Period App Privacy: 5 Things to Check Before You Install
What you log in a period app is more than dates. Ovulation and fertile windows, pregnancy likelihood, symptoms, intimacy — it's some of the most personal health data there is. And apps differ wildly in how they treat it. Before you tap install, check these five things.
1. Does it demand an account?
An email sign-up means your log is tied to your identity and stored on someone's server. An app with no account never creates that link in the first place — there's no "whose data is this" record anywhere but your phone.
If all you want is to log your cycle and the app demands registration first, be suspicious. The right question: can I use every feature without an account?
2. Where is the data stored?
On-device (local) versus server (cloud) storage is the heart of the privacy question. Data that stays on your device has no leak path. Data on a server stakes your privacy on the company's security, its policy changes, breaches, and legal requests.
Look for an explicit sentence in the privacy policy like "your data is stored only on your device." Vague wording usually means it goes to a server.
3. Is it shared with third parties?
If a free app is funded by ads, assume data may flow to ad networks — several period trackers have been sanctioned by regulators for exactly this.
Read the third-party sharing section of the privacy policy, and be wary of apps stuffed with analytics and advertising SDKs.
4. Does deleting actually delete?
With server-backed apps, uninstalling often leaves your data on the server, sometimes requiring a separate deletion request.
Local-storage apps make this clean: delete the app, and the data goes with it. That's exactly how Petal works — once it's gone, it's gone everywhere, because it only ever existed on your phone.
5. Can you control your own backup?
"Cloud backup" sounds convenient, but it's server storage by another name. Privacy-respecting backup means you export a file yourself and decide where it lives.
Petal offers JSON export and import. Whether a backup file exists, and where it's kept, is entirely up to you.
How Petal scores on this checklist
Run Petal through the five checks and here's what you get.
- No account — there is no sign-up screen at all.
- 100% on-device — no server, so data never leaves your phone.
- No third-party sharing — there's no server-side data to share.
- Delete means delete — removing the app removes the data.
- JSON export — backup is your file, your choice.
A period calendar with nothing to worry about
Get Petal on Google Play