Privacy policy
Privacy Policy
Seed Cycle Limited
Covering Seed Cycle, Halo of Health, and Luna
Last updated: 16 April 2026
Data Controller
Seed Cycle Limited (“we”, “us”, “our”) is the data controller responsible for your personal information under this Privacy Policy. This policy covers all products and trading names operated by Seed Cycle Limited, including the Seed Cycle e-commerce store, the Halo of Health cycle-aware guidance application, and the Luna AI companion.
• Company name: Seed Cycle Limited
• Company number: 15412118 (registered in England and Wales)
• ICO registration: ZC124360
• Registered address: Chetwynd Business Park, 2 Regan Way, Chilwell, Beeston, Nottingham NG9 6RZ, United Kingdom
• General contact: support@seedcycle.com
• Data protection enquiries: support@seedcycle.com (addressed FAO Data Protection Lead)
1. Introduction
Seed Cycle Limited operates a group of connected products and services:
• Seed Cycle — our online store and website (seedcycle.com) offering organic seed cycling blends and related products, powered by Shopify.
• Halo of Health — our cycle-aware daily guidance application (the “App”), providing personalised nutrition and lifestyle guidance across the menstrual cycle.
• Luna — the AI companion built into Halo of Health and accessible via luna.seedcycle.com, offering conversational guidance on hormonal health and cycle awareness.
Throughout this policy, the term “Services” refers to all of the above collectively. We use the term “personal information” or “personal data” interchangeably to refer to information that identifies you or can reasonably be linked to you.
This Privacy Policy explains what personal data we collect, why we collect it, how we use it, how we disclose it, and your rights regarding your data, in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
Please read this Privacy Policy carefully. By using any of the Services, you acknowledge that you have read this Privacy Policy and understand the collection, use, and disclosure of your information as described here. If there is a conflict between our Terms of Service and this Privacy Policy, this Privacy Policy controls with respect to the collection, processing, and disclosure of your personal information.
2. Personal Information We Collect
The categories of personal information we process depend on which of our Services you use. Personal data does not include information that is collected anonymously or that has been de-identified so that it cannot identify or be reasonably linked to you.
2.1 Information collected across all Services
• Contact details including your name, email address, phone number, billing address, and shipping address.
• Communications with us including the content of any messages you send us (for example, customer support enquiries).
• Device and technical information including device type, browser type, IP address, other unique identifiers, and approximate location (country level only for the App; more specific location may be collected by Shopify for the store). We do not track your precise location.
• Usage information including how and when you interact with or navigate the Services.
2.2 Information collected through the Seed Cycle store (seedcycle.com)
• Financial information including credit card, debit card, and financial account numbers, payment card information, financial account information, transaction details, form of payment, payment confirmation, and other payment details.
• Account information including your username, password, security questions, preferences, and settings.
• Transaction information including the items you view, put in your cart, add to your wishlist, or purchase, return, exchange or cancel, and your past transactions.
2.3 Information collected through Halo of Health (the App)
Account data
When you create an account, we collect your email address and an encrypted password. These are stored securely in our database hosted by Supabase (PostgreSQL) with row-level security policies ensuring only you can access your own data.
Profile and lifestyle data
During onboarding and through your profile settings, you may provide information including your health goal (e.g. hormone balance, fertility, perimenopause), life stage, cycle length, and the start date of your last period. This information is used to personalise your experience within the App.
Daily log data
Each day you may choose to log information including mood (1–10 scale), energy level, physical symptoms, sleep duration, basal body temperature (BBT), water intake, seed blend intake, and movement activity. This data is stored in your personal account and is used to provide personalised guidance and to track your health patterns over time.
Cycle data
The App calculates your current cycle day and phase (menstrual, follicular, ovulatory, or luteal) based on the period start date you provide. Cycle history is stored to enable trend analysis and cycle-to-cycle comparison.
Wearable and health platform integrations
Where you choose to connect a supported third-party wearable or health platform, we receive and process the biometric data relevant to cycle phase detection. This is covered in detail in Section 6.
2.4 Information collected through Luna
When you interact with Luna via text chat, the App sends your current cycle context (phase, day, mood, energy, symptoms, and sleep data) to the Luna API endpoint to generate personalised responses. Section 7 describes Luna data handling in detail.
