TLDR
Clue is GDPR-compliant and has no documented history of data selling. But it still stores your data on its servers, which means it can be subpoenaed. If you want a period tracker with no cloud component at all, Floriva, Euki, and Drip store everything on your device.
Source: Clue pricing page
| Feature | Clue | Floriva |
|---|---|---|
| Pricing | Free / Plus $9.99/mo | From $2.99/month |
| Data storage | Cloud servers | On-device only |
| Account required | Yes | No |
| Data sold to advertisers | Documented history | Never — no data to sell |
| Subpoena-proof | No | Yes — data never on our servers |
Floriva stores your data on-device — no account required, nothing to subpoena.
What Clue Gets Right
Clue is headquartered in Berlin, which means it operates under GDPR. It has no FTC enforcement history and no documented enforcement for direct data-selling violations.
What Independent Investigations Found
The privacy picture is more complex than the brand positioning suggests. The Norwegian Consumer Council’s January 2020 “Out of Control” report found that 10 analyzed apps including Clue collectively fed personal information to at least 135 third-party advertising and profiling companies, sharing Android Advertising IDs, IP addresses, device identifiers, and demographic data.
Privacy International conducted a DSAR investigation in December 2020 and found that every interaction with Clue resulted in data stored on servers linked to user ID, device ID, and location precise enough to identify the researcher’s borough. Clue initially failed to provide a complete list of third parties receiving data.
In May 2022, Vice/Motherboard reporters purchased data from data broker Narrative for approximately $100 that identified Android devices with Clue installed. Narrative subsequently removed all pregnancy and menstruation app install data.
Mozilla’s August 2022 Privacy Not Included review gave Clue a warning label. The review cited extensive data collection, opt-out (not opt-in) advertising data sharing, and the fact that the app accepted single-character passwords like “1.”
Clue’s own privacy policy acknowledges sharing “a minimal amount of technical data with advertising networks” including device identifiers and date of birth, on an opt-out basis. The policy also states data may be shared “for legal requirements.” No GDPR enforcement action has been filed against BioWink (Clue’s parent). Unlike Flo, which obtained dual ISO 27001 and ISO 27701 certifications after its FTC settlement, Clue has no documented independent third-party privacy certification.
What Clue Cannot Change
GDPR controls what Clue can do commercially with your data. It does not prevent a court from ordering Clue to produce it. Your Clue account links your email address to your cycle history, symptom logs, and reproductive health information on Clue’s servers. German courts can issue production orders. US courts can make requests via mutual legal assistance treaties. Law enforcement in other jurisdictions has similar mechanisms.
The question of whether that risk is relevant to you depends on your circumstances. For users in US states with abortion restrictions, who are navigating custody disputes, or who are managing health conditions with insurance implications, the architectural question matters more than the company’s commercial practices.
Why On-Device Storage Is Different
On-device trackers like Floriva do not have a server holding your data. When law enforcement requests data from Floriva, there is nothing to hand over. This is not a legal strategy or a policy commitment; it is a technical fact. The data lives in encrypted storage on your phone and nowhere else.
This architectural difference is why some users switch from Clue even though they are satisfied with Clue’s commercial practices. Clue’s privacy is as good as Clue’s promises, plus GDPR enforcement. Floriva’s privacy is as good as your phone’s encryption, regardless of what any company promises.
Comparing the Features
Clue has a more developed feature set than most on-device trackers at this point. Its cycle science is research-backed, the symptom logging is detailed, and the free tier is functional without ads. The free tier limitation is feature depth, not privacy.
Floriva covers the core tracking functions: cycle predictions, symptom logging, and reminders. The prediction algorithm builds accuracy over 2-3 cycles. The trade-off is cloud-synced history and the research-backed health insights that Clue’s larger dataset enables.
Making the Switch From Clue
If you want to export your Clue data before switching, go to Settings and request a data export. Clue provides your cycle history in a readable format. Enter your last few cycle start dates into your new tracker to rebuild the prediction baseline.
Q&A
What are the best Clue alternatives with no cloud storage?
Period trackers that use no cloud storage: Floriva (iOS and Android, $2.99/mo, encrypted sync available), Euki (iOS and Android, free, nonprofit), and Drip (Android only, free, open source). All three store data exclusively on your device. None require an account. None can be subpoenaed because no server holds your data.
Q&A
Why would I switch from Clue if it has a clean privacy record?
Clue's privacy record is more complicated than the brand suggests. The Norwegian Consumer Council's January 2020 report found Clue among 10 apps feeding data to at least 135 third-party companies. Privacy International's December 2020 DSAR investigation found every Clue interaction stored with user ID, device ID, and borough-level location. In May 2022, Vice/Motherboard purchased Clue install data from data broker Narrative for about $100. Mozilla gave Clue a warning label in August 2022 for opt-out ad data sharing and accepting single-character passwords. Clue's own privacy policy acknowledges sharing device identifiers and date of birth with ad networks. Unlike Flo, which obtained dual ISO 27001/27701 certifications post-FTC settlement, Clue has no independent third-party privacy certification. On top of the documented data practices, the structural risk remains: your Clue data exists on servers that can be compelled to produce it via court order.
Q&A
Is Clue a safe period tracker app?
Clue has no FTC enforcement history, but independent investigations have documented data practices that contradict the brand's privacy reputation. The Norwegian Consumer Council's January 2020 'Out of Control' report found 10 apps including Clue collectively shared data with at least 135 third-party advertising and profiling companies. Privacy International's December 2020 DSAR investigation found every interaction with Clue resulted in data stored on servers linked to user ID, device ID, and location precise enough to identify the researcher's borough. Clue initially failed to provide a complete list of third parties receiving data. In May 2022, Vice/Motherboard reporters purchased data from data broker Narrative for approximately $100 that identified Android devices with Clue installed. Narrative subsequently removed all pregnancy/menstruation app install data.
Q&A
What is the difference between GDPR compliance and zero-knowledge privacy?
GDPR compliance means a company follows European data protection rules, users have rights to access, delete, and limit processing of their data. Zero-knowledge privacy means the service provider cannot read your data, and no data exists on a server to hand over to law enforcement. Clue meets GDPR compliance. Floriva is designed for zero-knowledge: your data is stored on your device and never transmitted to our servers.
Q&A
Does Clue share data with advertisers?
Clue's own privacy policy acknowledges sharing 'a minimal amount of technical data with advertising networks' including device identifiers and date of birth. This sharing is on an opt-out basis, not opt-in. Mozilla's August 2022 Privacy Not Included review gave Clue a warning label, citing this opt-out advertising data sharing and the fact that the app accepted single-character passwords. No GDPR enforcement action has been filed against BioWink (Clue's parent company), and Clue has no independent third-party privacy certification, unlike Flo, which obtained dual ISO 27001 and ISO 27701 certifications after its FTC settlement.
PROS & CONS
Clue
Pros
- GDPR compliance, no ad-supported data monetization
- Berlin-based, no FTC enforcement history
- Evidence-based cycle science
Cons
- Server-side storage, data accessible via subpoena
- Data shared with 135+ third parties (Norwegian Consumer Council, 2020)
- Install data sold by broker Narrative for ~$100 (Vice/Motherboard, 2022)
- Mozilla warning label for opt-out ad sharing
- No independent privacy certification
- Account required
- Premium required for full features
Frequently asked