Celestial Infosoft
Cycle tracking

Privacy checklist for period and cycle tracking apps

Eight questions to ask before trusting a cycle tracker with sensitive health data: what it collects, where it is stored, who can see it and how to delete it.

Illustration for the guide: Privacy checklist for period and cycle tracking apps
On this page

Cycle trackers hold very personal information. Before you enter your history, run through this list on the store page and in the privacy policy.

  1. What does it collect? Dates and symptoms are expected. Contacts, precise location and advertising IDs are not needed to track a cycle.
  2. Is data stored on your phone or on a server? Neither is automatically better, but the policy should say which and why.
  3. Is it shared with third parties? Look for sections on advertising, analytics and data sharing, and whether you can opt out.
  4. Can you delete your data? There should be a clear route, in the app or through a request form.
  5. Is there a passcode or biometric lock?
  6. Does it ask for more permissions than it needs? Check app permissions in Android or iOS settings.
  7. Is there a named company and a way to contact it? The store page should list a publisher and a support address.
  8. Is the policy readable and dated? Vague or missing policies are a warning.

On the app stores

The Google Play Data safety section and the Apple App Privacy details summarise what an app says it collects. Read them before installing.

After installing

Review permissions, turn off analytics or personalised ads options if offered, and enable a lock. See also how period trackers work and when a cycle change deserves a doctor’s visit.

Frequently asked questions

Is cycle data really sensitive?

Yes. It can reveal health, pregnancy and relationship information, so it deserves the same care as other health records.

How do I delete my data?

Look for a delete account or delete data option in the app, and check the privacy policy for how to request deletion. Uninstalling the app alone may not remove server-side data.

Should I use a lock on the app?

If your phone is shared or could be picked up, a PIN or biometric lock on the app is sensible.

More guides on this topic