3. Special Category (Sensitive) Data
Some of the data we collect — including menstrual cycle information, symptoms, biometric data received from wearables, and other health-related logs — constitutes special category data under UK GDPR (Article 9).
We process this data on the basis of your explicit consent, which you provide when you create an account in Halo of Health and begin logging, and (where applicable) when you connect a wearable integration. You may withdraw this consent at any time by deleting your account or disconnecting the relevant integration (see Sections 6 and 11).
We do not use your special category data for profiling in a way that produces legal or similarly significant effects on you, and we do not share it with third parties for marketing purposes under any circumstances.
4. Lawful Bases for Processing
Under UK GDPR we are required to have a lawful basis for each purpose for which we process your personal data. The lawful bases we rely on are:
• Performance of a contract (Article 6(1)(b)) — to fulfil orders and provide the Services you have requested, including account creation and product delivery.
• Legitimate interests (Article 6(1)(f)) — to improve our Services, understand how the App and store are used, prevent fraud, secure our systems, and communicate with you about your account or orders. We balance our interests against your rights and freedoms.
• Consent (Article 6(1)(a)) — for marketing communications, optional analytics, and for any processing of your health data in Halo of Health and via wearable integrations.
• Explicit consent (Article 9(2)(a)) — for processing your special category health data, including cycle logs, symptoms, and biometric data received from wearables.
• Legal obligation (Article 6(1)(c)) — where required to comply with applicable law or respond to valid legal process, including requests from law enforcement or government agencies.
5. How We Use Your Personal Information
Depending on how you interact with us and which Services you use, we use personal information for the following purposes:
5.1 Providing, tailoring, and improving the Services
We use your personal information to provide you with the Services, including to perform our contract with you, to process your payments, to fulfil your orders, to remember your preferences and items you are interested in, to send notifications to you related to your account, to process purchases, returns, exchanges or other transactions, to create, maintain and otherwise manage your account, to arrange for shipping, to facilitate any returns and exchanges, to enable you to post reviews, and to create a customised shopping experience for you, such as recommending products related to your purchases. This may include using your personal information to better tailor and improve the Services.
5.2 Personalised guidance (Halo of Health)
• Calculating your cycle phase and providing phase-aware nutrition and lifestyle recommendations.
• Providing personalised responses from Luna, your in-app AI guide.
• Displaying your health data back to you through dashboards, streaks, habit rings, and cycle comparisons.
• Suggesting relevant Seed Cycle products based on your current cycle phase.
5.3 Marketing and advertising
We use your personal information for marketing and promotional purposes, such as to send marketing, advertising and promotional communications by email, text message or postal mail, and to show you online advertisements for products or services on the Services or other websites, including based on items you previously have purchased or added to your cart and other activity on the Services.
We will never use your health data (cycle logs, symptoms, biometric data, wearable data) for marketing or advertising purposes. We will never sell your personal data to third parties. We will never share your health data with advertisers, social media platforms, or any third party for marketing purposes.
5.4 Security and fraud prevention
We use your personal information to authenticate your account, to provide a secure payment and shopping experience, detect, investigate or take action regarding possible fraudulent, illegal, unsafe, or malicious activity, protect public safety, and to secure our Services. If you choose to use the Services and register an account, you are responsible for keeping your account credentials safe. We highly recommend that you do not share your username, password or other access details with anyone else.
5.5 Communicating with you
We use your personal information to provide you with customer support, to be responsive to you, to provide effective services to you, and to maintain our business relationship with you.
5.6 Legal reasons
We use your personal information to comply with applicable law or respond to valid legal process, including requests from law enforcement or government agencies, to investigate or participate in civil discovery, potential or actual litigation, or other adversarial legal proceedings, and to enforce or investigate potential violations of our terms or policies.
6. Wearable and Health Platform Integrations
Halo of Health offers optional integrations with supported third-party wearables and health platforms. Connecting an integration is entirely at your discretion. You must provide separate, explicit consent before any data is exchanged.
6.1 How integrations work
When you choose to connect a wearable or health platform, you are redirected to that provider’s authentication screen, where you log in with your own credentials and choose what data to share with Halo of Health. We never see or store your credentials for third-party services.
