Clue Alternative: Period Trackers Without Cloud Storage

Clue stores cycle data server-side. If you want a tracker that keeps everything on-device with no mandatory account, here are the alternatives.

Clue is GDPR-compliant and has no documented history of data selling. But it still stores your data on its servers, which means it can be subpoenaed. If you want a tracker built around device storage, Floriva keeps core records on your phone and offers optional encrypted sync.

What Clue Gets Right

Clue is headquartered in Berlin and operates under GDPR. It has no FTC enforcement history and no documented enforcement for direct data-selling violations.

What Independent Investigations Found

The privacy picture is more complex than the brand positioning suggests. The Norwegian Consumer Council's January 2020 "Out of Control" report found that 10 analyzed apps including Clue collectively fed personal information to at least 135 third-party advertising and profiling companies, sharing Android Advertising IDs, IP addresses, device identifiers, and demographic data.

Privacy International conducted a DSAR investigation in December 2020. It found that every interaction with Clue resulted in data stored on servers linked to user ID, device ID, and location precise enough to identify the researcher's borough. Clue initially failed to provide a complete list of third parties receiving data.

In May 2022, Vice/Motherboard reporters purchased data from data broker Narrative for approximately $100 that identified Android devices with Clue installed. Narrative subsequently removed all pregnancy and menstruation app install data.

Mozilla's August 2022 Privacy Not Included review gave Clue a warning label. The review cited extensive data collection, opt-out (not opt-in) advertising data sharing, and the fact that the app accepted single-character passwords like "1."

Clue's own privacy policy acknowledges sharing "a minimal amount of technical data with advertising networks" including device identifiers and date of birth, on an opt-out basis. The policy also states data may be shared "for legal requirements." No GDPR enforcement action has been filed against BioWink (Clue's parent). Unlike Flo, which obtained dual ISO 27001 and ISO 27701 certifications after its FTC settlement, Clue has no documented independent third-party privacy certification.

What Clue Cannot Change

GDPR controls what Clue can do commercially with your data. It does not prevent a court from ordering Clue to produce it. Your Clue account links your email address to your cycle history, symptom logs, and reproductive health information on Clue's servers. German courts can issue production orders. US courts can make requests via mutual legal assistance treaties. Law enforcement in other jurisdictions has similar mechanisms.

Whether that risk matters depends on your circumstances. For users in US states with abortion restrictions like Texas, or those navigating custody disputes, or managing health conditions with insurance implications, the architectural question matters more than the company's commercial practices. This is especially relevant given post-Dobbs prosecutions that have sought similar data.

Why On-Device Storage Is Different

On-device trackers like Floriva keep core records on your phone. When law enforcement requests data via subpoena from Floriva, we do not have a readable central cycle database to hand over. This is not a legal strategy or a policy commitment. It follows from the storage model. If you turn on sync, only end-to-end encrypted data leaves the device.

This architectural difference is why some users switch from Clue even though they are satisfied with Clue's commercial practices. Clue's privacy is as good as Clue's promises plus GDPR enforcement. Floriva starts with your phone's encryption and optional end-to-end encrypted sync. That is the zero-knowledge standard.

Comparing the Features

Clue has a richer feature set than most on-device trackers. Its cycle science is research-backed, the symptom logging is detailed, and the free tier works without ads. The free tier's limitation is feature depth, not privacy.

Floriva covers the core tracking functions: cycle predictions, symptom logging, and reminders. The prediction algorithm builds accuracy over 2-3 cycles. The trade-off is cloud-synced history and the research-backed health insights that Clue's larger dataset enables.

Making the Switch From Clue

To export your Clue data before switching, go to Settings and request a data export. Clue provides your cycle history in a readable format. Enter your last few cycle start dates into your new tracker to rebuild the prediction baseline.

Strengths and trade-offs

Clue

Pros

GDPR compliance, no ad-supported data monetization
Berlin-based, no FTC enforcement history
Evidence-based cycle science

Cons

Server-side storage, data accessible via subpoena
Data shared with 135+ third parties (Norwegian Consumer Council, 2020)
Install data sold by broker Narrative for ~$100 (Vice/Motherboard, 2022)
Mozilla warning label for opt-out ad sharing
No independent privacy certification
Account required
Premium required for full features

What the experts say

These apps promised users privacy while systematically routing reproductive health data to third-party advertising networks. Policy claims were never backed by architecture.

Floriva Editorial Team, Privacy Research, Floriva

Quick answers to the obvious questions.

What are the best Clue alternatives with no cloud storage?

Private options include Floriva (iOS and Android, paid, no free tier, optional encrypted sync), Euki (iOS and Android, free, nonprofit), and Drip (Android only, free, open source). Floriva keeps core records on your device. If sync is on, only end-to-end encrypted data leaves the device.

Why would I switch from Clue if it has a clean privacy record?

Clue's privacy record is more complicated than the brand suggests. The Norwegian Consumer Council's January 2020 report found Clue among 10 apps feeding data to at least 135 third-party companies. Privacy International's December 2020 DSAR investigation found every Clue interaction stored with user ID, device ID, and borough-level location. In May 2022, Vice/Motherboard purchased Clue install data from data broker Narrative for about $100. Mozilla gave Clue a warning label in August 2022 for opt-out ad data sharing and accepting single-character passwords. Clue's own privacy policy acknowledges sharing device identifiers and date of birth with ad networks. Unlike Flo, which obtained dual ISO 27001/27701 certifications post-FTC settlement, Clue has no independent third-party privacy certification. On top of the documented data practices, the structural risk remains: your Clue data exists on servers that can be compelled to produce it via court order.

Is Clue a safe period tracker app?

Clue has no FTC enforcement history, but independent investigations have documented data practices that contradict the brand's privacy reputation. The Norwegian Consumer Council's January 2020 'Out of Control' report found 10 apps including Clue collectively shared data with at least 135 third-party advertising and profiling companies. Privacy International's December 2020 DSAR investigation found every interaction with Clue resulted in data stored on servers linked to user ID, device ID, and location precise enough to identify the researcher's borough. Clue initially failed to provide a complete list of third parties receiving data. In May 2022, Vice/Motherboard reporters purchased data from data broker Narrative for approximately $100 that identified Android devices with Clue installed. Narrative subsequently removed all pregnancy/menstruation app install data.

What is the difference between GDPR compliance and zero-knowledge privacy?

GDPR compliance means a company follows European data protection rules. Users have rights to access, delete, and limit use of their data. Zero-knowledge privacy means the service provider cannot read your data. Clue meets GDPR compliance. Floriva keeps core records on your device. Optional sync only sends end-to-end encrypted data that Floriva cannot read.

Does Clue share data with advertisers?

Clue's own privacy policy acknowledges sharing 'a minimal amount of technical data with advertising networks' including device identifiers and date of birth. This sharing is on an opt-out basis, not opt-in. Mozilla's August 2022 Privacy Not Included review gave Clue a warning label, citing this opt-out advertising data sharing and the fact that the app accepted single-character passwords. No GDPR enforcement action has been filed against BioWink (Clue's parent company), and Clue has no independent third-party privacy certification, unlike Flo, which obtained dual ISO 27001 and ISO 27701 certifications after its FTC settlement.

Questions people ask before they switch.

Does Clue sell period data?

Clue does not have a documented history of selling user data. It is GDPR-compliant and does not operate an advertising business. However, GDPR compliance limits commercial sharing, not legal compulsion. If a court orders Clue to produce your data, GDPR does not prevent that.

Is Clue better than Flo for privacy?

Yes, for two reasons: Clue has no documented data-selling history, and GDPR jurisdiction provides stronger commercial data protections than US law. But both apps require server-side storage. Flo has a worse track record, but neither provides the structural protection of on-device storage.

What is the difference between GDPR compliance and on-device storage for privacy?

GDPR compliance controls how a company can commercially use your data, limits retention periods, and gives you deletion rights. On-device storage means the company never has your data in the first place. GDPR cannot prevent a subpoena. On-device storage can, because there is nothing on a server to hand over.

Is Clue private?

Clue has a stronger privacy track record than Flo and is GDPR-compliant. However, GDPR compliance means your data is stored under European privacy law, not that it is impossible for law enforcement to access. Clue's cloud architecture means your data exists on their servers and can be subpoenaed.

Is Clue safe to use in states with abortion bans?

Clue stores data in Berlin, which provides some protection under GDPR. However, US law enforcement can request data from European companies via mutual legal assistance treaties (MLATs). Floriva keeps core cycle records on your device and has no readable central cycle database to hand over.