy explains how we collect, use, and protect your personal information when you use our Service. By using Da Cycl, you agree to the collection and use of information in accordance with this policy.

2. Information We Collect

Account Information: - Email address (required for account creation and authentication) - Encrypted password (stored securely via Supabase Auth, never in plain text) App Usage Data: - DCA plans you create (token, amount, frequency, start date) - Event actions (Done/Skip, timestamps) - Tokens you follow in the Activity Board - News preferences and saved articles - Discipline scores, streaks, and Cycl Points - Push notification preferences and device tokens Device Information (mobile only): - Device type and operating system (for push notifications) - Expo push token (for sending notifications) Optional: - Solana wallet address (only if you choose to connect a wallet — never stored without consent) - iOS waitlist email (only if you submit via the waitlist form) We do NOT collect: - Financial account information or bank details - Credit card or payment information - Location data - Contacts or phone book data - Browsing history outside of Da Cycl - Biometric data

3. How We Use Your Information

We use your information to: - Provide and maintain the Da Cycl service - Authenticate your account and keep it secure - Save and sync your DCA plans across devices - Send push notifications for scheduled buy reminders (discipline notifications) - Send daily news digest notifications for tokens you follow - Calculate and display your discipline score and streaks - Track Cycl Points - Improve the Service based on usage patterns - Communicate important service updates - Respond to support inquiries We do NOT use your information to: - Sell to third parties - Target you with third-party advertising - Build advertising profiles - Share with data brokers

4. Push Notifications

If you enable push notifications, we store your device's push token to deliver: Discipline Notifications: - A reminder the day before your scheduled buys (listing all assets due) - A reminder on the day of your scheduled buys - These are sent at 8 PM (day before) and 9 AM (day of) in your device's local time News Notifications: - One daily digest at noon (device local time) summarising new articles for tokens you follow - Only sent if new articles exist since your last notification You can disable notifications at any time in the app Settings or your device's notification settings. Disabling notifications does not affect your DCA plans or discipline score.

5. Cryptocurrency and Stock Data

Da Cycl displays price data for cryptocurrencies (BTC, ETH, SOL, ADA, DOGE, LINK, AAVE, UNI, AVAX, TAO) sourced from CoinGecko. In future releases, price data for US-listed stocks (including NVDA, AAPL, MSFT, AMZN, GOOGL, META, TSLA, JPM, V, WMT, JNJ, XOM, MA, UNH, COST, HD, PG, BRK.B, ORCL, AMD) will also be displayed. This market data is cached in our database and refreshed periodically. We do not store your personal trading activity, exchange accounts, or brokerage information. We only store the DCA plans and event actions you manually enter in the App.

6. Data Storage and Security

Your data is stored securely using Supabase (PostgreSQL database with row-level security). We implement the following security measures: - All data transmitted over HTTPS/TLS encryption - Passwords hashed using industry-standard bcrypt - Row-level security policies ensuring users can only access their own data - Service role keys stored as environment variables, never in client code - No sensitive financial data is stored While we implement strong security measures, no method of transmission over the internet is 100% secure. We cannot guarantee absolute security.

7. Data Retention

We retain your data for as long as your account is active. If you delete your account, we will delete your personal data within 30 days. Anonymised, aggregated usage statistics may be retained indefinitely. To request account deletion, email us at: constantin@cyclfactory.com

8. Third-Party Services

Da Cycl uses the following third-party services that may process your data: - Supabase (supabase.com) — Database, authentication, and storage. Data stored in EU/US regions. - CoinGecko (coingecko.com) — Cryptocurrency price data. No personal data is shared. - Expo (expo.dev) — Mobile app infrastructure and push notification delivery. - Vercel (vercel.com) — Web hosting and deployment. - RSS Feed Providers — CoinDesk, Cointelegraph, Decrypt, The Block. No personal data is shared. Each of these services has its own privacy policy. We encourage you to review them.

9. Cookies and Analytics

Da Cycl's web application uses minimal cookies required for authentication (session tokens). We do not currently use advertising cookies or third-party tracking cookies. We may use anonymised analytics to understand how users navigate the app and improve the experience. No personally identifiable information is included in analytics data.

10. Children's Privacy

Da Cycl is not intended for use by anyone under the age of 18. We do not knowingly collect personal information from children under 18. If you become aware that a child has provided us with personal information, please contact us immediately at constantin@cyclfactory.com.

11. Your Rights

Depending on your location, you may have the following rights regarding your personal data: - Right to access — request a copy of your personal data - Right to rectification — correct inaccurate data - Right to erasure — request deletion of your data - Right to restrict processing — limit how we use your data - Right to data portability — receive your data in a portable format - Right to object — object to certain processing activities To exercise any of these rights, email us at: constantin@cyclfactory.com. We will respond within 30 days.

12. GDPR (European Users)

For users in the European Economic Area (EEA), our legal basis for processing your personal data is: - Contract performance — processing necessary to provide the Service you signed up for - Legitimate interests — improving the Service and preventing fraud - Consent — for push notifications (you can withdraw consent at any time) You have the right to lodge a complaint with your local data protection authority.

13. CCPA (California Users)

California residents have the right to: - Know what personal information is collected - Know whether personal information is sold or disclosed - Opt out of the sale of personal information We do not sell personal information. To exercise your CCPA rights, email: constantin@cyclfactory.com

14. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes via email or in-app notification. The date at the top of this page reflects when the policy was last updated. Continued use of the Service after changes constitutes acceptance of the updated policy.

15. Contact Us

For any privacy-related questions, requests, or concerns, contact us at: Cycl Factory Email: constantin@cyclfactory.com Website: https://dacycl.com

Da Cycl is operated by Cycl Factory · Terms of Service · Home