Once authorised, we receive a limited set of health data (such as temperature deviation, heart rate variability, and resting heart rate) that we use to help identify your menstrual cycle phase more accurately and provide better-personalised guidance.
6.2 Processing and retention of wearable data
Wearable data is processed for the sole purpose of deriving cycle phase and related insights for display within your account. Once incorporated into your Halo of Health cycle metrics, raw wearable data is not retained beyond what is necessary to perform this derivation. You retain your derived cycle history in Halo of Health; the raw third-party data is discarded in line with our retention principles and the terms of the relevant third-party provider.
Where a third-party provider’s terms impose a maximum cache duration for their raw data, we honour that duration as a maximum and typically delete raw data well within that window. Derived cycle metrics (your cycle phase history, ovulation estimates, and personal insights) are treated as your own Halo of Health data and retained in line with Section 9 of this policy.
6.3 Disconnecting an integration
You can disconnect any integration at any time from within the App. When you disconnect:
• We immediately stop requesting any further data from the provider.
• Any raw third-party data still held in our systems is deleted.
• You will be offered a choice regarding derived cycle metrics that were computed using third-party data: you may choose to retain them as part of your personal cycle history in Halo of Health, or delete them. Your choice is recorded as a consent action.
6.4 Currently supported integrations
The integrations currently supported or planned are listed below. We will update this list as integrations are added or removed.
• Apple Health and Health Connect (Google) — platform aggregators that allow you to bring in health data from a wide range of devices you already use. These are platform-level integrations and do not involve direct device-level partnerships.
• Oura Ring (planned) — temperature trend, heart rate variability, and resting heart rate data used to support cycle phase detection, subject to your explicit consent and authorisation via the Oura developer platform.
7. Luna AI and Your Data
Luna is the AI companion built into Halo of Health and accessible via luna.seedcycle.com. Luna uses your cycle context to provide conversational guidance on hormonal health and cycle-aware nutrition and lifestyle.
Important information about Luna and your data:
• Luna does not store your conversation history between sessions. Each conversation starts fresh.
• Your cycle context (phase, day, mood, energy, symptoms, and sleep data) is sent to Luna only at the moment you ask a question. It is not stored by the AI service after the response is generated.
• Luna’s text chat is powered by Anthropic’s Claude AI. Anthropic’s data handling policies apply to the processing of your messages. Anthropic does not use API inputs to train its models.
• Luna’s voice feature is powered by ElevenLabs. Voice interactions are processed in real time and are not stored.
8. How We Disclose Personal Information
In certain circumstances, we may disclose your personal information to third parties for legitimate purposes subject to this Privacy Policy. Such circumstances may include:
• With Shopify, vendors and other third parties who perform services on our behalf (e.g. IT management, payment processing, data analytics, customer support, cloud storage, fulfilment and shipping).
• With business and marketing partners to provide marketing services and advertise to you. For example, we use Shopify to support personalised advertising with third-party services based on your online activity with different merchants and websites. Our business and marketing partners will use your information in accordance with their own privacy notices. Depending on where you reside, you may have a right to direct us not to share information about you to show you targeted advertisements and marketing based on your online activity with different merchants and websites.
• When you direct, request us or otherwise consent to our disclosure of certain information to third parties, such as to ship you products or through your use of social media widgets or login integrations.
• With our affiliates or otherwise within our corporate group.
• In connection with a business transaction such as a merger or bankruptcy, to comply with any applicable legal obligations (including to respond to subpoenas, search warrants and similar requests), to enforce any applicable terms of service or policies, and to protect or defend the Services, our rights, and the rights of our users or others.
8.1 Relationship with Shopify
The Seed Cycle store is hosted by Shopify, which collects and processes personal information about your access to and use of the store in order to provide and improve it for you. Information you submit to the store will be transmitted to and shared with Shopify as well as third parties that may be located in countries other than where you reside, in order to provide and improve the store for you. In addition, to help protect, grow, and improve our business, we use certain Shopify enhanced features that incorporate data and information obtained from your interactions with our store, along with other merchants and with Shopify. To provide these enhanced features, Shopify may make use of personal information collected about your interactions with our store, along with other merchants, and with Shopify. In these circumstances, Shopify is responsible for the processing of your personal information, including for responding to your requests to exercise your rights over use of your personal information for these purposes.
