Privacy policy

Privacy Policy

Seed Cycle Limited

Covering Seed Cycle, Halo of Health, and Luna

Last updated: 7 June 2026

Data Controller

Seed Cycle Limited (“we”, “us”, “our”) is the data controller responsible for your personal information under this Privacy Policy. This policy covers all products and trading names operated by Seed Cycle Limited, including the Seed Cycle e-commerce store, the Halo of Health cycle-aware guidance application, and the Luna AI companion.

• Company name: Seed Cycle Limited

• Company number: 15412118 (registered in England and Wales)

• ICO registration: ZC124360

• Registered address: Chetwynd Business Park, 2 Regan Way, Chilwell, Beeston, Nottingham NG9 6RZ, United Kingdom

• General contact: support@seedcycle.com

• Data protection enquiries: support@seedcycle.com (addressed FAO Data Protection Lead)

1. Introduction

Seed Cycle Limited operates a group of connected products and services:

• Seed Cycle — our online store and website (seedcycle.com) offering organic seed cycling blends and related products, powered by Shopify.

• Halo of Health — our cycle-aware daily guidance application (the “App”), providing personalised nutrition and lifestyle guidance across the menstrual cycle.

• Luna — the AI companion built into Halo of Health and accessible via luna.seedcycle.com, offering conversational guidance on hormonal health and cycle awareness.

Throughout this policy, the term “Services” refers to all of the above collectively. We use the term “personal information” or “personal data” interchangeably to refer to information that identifies you or can reasonably be linked to you.

This Privacy Policy explains what personal data we collect, why we collect it, how we use it, how we disclose it, and your rights regarding your data, in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

Please read this Privacy Policy carefully. By using any of the Services, you acknowledge that you have read this Privacy Policy and understand the collection, use, and disclosure of your information as described here. If there is a conflict between our Terms of Service and this Privacy Policy, this Privacy Policy controls with respect to the collection, processing, and disclosure of your personal information.

Halo of Health is intended for users aged 18 and over. We do not knowingly collect personal information from anyone under 18 through Halo of Health or its associated waitlist. If you believe a minor has provided us with personal information through Halo of Health, please contact us at support@seedcycle.com and we will take appropriate steps to remove that information.

2. Personal Information We Collect

The categories of personal information we process depend on which of our Services you use. Personal data does not include information that is collected anonymously or that has been de-identified so that it cannot identify or be reasonably linked to you.

2.1 Information collected across all Services

• Contact details including your name, email address, phone number, billing address, and shipping address.

• Communications with us including the content of any messages you send us (for example, customer support enquiries).

• Device and technical information including device type, browser type, IP address, other unique identifiers, and approximate location (country level only for the App; more specific location may be collected by Shopify for the store). We do not track your precise location.

• Usage information including how and when you interact with or navigate the Services.

2.2 Information collected through the Seed Cycle store (seedcycle.com)

• Financial information including credit card, debit card, and financial account numbers, payment card information, financial account information, transaction details, form of payment, payment confirmation, and other payment details.

• Account information including your username, password, security questions, preferences, and settings.

• Transaction information including the items you view, put in your cart, add to your wishlist, or purchase, return, exchange or cancel, and your past transactions.

2.3 Information collected through Halo of Health (the App)

Account data

When you create an account, we collect your email address and an encrypted password. These are stored securely in our database hosted by Supabase (PostgreSQL) with row-level security policies ensuring only you can access your own data.

Profile and lifestyle data

During onboarding and through your profile settings, you may provide information including your life stage, age, cycle length, and the start date of your last period. This information is used to personalise your experience within the App.

Daily log data

Each day you may choose to log information including mood (1–10 scale), energy level, physical symptoms, sleep duration, basal body temperature (BBT), water intake, seed blend intake, and movement activity. This data is stored in your personal account and is used to provide personalised guidance and to track your health patterns over time.

Cycle data

The App calculates your current cycle day and phase (menstrual, follicular, ovulatory, or luteal) based on the period start date you provide. Cycle history is stored to enable trend analysis and cycle-to-cycle comparison.

