Scan to get LuluPoint your iPhone camera here

Period trackers that don't share your data: how to choose a private one

4 min read · Updated October 26, 2026

The short answer

The most private period trackers are built so the company never receives your cycle data: it stays on your phone, with no account. Apple's Cycle Tracking keeps Health data on device and encrypted in iCloud. Lulu has no account and no Lulu server holding cycle data. Mozilla's 2026 testing also praised Euki for keeping data on the device.

Why period app privacy matters

Cycle data is some of the most personal information you can put on a phone: when you bleed, when you have sex, whether you might be pregnant, how you feel. It's also valuable to advertisers. Several popular apps have been caught sharing more than users expected:

  • Flo (2021): the US FTC finalized an order over allegations that Flo shared users' health data with marketing and analytics firms including Facebook and Google. In August 2025 a jury found Meta liable under California privacy law for collecting data from Flo users; Flo settled before the verdict.
  • Maya (2019): Privacy International found Maya sent data to Facebook, including when the app was opened and details users logged. Its maker said it had stopped sharing personal data with Facebook.
  • Stardust (2022 and 2026): TechCrunch found its 2022 encryption promise didn't hold up and that it shared phone numbers with an analytics firm. In July 2026 Mozilla research found it sending birthdate, birth control type, reproductive goals and symptoms to an analytics company, tied to an identifier. Stardust says the firm is contractually barred from selling or reusing it.

None of this means every app is dangerous. Many companies have improved. But it shows why the architecture of an app matters more than the promises on its home page.

Three privacy models

ModelHow it worksExamplesTrade-off
Company cloud with accountYour cycle data is stored on the company's serversFlo, Clue, Stardust, Natural CyclesEasy sync and backup; you rely on the company's policies and security
Platform-encryptedData on your phone, backed up to your own cloud with encryption the provider can't readApple Cycle Tracking (with two-factor authentication)Strong privacy; fewer features
On-device, no accountData stays on your phone; the app maker never receives itLulu, EukiThe company can't lose or share what it doesn't have; you rely on your phone backups

How Lulu handles your data

  • No account. No email, no password, no profile on our side.
  • Cycle data stays on your iPhone. No Lulu server holds it. We never receive it, so we can't sell it, leak it or hand it over.
  • Partner sync is optional and small. If you turn it on, only a small status (name, cycle day, phase and next period, plus today's mood, tomorrow's forecast and fertile window if you switch them on) is shared through Apple's iCloud with the one person you invite. Never symptoms, notes or history.
  • No ads. Lulu is funded by Lulu Plus subscriptions (3-day free trial, then yearly).
Why we built it this way

The strongest privacy promise is not having the data at all. We'd rather say "we never receive your cycle data" than ask you to trust a policy.

How to check any period app in five minutes

  1. Read the App Store privacy label. Scroll to "App Privacy". Anything under "Data Used to Track You" may be linked to you across other companies' apps and websites.
  2. Check whether you need an account. No account usually means less data on someone else's server.
  3. Search the app's name with "FTC", "Mozilla" or "privacy". Independent reviews catch things marketing doesn't.
  4. Look for a data deletion option inside the app, and for an export so you can leave.
  5. Be wary of absolute promises. Stardust's 2022 encryption claim is a reminder that "fully private" needs proof.

What labels say today

From each app's US App Store page, October 2026, under "Data Used to Track You": Flo lists Purchases, Location, Identifiers and Usage Data; Clue lists Identifiers; Stardust lists Purchases, Identifiers and Usage Data; Natural Cycles lists Contact Info; Maya lists Usage Data. Labels are self-reported by developers and can change, so check the live page. For more on the risks, read do period apps share data? and is my period tracker private?

Frequently asked questions

What is the safest period tracker?

The safest are those where the company never receives your cycle data: no account, data on your phone. Apple's Cycle Tracking, Lulu and Euki work that way in different ways.

Can period tracker data be used against you?

Data stored on a company's servers can be requested by authorities with legal process. Data that never leaves your phone can't be requested from the company.

Does Apple share period tracking data?

Apple says Health data synced to iCloud is encrypted in a way Apple can't read when two-factor authentication is on.

Is Clue private?

Clue is a Berlin company under GDPR and says it never sells health data, but it is account-based and its App Store label lists Identifiers used for tracking.

Keep reading