By Mary Rendle, Lead Privacy Counsel
You've downloaded a period tracker. You may have been using it for months or even years. But have you ever actually looked at your privacy settings? We get it. You’re busy. No one has time to scroll through pages of information. But when it comes to your reproductive health data, it’s important that you understand how your information is used.
Period trackers store some of your most personal, sensitive information — from cycle details to symptoms, moods, and intimate health data. Taking a minute to review your privacy settings isn’t just a checkbox. It’s how you make sure your data stays in your control. Your health is personal. Your privacy should be too.
Privacy settings in apps can be difficult to find, and users often aren’t told what options exist or what the default settings actually do. When it comes to reproductive health data, understanding these settings is essential.
Here's a checklist of privacy settings you should review in any period-tracking app, and specifically what to look for in Flo.
1. Account Security Settings
What to check: How is your account protected from unauthorized access?
Look for options to enable biometric locks like fingerprint or Face ID and set a passcode for additional protection.
Why it matters: If someone has physical access to your phone and can open your apps, your privacy is at risk. Device-level security is your first line of defense.
If you use Flo: We offer passcode protection and device-based biometric security options to open the app, so both your device and your app need to be unlocked to access your data. These features are available in your app settings.
2. Data Sharing with Third Parties
What to check: How is your data shared with third parties?
See who your data is shared with — including marketing and analytics providers.
Why it matters: Your period tracker might be secure, but sharing data with multiple third parties can still carry risk. Take a moment to check who your data is shared with, and if you are comfortable with how they use your data.
If you use Flo: You can find details of who we share your data with in our Privacy and Cookie Policy. You can also manage your consent preferences at any time in your privacy settings — including permissions for marketing communications and third-party analytics. Importantly, we never share your health information with third parties for advertising or marketing purposes.
3. Anonymous Mode and Privacy-Enhanced Features
What to check: Does your app offer advanced privacy features? Are anonymity claims backed by white papers?
Look for options that let you use the app without tying it to your identity, and make sure your data is encrypted in transit and at rest.
Why it matters: Baseline privacy protections should be the bare minimum you expect from any app — and a serious red flag if they’re absent. But even strong standard practices may not be enough in worst-case scenarios, such as a data breach or a request from law enforcement. That’s where advanced privacy features matter: they add an extra layer of protection and peace of mind when it counts most.
If you use Flo: Anonymous Mode lets you use the app without linking your email, name, or technical identifiers to your health data. This means, no one, not even Flo can identify you. Anonymous Mode is free for all users and can be activated through your profile settings.
4. Push Notifications
What to check: What information is visible in your push notifications?
Review the content of notifications that appear on your lock screen, and check whether you can control how much detail they display or customize what they say.
Why it matters: Privacy isn’t only about technical safeguards like encryption. It’s also about thoughtful design for everyday moments, like who might see your notifications if they glance at your phone.
If you use Flo: You can customize how your reminders appear in your notification settings on your device. Choose between detailed, minimal, or completely private notifications to control the information visible on your lock screen.
5. Data Retention and Deletion
What to check: How long is your data kept, and can you delete it?
Review the app’s data deletion and retention policies carefully. Make sure you can delete your account, download your data before you do, and understand how backups are deleted if your account is deleted.
Why it matters: If you no longer want your information stored or used, you should be able to delete it. The right to have your data deleted at any time should be a basic expectation.
If you use Flo: You can permanently delete your account through your privacy settings. Deletion is immediate and irreversible. Once deleted, we cannot recover your data. If you want a copy of your data first, you can request an export through our support team.
6. Consent Management
What to check: What have you agreed to, and can you change your mind?
Review your consent settings for health data processing, marketing communications, tracking, advertising, and analytics. Make sure it is really clear what you have agreed to, and that you can easily withdraw consent and opt out of anything you no longer consent to.
Why it matters: Consent should always be your choice–you should clearly understand what you’re agreeing to and be able to change your mind at any time.
If you use Flo: You can review and adjust your consent preferences in the privacy settings in the Flo app. Note: the use of health information is core to Flo’s services, if you withdraw consent to process health data, you'll be directed to delete your account.
7. Data Access and Portability
What to check: Can you actually see your data? And can you request a copy of it?
Confirm you can request a copy of your data, verify it's provided in a commonly used format which can help you to transfer your data to another app.
Why it matters: Accessing your data helps you see what information is collected and how it’s used — this means you can stay in control. Getting a copy in a commonly used format also makes it easier to take your data with you if you decide to switch apps.
If you use Flo: You can request a data export through our support team. Your data will be provided in a text and JSON format (in other words, you will receive your data in a commonly recognised format that can be imported into other apps).