8.2 Key third-party processors
The following are the main third-party processors that handle your personal data on our behalf. Each operates under its own privacy policy and applicable safeguards, and we update this list as our processors change.
• Shopify — e-commerce platform hosting seedcycle.com and processing orders.
• Supabase — PostgreSQL database hosting for Halo of Health, located within the European Union.
• Anthropic — AI processing for Luna text chat (USA).
• ElevenLabs — voice synthesis for Luna (USA).
• Oura (planned) — source of wearable biometric data where users connect an Oura account.
• Payment processors — through Shopify’s payment provider network.
• Fulfilment and shipping providers — for physical product delivery.
• Email service providers — for transactional and marketing communications.
9. Data Storage, Security and Retention
9.1 Security measures
Your data is stored in a Supabase-hosted PostgreSQL database (for Halo of Health) and within Shopify’s infrastructure (for the Seed Cycle store) with the following security measures:
• Row-level security (RLS): database policies ensure that each user can only read and write their own data.
• Encryption: all data is encrypted in transit (HTTPS/TLS) and at rest.
• Password security: passwords are hashed and never stored in plain text.
• Access controls: API keys are stored as environment variables and are rotated regularly.
Please be aware that no security measures are perfect or impenetrable, and we cannot guarantee “perfect security.” In addition, any information you send to us may not be secure while in transit. We recommend that you do not use unsecure channels to communicate sensitive or confidential information to us.
9.2 Where your data is stored
Our Halo of Health database infrastructure is hosted by Supabase within the European Union. Shopify’s servers may process data in countries outside the UK and EEA. We do not transfer your personal data outside of the UK and EEA except where necessary to process Luna AI requests (handled by Anthropic and ElevenLabs in the USA under appropriate safeguards) and where data is processed by Shopify’s international infrastructure.
9.3 Retention periods
How long we retain your personal information depends on different factors, such as whether we need the information to maintain your account, to provide you with the Services, comply with legal obligations, resolve disputes, or enforce other applicable contracts and policies. Our general principles are:
• Halo of Health account data: retained for as long as your account is active. If you delete your account, all associated data (profile, cycle history, daily logs, and habit data) is permanently deleted from our database. We do not retain backup copies of deleted user data beyond standard database backup cycles, which are purged within 30 days.
• Raw wearable data: retained only for as long as necessary to derive your cycle metrics, and in any event no longer than the maximum cache period required by the relevant third-party provider’s terms (and typically shorter). Derived metrics continue to be retained as part of your Halo of Health cycle history until you delete your account or disconnect and delete.
• Seed Cycle store data: transaction and order data is retained for the periods required to comply with UK accounting, tax, and consumer law obligations, typically up to seven years for financial records.
• Marketing contact data: retained until you unsubscribe or withdraw consent, after which it is removed from active marketing lists.
10. International Transfers
Please note that we may transfer, store and process your personal information outside the country you live in.
If we transfer your personal information out of the European Economic Area or the United Kingdom, we will rely on recognised transfer mechanisms like the European Commission’s Standard Contractual Clauses, or any equivalent contracts issued by the relevant competent authority of the UK, as relevant, unless the data transfer is to a country that has been determined to provide an adequate level of protection.
11. Your Rights and Choices
Under UK GDPR and depending on where you live, you may have some or all of the rights listed below in relation to your personal information. These rights are not absolute and, in certain cases, we may decline your request as permitted by law.
• Right of access: you can request access to personal information that we hold about you. Within Halo of Health, you can download all of your personal data at any time using the “Download My Data” button in your Profile settings.
• Right to rectification: you can request that we correct inaccurate personal information we hold about you. You can update or correct much of your data directly through the App or store at any time.
• Right to erasure: you can request that we delete personal information we maintain about you. Within Halo of Health, you can delete your account and all associated data using the “Delete Account” button in your Profile settings.
• Right of portability: you can receive a copy of the personal information we hold about you in a standard JSON format that you can use elsewhere.
• Right to withdraw consent: where we rely on consent to process your personal information, you can withdraw this consent at any time. Withdrawal does not affect the lawfulness of any processing based on your consent before its withdrawal.
• Right to object and to restrict processing: you may have the right to ask us to stop or restrict our processing of personal information for certain purposes.