Wearable and health platform integrations

Where you choose to connect a supported third-party wearable or health platform, we receive and process the biometric data relevant to cycle phase detection. This is covered in detail in Section 6.

2.4 Information collected through Luna

When you interact with Luna via text chat, the App sends your current cycle context (phase, day, mood, energy, symptoms, and sleep data) to the Luna API endpoint to generate personalised responses. Section 7 describes Luna data handling in detail.

2.5 Information collected through the Halo of Health waitlist

Before Halo of Health launches publicly, we operate a waitlist for prospective users at haloofhealth.com. When you sign up for the waitlist, we collect:

• Your email address and name, for the purpose of sending you launch updates and pre-launch communications.

• Optionally, your life stage and age, captured via a separate form sent to your email after you have signed up to the waitlist. This information is collected so that we can tailor our pre-launch communications to your interests and, when the App launches, so we can offer to pre-populate your in-app account setup with the answers you have given.

Your life stage answer is health-adjacent information and is treated as special category data under UK GDPR Article 9. We process this data on the basis of your explicit consent (Article 9(2)(a)), which you provide by submitting the form. You may withdraw this consent at any time by emailing support@seedcycle.com, by clicking the unsubscribe link in any waitlist email, or by deleting your account once the App launches.

We record the timestamp of your consent at the moment you submit the form, so we can demonstrate that consent was given freely and explicitly. This timestamp is stored alongside your other waitlist data and is included in any data export you request.

When you install Halo of Health post-launch, your waitlist data is read into the App so we can offer to pre-fill the relevant parts of your account setup. You can choose to confirm, change, or skip the pre-filled values. After your account is created in the App, your waitlist data is retained by our email marketing provider (Klaviyo) until you unsubscribe or delete your account.

We do not use waitlist data for any purpose other than the ones described above. We do not share waitlist data with any third party for marketing purposes. Klaviyo, our email marketing provider, processes this data on our behalf as a data processor under a Data Processing Agreement; their privacy practices are documented at klaviyo.com.

3. Special Category (Sensitive) Data

Some of the data we collect — including menstrual cycle information, symptoms, biometric data received from wearables, and other health-related logs — constitutes special category data under UK GDPR (Article 9).

We process this data on the basis of your explicit consent, which you provide when you create an account in Halo of Health and begin logging, when you submit health-adjacent answers via our pre-launch waitlist forms, and (where applicable) when you connect a wearable integration. You may withdraw this consent at any time by deleting your account, by unsubscribing from waitlist communications, or by disconnecting the relevant integration (see Sections 6 and 11).

We do not use your special category data for profiling in a way that produces legal or similarly significant effects on you, and we do not share it with third parties for marketing purposes under any circumstances.

4. Lawful Bases for Processing

Under UK GDPR we are required to have a lawful basis for each purpose for which we process your personal data. The lawful bases we rely on are:

• Performance of a contract (Article 6(1)(b)) — to fulfil orders and provide the Services you have requested, including account creation and product delivery.

• Legitimate interests (Article 6(1)(f)) — to improve our Services, understand how the App and store are used, prevent fraud, secure our systems, and communicate with you about your account or orders. We balance our interests against your rights and freedoms.

• Consent (Article 6(1)(a)) — for marketing communications, optional analytics, and for any processing of your health data in Halo of Health and via wearable integrations.

• Explicit consent (Article 9(2)(a)) — for processing your special category health data, including cycle logs, symptoms, biometric data received from wearables, and any health-adjacent waitlist answers (life stage, age) given before the App launches.

• Legal obligation (Article 6(1)(c)) — where required to comply with applicable law or respond to valid legal process, including requests from law enforcement or government agencies.

5. How We Use Your Personal Information

Depending on how you interact with us and which Services you use, we use personal information for the following purposes:

5.1 Providing, tailoring, and improving the Services

We use your personal information to provide you with the Services, including to perform our contract with you, to process your payments, to fulfil your orders, to remember your preferences and items you are interested in, to send notifications to you related to your account, to process purchases, returns, exchanges or other transactions, to create, maintain and otherwise manage your account, to arrange for shipping, to facilitate any returns and exchanges, to enable you to post reviews, and to create a customised shopping experience for you, such as recommending products related to your purchases. This may include using your personal information to better tailor and improve the Services.