8. App Store Nutrition Labels
What to check: Start with the app’s privacy “nutrition label” in your app store, but don’t rely on it alone.
These labels can be high-level and sometimes understate how much data is actually processed. Watch out for vague categories or missing detail. If something feels unclear or minimal, cross-check it against the app’s privacy policy to see if the two align.
Why it matters: Privacy labels are a helpful snapshot, but they don’t always show the full picture. If an app describes its data use vaguely or leaves things out, you might end up sharing more than you expect. Taking a moment to compare the label with the privacy policy can help you spot anything unclear or misleading and make a more informed choice about which app you use.
How to check: On the App Store or Google Play, check the privacy section (“App Privacy” or “Data safety”) to see what data is collected, how it’s used, and whether it’s linked to you or shared. Look at when the label was last updated—an outdated label may not reflect current practices. Then compare it with the app’s privacy policy. Do the data types, purposes, and sharing match? If the policy goes further or uses vague, broad terms, treat that as a red flag—the label may be presenting a more limited picture than reality.
8. Partner Sharing
What to check: If you choose to share your information with someone, like a partner, what can they see? How is this controlled?
If your app offers features like partner sharing, make sure you stay fully in control. Know exactly what information is shared, confirm you can stop sharing at any time, and check that access is view-only — so the other person can see your information but can’t edit, delete, or share it further.
Why it matters: Choosing to share your information is different from unauthorized access, but it’s important to remain in control by understanding exactly what you're sharing and how your information is protected when you do.
If you use Flo: With Flo’s Partner Mode, you’re always in control. Only you, as the main account holder, can choose to share, and you can stop sharing at any time. Before you share, we clearly remind you what information will be visible and how to turn sharing off. Sharing codes are unique and single-use. If you stop sharing, a new code must be generated to reconnect. Codes also expire after 48 hours — if they aren’t used within that time, you’ll need to create a new one.
10. Privacy Policy and Updates
What to check: When was the privacy policy last updated? Does it clearly explain how your data is used?
Make sure the privacy policy clearly explains how your data is used, in plain, straightforward language. You shouldn’t have to reread a sentence just to understand what it means. Also check when the policy was last updated. Apps may begin collecting new types of data or using data in new ways, and those changes should be clearly explained in the most recent version.
Why it matters: Be cautious of apps that don’t clearly explain how they use your data or fail to keep their privacy policies up to date. If the information isn’t clear and current, that’s a red flag. You should always understand exactly what is happening with your data.
If you use Flo: Our Privacy Portal provides an easy-to-understand summary of our Privacy Policy. You can find the Privacy Portal in-app or on our website here, where you can review key policy points and check when the policy was last updated. Our Privacy Policy is regularly reviewed and updated to clearly explain how we handle your data, so you can make an informed decision about using Flo.
The Quick Privacy Checkup
If you don’t have time to review everything, focus on these five essential areas:
- Turn on privacy protections such as customizable push notifications, and biometric or passcode lock. You can also choose to switch to Anonymous Mode.
- Review third-party data sharing and any activities you’ve consented to, and update your preferences if needed.
- Make sure that you can delete it or request a copy at any time.
- Check your device permissions and limit them to what’s necessary for the features you actually use.
- Read the app’s privacy information to confirm it clearly explains how your data is used.
These five steps cover the most important privacy controls and only take a few minutes to review.
Red Flags in Any Period Tracker
As you review your settings, look out for these red flags:
- No privacy settings at all — or settings that are hidden or hard to find.
- No clear option to delete your account, or a deletion process that is confusing or ignored after you submit a request.
- No ability to withdraw consent. Consent is yours to give and to take back — if you withdraw it, the app should stop using your data for that purpose.
- Privacy information that still leaves you unclear about how your data is used, especially how it’s shared with third parties.
- No clear way to contact the company to ask questions about data protection or to exercise your rights. This can signal that protecting sensitive information isn’t a real priority.
- No published white papers to back claims of anonymity.
- No clear detail in app nutrition labels.
If you notice these warning signs, it may be time to consider switching to a more privacy-focused app.
Making Privacy a Practice
Privacy isn’t a one-time setup — it requires ongoing attention. Read updates to the privacy policy to make sure you’re still comfortable with how your data is used. Review your device permissions, turn on new privacy features when they’re introduced, and ask questions if anything is unclear.
These simple habits help keep your protections strong as technology, and your own needs, change over time.
What You Need to Know
Privacy settings only work if you actually use them. Most period tracking apps offer some level of control, but those settings are often buried or unclear.
Reviewing your period tracker’s privacy settings will always be time well spent. Check what’s turned on, switch off anything you don’t need, and enable stronger protections if they’re available.
Your body. Your data.
Related Resources: