Back to Halo

Privacy Policy

Seed Cycle Limited

Covering Seed Cycle, Halo of Health, and Luna

Last updated: 7 June 2026

Data Controller

Seed Cycle Limited (“we”, “us”, “our”) is the data controller responsible for your personal information under this Privacy Policy. This policy covers all products and trading names operated by Seed Cycle Limited, including the Seed Cycle e-commerce store, the Halo of Health cycle-aware guidance application, and the Luna AI companion.

1. Introduction

Seed Cycle Limited operates a group of connected products and services:

Throughout this policy, the term “Services” refers to all of the above collectively. We use the term “personal information” or “personal data” interchangeably to refer to information that identifies you or can reasonably be linked to you.

This Privacy Policy explains what personal data we collect, why we collect it, how we use it, how we disclose it, and your rights regarding your data, in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

Please read this Privacy Policy carefully. By using any of the Services, you acknowledge that you have read this Privacy Policy and understand the collection, use, and disclosure of your information as described here. If there is a conflict between our Terms of Service and this Privacy Policy, this Privacy Policy controls with respect to the collection, processing, and disclosure of your personal information.

Halo of Health is intended for users aged 18 and over. We do not knowingly collect personal information from anyone under 18 through Halo of Health or its associated waitlist. If you believe a minor has provided us with personal information through Halo of Health, please contact us at hello@haloofhealth.com and we will take appropriate steps to remove that information.

2. Personal Information We Collect

The categories of personal information we process depend on which of our Services you use. Personal data does not include information that is collected anonymously or that has been de-identified so that it cannot identify or be reasonably linked to you.

2.1 Information collected across all Services

2.2 Information collected through the Seed Cycle store (seedcycle.com)

2.3 Information collected through Halo of Health (the App)

Account data

When you create an account, we collect your email address and an encrypted password. These are stored securely in our database hosted by Supabase (PostgreSQL) with row-level security policies ensuring only you can access your own data.

Profile and lifestyle data

During onboarding and through your profile settings, you may provide information including your life stage, age, cycle length, and the start date of your last period. This information is used to personalise your experience within the App.

Daily log data

Each day you may choose to log information including mood (1–10 scale), energy level, physical symptoms, sleep duration, basal body temperature (BBT), water intake, seed blend intake, and movement activity. This data is stored in your personal account and is used to provide personalised guidance and to track your health patterns over time.

Cycle data

The App calculates your current cycle day and phase (menstrual, follicular, ovulatory, or luteal) based on the period start date you provide. Cycle history is stored to enable trend analysis and cycle-to-cycle comparison.

Wearable and health platform integrations

Where you choose to connect a supported third-party wearable or health platform, we receive and process the biometric data relevant to cycle phase detection. This is covered in detail in Section 6.

2.4 Information collected through Luna

When you interact with Luna via text chat, the App sends your current cycle context (phase, day, mood, energy, symptoms, and sleep data) to the Luna API endpoint to generate personalised responses. Section 7 describes Luna data handling in detail.

2.5 Information collected through the Halo of Health waitlist

Before Halo of Health launches publicly, we operate a waitlist for prospective users at haloofhealth.com. When you sign up for the waitlist, we collect:

Your life stage answer is health-adjacent information and is treated as special category data under UK GDPR Article 9. We process this data on the basis of your explicit consent (Article 9(2)(a)), which you provide by submitting the form. You may withdraw this consent at any time by emailing hello@haloofhealth.com, by clicking the unsubscribe link in any waitlist email, or by deleting your account once the App launches.

We record the timestamp of your consent at the moment you submit the form, so we can demonstrate that consent was given freely and explicitly. This timestamp is stored alongside your other waitlist data and is included in any data export you request.

When you install Halo of Health post-launch, your waitlist data is read into the App so we can offer to pre-fill the relevant parts of your account setup. You can choose to confirm, change, or skip the pre-filled values. After your account is created in the App, your waitlist data is retained by our email marketing provider (Klaviyo) until you unsubscribe or delete your account.

We do not use waitlist data for any purpose other than the ones described above. We do not share waitlist data with any third party for marketing purposes. Klaviyo, our email marketing provider, processes this data on our behalf as a data processor under a Data Processing Agreement; their privacy practices are documented at klaviyo.com.

3. Special Category (Sensitive) Data

Some of the data we collect — including menstrual cycle information, symptoms, biometric data received from wearables, and other health-related logs — constitutes special category data under UK GDPR (Article 9).

We process this data on the basis of your explicit consent, which you provide when you create an account in Halo of Health and begin logging, when you submit health-adjacent answers via our pre-launch waitlist forms, and (where applicable) when you connect a wearable integration. You may withdraw this consent at any time by deleting your account, by unsubscribing from waitlist communications, or by disconnecting the relevant integration (see Sections 6 and 11).

We do not use your special category data for profiling in a way that produces legal or similarly significant effects on you, and we do not share it with third parties for marketing purposes under any circumstances.

4. Lawful Bases for Processing

Under UK GDPR we are required to have a lawful basis for each purpose for which we process your personal data. The lawful bases we rely on are:

5. How We Use Your Personal Information

Depending on how you interact with us and which Services you use, we use personal information for the following purposes:

5.1 Providing, tailoring, and improving the Services

We use your personal information to provide you with the Services, including to perform our contract with you, to process your payments, to fulfil your orders, to remember your preferences and items you are interested in, to send notifications to you related to your account, to process purchases, returns, exchanges or other transactions, to create, maintain and otherwise manage your account, to arrange for shipping, to facilitate any returns and exchanges, to enable you to post reviews, and to create a customised shopping experience for you, such as recommending products related to your purchases. This may include using your personal information to better tailor and improve the Services.

5.2 Personalised guidance (Halo of Health)

5.3 Marketing and advertising

We use your personal information for marketing and promotional purposes, such as to send marketing, advertising and promotional communications by email, text message or postal mail, and to show you online advertisements for products or services on the Services or other websites, including based on items you previously have purchased or added to your cart and other activity on the Services.

We will never use your health data (cycle logs, symptoms, biometric data, wearable data) for marketing or advertising purposes. We will never sell your personal data to third parties. We will never share your health data with advertisers, social media platforms, or any third party for marketing purposes.

5.4 Pre-launch waitlist communications

For users on the Halo of Health waitlist, we send pre-launch updates and announcements about the App. Where you have provided life stage and age via the waitlist form, we use this information to tailor the editorial content we send you (for example, sending perimenopause-relevant content to users in that life stage). You can unsubscribe from waitlist communications at any time.

5.5 Security and fraud prevention

We use your personal information to authenticate your account, to provide a secure payment and shopping experience, detect, investigate or take action regarding possible fraudulent, illegal, unsafe, or malicious activity, protect public safety, and to secure our Services. If you choose to use the Services and register an account, you are responsible for keeping your account credentials safe. We highly recommend that you do not share your username, password or other access details with anyone else.

5.6 Communicating with you

We use your personal information to provide you with customer support, to be responsive to you, to provide effective services to you, and to maintain our business relationship with you.

5.7 Legal reasons

We use your personal information to comply with applicable law or respond to valid legal process, including requests from law enforcement or government agencies, to investigate or participate in civil discovery, potential or actual litigation, or other adversarial legal proceedings, and to enforce or investigate potential violations of our terms or policies.

6. Wearable and Health Platform Integrations

Halo of Health offers optional integrations with supported third-party wearables and health platforms. Connecting an integration is entirely at your discretion. You must provide separate, explicit consent before any data is exchanged.

6.1 How integrations work

When you choose to connect a wearable or health platform, you are redirected to that provider’s authentication screen, where you log in with your own credentials and choose what data to share with Halo of Health. We never see or store your credentials for third-party services.

Once authorised, we receive a limited set of health data (such as temperature deviation, heart rate variability, and resting heart rate) that we use to help identify your menstrual cycle phase more accurately and provide better-personalised guidance.

6.2 Processing and retention of wearable data

Wearable data is processed for the sole purpose of deriving cycle phase and related insights for display within your account. Once incorporated into your Halo of Health cycle metrics, raw wearable data is not retained beyond what is necessary to perform this derivation. You retain your derived cycle history in Halo of Health; the raw third-party data is discarded in line with our retention principles and the terms of the relevant third-party provider.

Where a third-party provider’s terms impose a maximum cache duration for their raw data, we honour that duration as a maximum and typically delete raw data well within that window. Derived cycle metrics (your cycle phase history, ovulation estimates, and personal insights) are treated as your own Halo of Health data and retained in line with Section 9 of this policy.

6.3 Disconnecting an integration

You can disconnect any integration at any time from within the App. When you disconnect:

6.4 Currently supported integrations

The integrations currently supported or planned are listed below. We will update this list as integrations are added or removed.

7. Luna AI and Your Data

Luna is the AI companion built into Halo of Health and accessible via luna.seedcycle.com. Luna uses your cycle context to provide conversational guidance on hormonal health and cycle-aware nutrition and lifestyle.

Important information about Luna and your data:

8. How We Disclose Personal Information

In certain circumstances, we may disclose your personal information to third parties for legitimate purposes subject to this Privacy Policy. Such circumstances may include:

8.1 Relationship with Shopify

The Seed Cycle store is hosted by Shopify, which collects and processes personal information about your access to and use of the store in order to provide and improve it for you. Information you submit to the store will be transmitted to and shared with Shopify as well as third parties that may be located in countries other than where you reside, in order to provide and improve the store for you. In addition, to help protect, grow, and improve our business, we use certain Shopify enhanced features that incorporate data and information obtained from your interactions with our store, along with other merchants and with Shopify. To provide these enhanced features, Shopify may make use of personal information collected about your interactions with our store, along with other merchants, and with Shopify. In these circumstances, Shopify is responsible for the processing of your personal information, including for responding to your requests to exercise your rights over use of your personal information for these purposes.

8.2 Key third-party processors

The following are the main third-party processors that handle your personal data on our behalf. Each operates under its own privacy policy and applicable safeguards, and we update this list as our processors change.

9. Data Storage, Security and Retention

9.1 Security measures

Your data is stored in a Supabase-hosted PostgreSQL database (for Halo of Health) and within Shopify’s infrastructure (for the Seed Cycle store) with the following security measures:

Please be aware that no security measures are perfect or impenetrable, and we cannot guarantee “perfect security.” In addition, any information you send to us may not be secure while in transit. We recommend that you do not use unsecure channels to communicate sensitive or confidential information to us.

9.2 Where your data is stored

Our Halo of Health database infrastructure is hosted by Supabase within the European Union. Shopify’s servers may process data in countries outside the UK and EEA. Klaviyo’s marketing data infrastructure has both US and EU options; we use Klaviyo’s EU infrastructure where available. We do not transfer your personal data outside of the UK and EEA except where necessary to process Luna AI requests (handled by Anthropic and ElevenLabs in the USA under appropriate safeguards) and where data is processed by Shopify’s international infrastructure.

9.3 Retention periods

How long we retain your personal information depends on different factors, such as whether we need the information to maintain your account, to provide you with the Services, comply with legal obligations, resolve disputes, or enforce other applicable contracts and policies. Our general principles are:

10. International Transfers

Please note that we may transfer, store and process your personal information outside the country you live in.

If we transfer your personal information out of the European Economic Area or the United Kingdom, we will rely on recognised transfer mechanisms like the European Commission’s Standard Contractual Clauses, or any equivalent contracts issued by the relevant competent authority of the UK, as relevant, unless the data transfer is to a country that has been determined to provide an adequate level of protection.

11. Your Rights and Choices

Under UK GDPR and depending on where you live, you may have some or all of the rights listed below in relation to your personal information. These rights are not absolute and, in certain cases, we may decline your request as permitted by law.

To exercise any of these rights, or for any data-related enquiries, contact us at hello@haloofhealth.com. We will not discriminate against you for exercising any of these rights. We may need to verify your identity before we can process your requests, as permitted or required under applicable law. In accordance with applicable laws, you may designate an authorised agent to make requests on your behalf; before accepting such a request, we will require that the agent provide proof you have authorised them to act on your behalf, and we may need you to verify your identity directly with us. We will respond to your request in a timely manner as required under applicable law.

12. Cookies and Analytics

The Halo of Health App does not use advertising cookies or third-party tracking cookies. We may use essential cookies for authentication and session management. If we introduce analytics in the future, we will update this policy and seek your consent where required.

The Seed Cycle store (seedcycle.com), as a Shopify-hosted site, uses cookies and similar technologies for essential site functionality, analytics, and (with your consent) targeted advertising. You can manage cookie preferences through the cookie banner on the site.

13. Children’s Data

Halo of Health is intended for users aged 18 and over. We do not knowingly collect personal data from children or anyone under 18 through Halo of Health or its associated waitlist. The Seed Cycle store is not intended to be used by children under the age of majority in their jurisdiction. If you are the parent or guardian of a child who has provided us with their personal information, or if you believe a child has provided us with personal data, please contact us at hello@haloofhealth.com and we will delete it promptly.

As of the effective date of this Privacy Policy, we do not have actual knowledge that we “share” or “sell” (as those terms are defined in applicable law) personal information of individuals under 18 years of age.

14. Third-Party Websites and Links

Our Services may provide links to websites or other online platforms operated by third parties, including (where relevant) links between the Seed Cycle online store and Halo of Health, and outbound links to third-party content. If you follow links to sites not affiliated or controlled by us, you should review their privacy and security policies and other terms and conditions. We do not guarantee and are not responsible for the privacy or security of such sites, including the accuracy, completeness, or reliability of information found on these sites. Information you provide on public or semi-public venues, including information you share on third-party social networking platforms, may also be viewable by other users of the Services and/or users of those third-party platforms without limitation as to its use by us or by a third party. Our inclusion of such links does not, by itself, imply any endorsement of the content on such platforms or of their owners or operators, except as disclosed on the Services.

15. Complaints

If you have complaints about how we process your personal information, please contact us at hello@haloofhealth.com. Depending on where you live, you may have the right to appeal our decision by contacting us at the same address, or to lodge your complaint with your local data protection authority. UK residents may lodge a complaint with the Information Commissioner’s Office (ICO) at ico.org.uk.

16. Changes to This Privacy Policy

We may update this Privacy Policy from time to time, including to reflect changes to our practices or for other operational, legal, or regulatory reasons. If we make material changes, we will notify you through the App, by email, or by posting a prominent notice on the relevant Services. The “Last updated” date at the top of this policy indicates when it was last revised. Your continued use of the Services after any update constitutes your acceptance of the revised Privacy Policy, to the extent permitted by applicable law.

17. Contact Us

If you have any questions about this Privacy Policy or how we handle your data, please contact us:

Seed Cycle Limited

Chetwynd Business Park, 2 Regan Way, Chilwell, Beeston, Nottingham NG9 6RZ, United Kingdom

Email: hello@haloofhealth.com

Company number: 15412118

ICO registration: ZC124360

Halo of Health and Luna — operated by Seed Cycle Limited