5.2 Personalised guidance (Halo of Health)

• Calculating your cycle phase and providing phase-aware nutrition and lifestyle recommendations.

• Providing personalised responses from Luna, your in-app AI guide.

• Displaying your health data back to you through dashboards, streaks, habit rings, and cycle comparisons.

• Suggesting relevant Seed Cycle products based on your current cycle phase.

5.3 Marketing and advertising

We use your personal information for marketing and promotional purposes, such as to send marketing, advertising and promotional communications by email, text message or postal mail, and to show you online advertisements for products or services on the Services or other websites, including based on items you previously have purchased or added to your cart and other activity on the Services.

We will never use your health data (cycle logs, symptoms, biometric data, wearable data) for marketing or advertising purposes. We will never sell your personal data to third parties. We will never share your health data with advertisers, social media platforms, or any third party for marketing purposes.

5.4 Pre-launch waitlist communications

For users on the Halo of Health waitlist, we send pre-launch updates and announcements about the App. Where you have provided life stage and age via the waitlist form, we use this information to tailor the editorial content we send you (for example, sending perimenopause-relevant content to users in that life stage). You can unsubscribe from waitlist communications at any time.

5.5 Security and fraud prevention

We use your personal information to authenticate your account, to provide a secure payment and shopping experience, detect, investigate or take action regarding possible fraudulent, illegal, unsafe, or malicious activity, protect public safety, and to secure our Services. If you choose to use the Services and register an account, you are responsible for keeping your account credentials safe. We highly recommend that you do not share your username, password or other access details with anyone else.

5.6 Communicating with you

We use your personal information to provide you with customer support, to be responsive to you, to provide effective services to you, and to maintain our business relationship with you.

5.7 Legal reasons

We use your personal information to comply with applicable law or respond to valid legal process, including requests from law enforcement or government agencies, to investigate or participate in civil discovery, potential or actual litigation, or other adversarial legal proceedings, and to enforce or investigate potential violations of our terms or policies.

6. Wearable and Health Platform Integrations

Halo of Health offers optional integrations with supported third-party wearables and health platforms. Connecting an integration is entirely at your discretion. You must provide separate, explicit consent before any data is exchanged.

6.1 How integrations work

When you choose to connect a wearable or health platform, you are redirected to that provider’s authentication screen, where you log in with your own credentials and choose what data to share with Halo of Health. We never see or store your credentials for third-party services.

Once authorised, we receive a limited set of health data (such as temperature deviation, heart rate variability, and resting heart rate) that we use to help identify your menstrual cycle phase more accurately and provide better-personalised guidance.

6.2 Processing and retention of wearable data

Wearable data is processed for the sole purpose of deriving cycle phase and related insights for display within your account. Once incorporated into your Halo of Health cycle metrics, raw wearable data is not retained beyond what is necessary to perform this derivation. You retain your derived cycle history in Halo of Health; the raw third-party data is discarded in line with our retention principles and the terms of the relevant third-party provider.

Where a third-party provider’s terms impose a maximum cache duration for their raw data, we honour that duration as a maximum and typically delete raw data well within that window. Derived cycle metrics (your cycle phase history, ovulation estimates, and personal insights) are treated as your own Halo of Health data and retained in line with Section 9 of this policy.

6.3 Disconnecting an integration

You can disconnect any integration at any time from within the App. When you disconnect:

• We immediately stop requesting any further data from the provider.

• Any raw third-party data still held in our systems is deleted.

• You will be offered a choice regarding derived cycle metrics that were computed using third-party data: you may choose to retain them as part of your personal cycle history in Halo of Health, or delete them. Your choice is recorded as a consent action.

6.4 Currently supported integrations

The integrations currently supported or planned are listed below. We will update this list as integrations are added or removed.

• Apple Health and Health Connect (Google) — platform aggregators that allow you to bring in health data from a wide range of devices you already use. These are platform-level integrations and do not involve direct device-level partnerships.

• Oura Ring (planned) — temperature trend, heart rate variability, and resting heart rate data used to support cycle phase detection, subject to your explicit consent and authorisation via the Oura developer platform.

7. Luna AI and Your Data

Luna is the AI companion built into Halo of Health and accessible via luna.seedcycle.com. Luna uses your cycle context to provide conversational guidance on hormonal health and cycle-aware nutrition and lifestyle.

Important information about Luna and your data:

• Luna does not store your conversation history between sessions. Each conversation starts fresh.

• Your cycle context (phase, day, mood, energy, symptoms, and sleep data) is sent to Luna only at the moment you ask a question. It is not stored by the AI service after the response is generated.

• Luna’s text chat is powered by Anthropic’s Claude AI. Anthropic’s data handling policies apply to the processing of your messages. Anthropic does not use API inputs to train its models.

• Luna’s voice feature is powered by ElevenLabs. Voice interactions are processed in real time and are not stored.

• Luna provides general wellness information and is not a substitute for medical advice. Luna’s responses are generated by artificial intelligence and may contain errors. You should always consult a qualified healthcare professional for medical concerns. See our Terms of Service for further details.

8. How We Disclose Personal Information

In certain circumstances, we may disclose your personal information to third parties for legitimate purposes subject to this Privacy Policy. Such circumstances may include:

• With Shopify, vendors and other third parties who perform services on our behalf (e.g. IT management, payment processing, data analytics, customer support, cloud storage, fulfilment and shipping).

• With business and marketing partners to provide marketing services and advertise to you. For example, we use Shopify to support personalised advertising with third-party services based on your online activity with different merchants and websites. Our business and marketing partners will use your information in accordance with their own privacy notices. Depending on where you reside, you may have a right to direct us not to share information about you to show you targeted advertisements and marketing based on your online activity with different merchants and websites.

• When you direct, request us or otherwise consent to our disclosure of certain information to third parties, such as to ship you products or through your use of social media widgets or login integrations.

• With our affiliates or otherwise within our corporate group.

• In connection with a business transaction such as a merger or bankruptcy, to comply with any applicable legal obligations (including to respond to subpoenas, search warrants and similar requests), to enforce any applicable terms of service or policies, and to protect or defend the Services, our rights, and the rights of our users or others.

8.1 Relationship with Shopify

The Seed Cycle store is hosted by Shopify, which collects and processes personal information about your access to and use of the store in order to provide and improve it for you. Information you submit to the store will be transmitted to and shared with Shopify as well as third parties that may be located in countries other than where you reside, in order to provide and improve the store for you. In addition, to help protect, grow, and improve our business, we use certain Shopify enhanced features that incorporate data and information obtained from your interactions with our store, along with other merchants and with Shopify. To provide these enhanced features, Shopify may make use of personal information collected about your interactions with our store, along with other merchants, and with Shopify. In these circumstances, Shopify is responsible for the processing of your personal information, including for responding to your requests to exercise your rights over use of your personal information for these purposes.

8.2 Key third-party processors

The following are the main third-party processors that handle your personal data on our behalf. Each operates under its own privacy policy and applicable safeguards, and we update this list as our processors change.

• Shopify — e-commerce platform hosting seedcycle.com and processing orders.

• Supabase — PostgreSQL database hosting for Halo of Health, located within the European Union.

• Anthropic — AI processing for Luna text chat (USA).

• ElevenLabs — voice synthesis for Luna (USA).

• Klaviyo — email marketing and waitlist communications for Halo of Health, including the storage of waitlist sign-up data, life stage selections, age, and consent timestamps for pre-launch users. Klaviyo operates in the USA with EU data processing infrastructure; we use EU infrastructure where available.

• Vercel — application hosting for Halo of Health (halo-of-health.vercel.app) and haloofhealth.com (USA).

• Oura (planned) — source of wearable biometric data where users connect an Oura account.

• Payment processors — through Shopify’s payment provider network.

• Fulfilment and shipping providers — for physical product delivery.

• Email service providers — for transactional and marketing communications.