• Right to opt out of sale or sharing for targeted advertising: depending on where you reside, you may have a right to opt out of the “sale” or “share” of your personal information or to opt out of the processing of your personal information for purposes considered to be “targeted advertising,” as defined in applicable privacy laws. If you visit our website with the Global Privacy Control opt-out preference signal enabled, depending on where you are, we will automatically treat this as a request to opt-out for the device and browser that you use to visit the website. Other than Global Privacy Control, we do not recognise other “Do Not Track” signals.
• Managing communication preferences: we may send you promotional emails, and you may opt out of receiving these at any time by using the unsubscribe option displayed in our emails to you. If you opt out, we may still send you non-promotional emails, such as those about your account or orders you have made.
• Right to lodge a complaint: if you believe your data rights have been violated, you have the right to lodge a complaint with the Information Commissioner’s Office (ICO) at ico.org.uk. For the EEA, you can find a list of the responsible data protection supervisory authorities on the European Data Protection Board website.
To exercise any of these rights, or for any data-related enquiries, contact us at support@seedcycle.com. We will not discriminate against you for exercising any of these rights. We may need to verify your identity before we can process your requests, as permitted or required under applicable law. In accordance with applicable laws, you may designate an authorised agent to make requests on your behalf; before accepting such a request, we will require that the agent provide proof you have authorised them to act on your behalf, and we may need you to verify your identity directly with us. We will respond to your request in a timely manner as required under applicable law.
12. Cookies and Analytics
The Halo of Health App does not use advertising cookies or third-party tracking cookies. We may use essential cookies for authentication and session management. If we introduce analytics in the future, we will update this policy and seek your consent where required.
The Seed Cycle store (seedcycle.com), as a Shopify-hosted site, uses cookies and similar technologies for essential site functionality, analytics, and (with your consent) targeted advertising. You can manage cookie preferences through the cookie banner on the site.
13. Children’s Data
Halo of Health is not intended for use by individuals under the age of 16, and the Seed Cycle store is not intended to be used by children under the age of majority in their jurisdiction. We do not knowingly collect personal data from children. If you are the parent or guardian of a child who has provided us with their personal information, or if you believe a child has provided us with personal data, please contact us at support@seedcycle.com and we will delete it promptly.
As of the effective date of this Privacy Policy, we do not have actual knowledge that we “share” or “sell” (as those terms are defined in applicable law) personal information of individuals under 16 years of age.
14. Third-Party Websites and Links
Our Services may provide links to websites or other online platforms operated by third parties, including (where relevant) links between the Seed Cycle online store and Halo of Health, and outbound links to third-party content. If you follow links to sites not affiliated or controlled by us, you should review their privacy and security policies and other terms and conditions. We do not guarantee and are not responsible for the privacy or security of such sites, including the accuracy, completeness, or reliability of information found on these sites. Information you provide on public or semi-public venues, including information you share on third-party social networking platforms, may also be viewable by other users of the Services and/or users of those third-party platforms without limitation as to its use by us or by a third party. Our inclusion of such links does not, by itself, imply any endorsement of the content on such platforms or of their owners or operators, except as disclosed on the Services.
15. Complaints
If you have complaints about how we process your personal information, please contact us at support@seedcycle.com. Depending on where you live, you may have the right to appeal our decision by contacting us at the same address, or to lodge your complaint with your local data protection authority. UK residents may lodge a complaint with the Information Commissioner’s Office (ICO) at ico.org.uk.
16. Changes to This Privacy Policy
We may update this Privacy Policy from time to time, including to reflect changes to our practices or for other operational, legal, or regulatory reasons. If we make material changes, we will notify you through the App, by email, or by posting a prominent notice on the relevant Services. The “Last updated” date at the top of this policy indicates when it was last revised. Your continued use of the Services after any update constitutes your acceptance of the revised Privacy Policy, to the extent permitted by applicable law.
17. Contact Us
If you have any questions about this Privacy Policy or how we handle your data, please contact us:
Seed Cycle Limited
Chetwynd Business Park, 2 Regan Way, Chilwell, Beeston, Nottingham NG9 6RZ, United Kingdom
Email: support@seedcycle.com
Company number: 15412118
ICO registration: ZC124360
Halo of Health and Luna — operated by Seed Cycle Limited