Period Tracker App Privacy: A Checklist Before You Log

Published November 8, 2026 · Updated November 8, 2026 · 8 min read · by the Sakura5 team

Period tracker app privacy comes down to one question: where does your cycle data go after you type it in? The most private trackers keep your periods, symptoms, and pregnancy details on your own phone, require no account, and send nothing to advertisers or analytics companies. Less private ones store everything on their servers and may share data with third parties, sometimes in ways their users never expected.

This is not a hypothetical concern. In 2021 the US Federal Trade Commission finalized an order against Flo Health, alleging that its period and ovulation app shared health data from millions of users with marketing and analytics firms, including Facebook and Google, despite promising to keep it private. The order required the company to get users' consent before sharing health information and to have its privacy practices independently reviewed.

Cycle data can reveal a lot: whether you might be pregnant, whether you are trying to conceive, a pregnancy loss, or a health condition. This guide gives you a practical checklist for judging any period tracker, explains the trade-offs between cloud and on-device apps, and covers the settings on your own phone that matter as much as the app.

What a period tracker knows about you

A cycle-tracking app can hold some of the most sensitive information on your phone:

• The dates and length of every period
• Symptoms, moods, sexual activity, and contraception
• Whether you are trying to conceive, and for how long
• Pregnancy, due date, and pregnancy outcomes
• Health notes you would not share with most people

Even "just dates" can be revealing. A long gap between periods followed by a sudden stop in tracking tells a story. That is why the question is not only "is this data encrypted?" but "who can see it at all?"

A privacy checklist for any period tracker

1. Where is the data stored?

Look for a clear statement in the privacy policy. "Stored on your device" means the company does not hold a copy. "Stored in your account" or "synced to our servers" means it does, and its security, policies, and legal obligations now apply to your data.

2. Does it require an account?

An email login is usually a sign the data lives on a server tied to your identity. Some apps need accounts for good reasons, such as syncing across devices or sharing with a partner. If you do not need those features, an app that works without an account exposes less.

3. Who else receives data?

Search the privacy policy for "third parties," "partners," "advertising," and "analytics." Many apps include tools from other companies that receive information about how you use the app. The FTC's Flo case was about exactly this kind of sharing. Look for a plain statement that health data is not shared with advertisers or data brokers.

4. Are there ads?

Free apps funded by advertising have a structural incentive to know more about you. An app with no ads, funded by a one-time price or subscription, has less reason to collect.

5. What does the App Store privacy label say?

On iPhone, every app's App Store page includes a privacy section listing the data it collects and whether that data is linked to you or used for tracking. It is a useful starting point, though it relies on the developer's own disclosure, so read it alongside the privacy policy.

6. Can you lock the app?

A passcode, Face ID, or Touch ID lock protects you from the most common real-world risk: someone else picking up your unlocked phone.

7. Can you delete everything?

Check how to delete your data, and whether deleting the app is enough. For server-based apps, you usually need to request account deletion separately; deleting the app from your phone leaves the copy on their servers.

Cloud trackers versus on-device trackers

Neither approach is automatically good or bad. They make different trade-offs.

Cloud-based trackers store your data on the company's servers. That enables syncing across devices, web access, partner sharing, and easy recovery if you lose your phone. It also means your data exists somewhere outside your control, subject to the company's security, business decisions, and the legal requests it receives. In the US, the federal health privacy law HIPAA generally covers healthcare providers and insurers, not most consumer apps you download yourself, so an app's own privacy policy and consumer-protection law, which the FTC enforces, do much of the work.

On-device trackers keep data on your phone. There is no company copy to breach, sell, or hand over, and the app usually works offline. The trade-offs are that syncing is limited, and if you lose your phone without a backup, the data may be gone.

If privacy is your priority, on-device storage is the strongest default, as long as you understand how your phone's backups work.

How Petala handles your data

Petala, a period, ovulation, and pregnancy tracker for iPhone, now free to download on the App Store, was designed around the on-device approach. Here is how it maps to the checklist, based on its published privacy details:

• Storage: everything you log, including periods, symptoms, fertility notes, and pregnancy details, is saved on your iPhone. There is no Petala server that stores health information.
• Account: none. There is no sign-up and no login.
• Third parties: no ads, no analytics on your health data, and health data is never shared with advertisers, data brokers, or insurers. Purchases go through Apple, and the subscription service RevenueCat receives only anonymous purchase information to validate a receipt, never your health data.
• Offline: cycle and pregnancy tracking work without an internet connection.
• Lock: you can turn on Face ID or Touch ID for the app.
• Backups and deletion: your data is included in your own private iCloud backup only if you have iPhone backups turned on. If you delete the app, the data it stored on your device goes with it.

The honest trade-off: because there is no Petala account, there is no Petala copy to restore from. You can read the full details on the Petala privacy and features page. Your iPhone backup is what protects your history if you change or lose your phone.

A worked example: auditing your current tracker in ten minutes

Thu has used the same free period app for four years and wants to know what it does with her data. She sets a ten-minute timer.

1. Minutes 1 to 3: she opens the app's App Store page and reads the privacy section. It lists several data types linked to her identity, plus data used for tracking.
2. Minutes 3 to 7: she opens the privacy policy and searches for "third," "advertis," and "analytics." She finds a list of partners that receive usage data and a section on personalized advertising.
3. Minutes 7 to 9: she checks the app's settings for an export option and a delete-account option, and notes that deleting the app alone would not delete the server copy.
4. Minute 10: she decides. In her case she exports her history, requests account deletion, and moves to a tracker that stores data on her phone.

Your answer may be different. Some people value syncing or partner features enough to accept a cloud account, and that is a reasonable choice. The point is to make it on purpose.

Privacy settings on your phone that matter as much as the app

• Lock-screen notifications: a reminder such as "Your period is due tomorrow" can appear on a locked screen. In iPhone Settings, under Notifications, you can hide previews for the app.
• Device passcode: on-device privacy depends on a strong phone passcode. A six-digit code or longer is better than four digits.
• Shared Apple ID or family devices: if anyone else has access to your Apple ID or backups, consider what that exposes.
• Screenshots and shared photos: screenshots of an app can end up in shared albums or cloud photo libraries.

Privacy is also why the information in a tracker should stay accurate and useful to you. If you are using one to understand your cycle, our guide to tracking irregular periods explains what to record for a doctor.

FAQ

Are period tracker apps safe to use?

Many are, but they differ a lot in how they handle data. Check where data is stored, whether an account is required, whether the app shares data with advertisers or analytics firms, and whether you can lock and delete it. Apps that keep data on your phone without an account expose the least.

Do period tracking apps sell your data?

Some apps have shared health data with third parties. The FTC alleged that Flo shared users' health data with firms including Facebook and Google despite privacy promises. Many apps say they do not sell data, so read the privacy policy and App Store privacy label, and look for clear statements about advertisers and data brokers.

What is the most private way to track my period?

Keeping records only on your own device, with no account, is the most private option, whether in a paper diary or an on-device app such as Petala. Add a phone passcode, an app lock, and hidden notification previews, and make sure your phone backups are set up the way you want.

If I delete a period tracker app, is my data gone?

For on-device apps, deleting the app usually removes the data stored on the phone, though copies may remain in your device backups. For apps with an account, the company typically keeps your data on its servers until you request account deletion, so delete the account first.

This article is general information, not legal or medical advice. Privacy details for any app can change, so check its current privacy policy. Cycle predictions from Petala or any other app are estimates and are not a method of contraception.

← All articles