9. Data Storage, Security and Retention

9.1 Security measures

Your data is stored in a Supabase-hosted PostgreSQL database (for Halo of Health) and within Shopify’s infrastructure (for the Seed Cycle store) with the following security measures:

• Row-level security (RLS): database policies ensure that each user can only read and write their own data.

• Encryption: all data is encrypted in transit (HTTPS/TLS) and at rest.

• Password security: passwords are hashed and never stored in plain text.

• Access controls: API keys are stored as environment variables and are rotated regularly.

Please be aware that no security measures are perfect or impenetrable, and we cannot guarantee “perfect security.” In addition, any information you send to us may not be secure while in transit. We recommend that you do not use unsecure channels to communicate sensitive or confidential information to us.

9.2 Where your data is stored

Our Halo of Health database infrastructure is hosted by Supabase within the European Union. Shopify’s servers may process data in countries outside the UK and EEA. Klaviyo’s marketing data infrastructure has both US and EU options; we use Klaviyo’s EU infrastructure where available. We do not transfer your personal data outside of the UK and EEA except where necessary to process Luna AI requests (handled by Anthropic and ElevenLabs in the USA under appropriate safeguards) and where data is processed by Shopify’s international infrastructure.

9.3 Retention periods

How long we retain your personal information depends on different factors, such as whether we need the information to maintain your account, to provide you with the Services, comply with legal obligations, resolve disputes, or enforce other applicable contracts and policies. Our general principles are:

• Halo of Health account data: retained for as long as your account is active. If you delete your account, all associated data (profile, cycle history, daily logs, and habit data) is permanently deleted from our database. We do not retain backup copies of deleted user data beyond standard database backup cycles, which are purged within 30 days.

• Raw wearable data: retained only for as long as necessary to derive your cycle metrics, and in any event no longer than the maximum cache period required by the relevant third-party provider’s terms (and typically shorter). Derived metrics continue to be retained as part of your Halo of Health cycle history until you delete your account or disconnect and delete.

• Seed Cycle store data: transaction and order data is retained for the periods required to comply with UK accounting, tax, and consumer law obligations, typically up to seven years for financial records.

• Marketing contact data: retained until you unsubscribe or withdraw consent, after which it is removed from active marketing lists.

• Halo of Health waitlist data: retained until you unsubscribe from waitlist communications, install the App and your data is migrated to your active Halo of Health account, or 12 months after the public launch of the App — whichever is sooner. After that period, any remaining waitlist-only records are deleted.

10. International Transfers

Please note that we may transfer, store and process your personal information outside the country you live in.

If we transfer your personal information out of the European Economic Area or the United Kingdom, we will rely on recognised transfer mechanisms like the European Commission’s Standard Contractual Clauses, or any equivalent contracts issued by the relevant competent authority of the UK, as relevant, unless the data transfer is to a country that has been determined to provide an adequate level of protection.

11. Your Rights and Choices

Under UK GDPR and depending on where you live, you may have some or all of the rights listed below in relation to your personal information. These rights are not absolute and, in certain cases, we may decline your request as permitted by law.

• Right of access: you can request access to personal information that we hold about you. Within Halo of Health, you can download all of your personal data at any time using the “Download My Data” button in your Profile settings. For waitlist data, you can request a copy by emailing support@seedcycle.com.

• Right to rectification: you can request that we correct inaccurate personal information we hold about you. You can update or correct much of your data directly through the App or store at any time.

• Right to erasure: you can request that we delete personal information we maintain about you. Within Halo of Health, you can delete your account and all associated data using the “Delete Account” button in your Profile settings. For waitlist data, you can request deletion by emailing support@seedcycle.com or by unsubscribing from waitlist emails.

• Right of portability: you can receive a copy of the personal information we hold about you in a standard JSON format that you can use elsewhere.

• Right to withdraw consent: where we rely on consent to process your personal information, you can withdraw this consent at any time. Withdrawal does not affect the lawfulness of any processing based on your consent before its withdrawal. For waitlist health-adjacent data (life stage, age), consent can be withdrawn by emailing support@seedcycle.com, by unsubscribing from waitlist emails, or by deleting your account once the App is live.

