Natural Cycles is an FDA-cleared, non-hormonal birth-control app run by NaturalCycles Nordic AB, part of a corporate group that also includes NaturalCycles AG (Holding) and NaturalCycles USA Corporation, headquartered in Stockholm. Its Privacy Policy states the company never sells personal data and describes extensive vetting of processors, but the same policy also carries the mandatory US statutory notice "We may sell your sensitive personal data" (a byproduct of CCPA/CPRA's broad definition of "sale"), discloses use of third-party analytics providers including Google Analytics, and describes matching hashed contact and device data against social media platforms to build advertising "Custom Audiences." Its Apple App Store privacy label independently corroborates a Third-Party Advertising data category and discloses Contact Info as data that may be used to track users across other companies' apps. Natural Cycles self-certifies to the EU-U.S. and Swiss-U.S. Data Privacy Framework for transatlantic data transfers. No FTC, state-AG, or EU data-protection-authority privacy enforcement action was found in the primary sources checked; a 2018 Swedish Medical Products Agency review of contraceptive-effectiveness reports and a 2018 UK ASA advertising-standards ruling are device-regulatory and ad-standards matters, not privacy findings, and are not scored here.