• Right to object and to restrict processing: you may have the right to ask us to stop or restrict our processing of personal information for certain purposes.

• Right to opt out of sale or sharing for targeted advertising: depending on where you reside, you may have a right to opt out of the “sale” or “share” of your personal information or to opt out of the processing of your personal information for purposes considered to be “targeted advertising,” as defined in applicable privacy laws. If you visit our website with the Global Privacy Control opt-out preference signal enabled, depending on where you are, we will automatically treat this as a request to opt-out for the device and browser that you use to visit the website. Other than Global Privacy Control, we do not recognise other “Do Not Track” signals.

• Managing communication preferences: we may send you promotional emails, and you may opt out of receiving these at any time by using the unsubscribe option displayed in our emails to you. If you opt out, we may still send you non-promotional emails, such as those about your account or orders you have made.

• Right to lodge a complaint: if you believe your data rights have been violated, you have the right to lodge a complaint with the Information Commissioner’s Office (ICO) at ico.org.uk. For the EEA, you can find a list of the responsible data protection supervisory authorities on the European Data Protection Board website.

To exercise any of these rights, or for any data-related enquiries, contact us at support@seedcycle.com. We will not discriminate against you for exercising any of these rights. We may need to verify your identity before we can process your requests, as permitted or required under applicable law. In accordance with applicable laws, you may designate an authorised agent to make requests on your behalf; before accepting such a request, we will require that the agent provide proof you have authorised them to act on your behalf, and we may need you to verify your identity directly with us. We will respond to your request in a timely manner as required under applicable law.

12. Cookies and Analytics

The Halo of Health App does not use advertising cookies or third-party tracking cookies. We may use essential cookies for authentication and session management. If we introduce analytics in the future, we will update this policy and seek your consent where required.

The Seed Cycle store (seedcycle.com), as a Shopify-hosted site, uses cookies and similar technologies for essential site functionality, analytics, and (with your consent) targeted advertising. You can manage cookie preferences through the cookie banner on the site.

13. Children’s Data

Halo of Health is intended for users aged 18 and over. We do not knowingly collect personal data from children or anyone under 18 through Halo of Health or its associated waitlist. The Seed Cycle store is not intended to be used by children under the age of majority in their jurisdiction. If you are the parent or guardian of a child who has provided us with their personal information, or if you believe a child has provided us with personal data, please contact us at support@seedcycle.com and we will delete it promptly.

As of the effective date of this Privacy Policy, we do not have actual knowledge that we “share” or “sell” (as those terms are defined in applicable law) personal information of individuals under 18 years of age.

14. Third-Party Websites and Links

Our Services may provide links to websites or other online platforms operated by third parties, including (where relevant) links between the Seed Cycle online store and Halo of Health, and outbound links to third-party content. If you follow links to sites not affiliated or controlled by us, you should review their privacy and security policies and other terms and conditions. We do not guarantee and are not responsible for the privacy or security of such sites, including the accuracy, completeness, or reliability of information found on these sites. Information you provide on public or semi-public venues, including information you share on third-party social networking platforms, may also be viewable by other users of the Services and/or users of those third-party platforms without limitation as to its use by us or by a third party. Our inclusion of such links does not, by itself, imply any endorsement of the content on such platforms or of their owners or operators, except as disclosed on the Services.

15. Complaints

If you have complaints about how we process your personal information, please contact us at support@seedcycle.com. Depending on where you live, you may have the right to appeal our decision by contacting us at the same address, or to lodge your complaint with your local data protection authority. UK residents may lodge a complaint with the Information Commissioner’s Office (ICO) at ico.org.uk.

16. Changes to This Privacy Policy

We may update this Privacy Policy from time to time, including to reflect changes to our practices or for other operational, legal, or regulatory reasons. If we make material changes, we will notify you through the App, by email, or by posting a prominent notice on the relevant Services. The “Last updated” date at the top of this policy indicates when it was last revised. Your continued use of the Services after any update constitutes your acceptance of the revised Privacy Policy, to the extent permitted by applicable law.

17. Contact Us

If you have any questions about this Privacy Policy or how we handle your data, please contact us: