comparisons
Published by Floriva · Updated 2026-03-21 · How Floriva checks its guides
Drip vs Clue: Open Source On-Device vs GDPR Server App
Drip is Android-only, open source, and fully on-device. Clue is GDPR-compliant and stores data server-side. Here's what that means for privacy.
Drip stores data only on your Android device, requires no account, and is open source. Clue requires an account and server-side storage, GDPR compliance limits commercial data use but doesn't prevent legal compulsion. The core tradeoff is features and platform availability vs architectural privacy.
The privacy spectrum in period tracking
Period trackers span a spectrum from fully server-dependent (Flo, Glow) to fully on-device (Drip). Clue sits closer to the private end of the server-based category. Drip is at the fully private end.
Understanding where each app sits on this spectrum requires understanding what "privacy" means in this context: not just whether an app sells your data commercially, but whether the data is structurally accessible to third parties at all.
Drip: architectural privacy, limited scope
Drip is open source and Android-only. The code is on GitHub, you can read exactly what it does. Data is stored locally on the device. No account, no sync, no server. From a privacy standpoint, this is as strong as it gets: there is nothing to subpoena because there is nothing on a server.
The trade-off is scope. Drip covers basic cycle logging. It doesn't have the depth of symptom tracking, mood logging, or health insights that Clue offers. And if you're on iOS, Drip isn't an option.
Clue: strongest server-based option
Clue is the most privacy-conscious of the major commercial period trackers. Berlin-based, GDPR-compliant, no ads, no documented enforcement history. The free tier is genuinely functional.
The limitation is structural: Clue requires an account, and your data lives on Clue's servers. GDPR limits what Clue can do with your data commercially, but a German court order or a US legal request (depending on jurisdiction and data sharing agreements) could compel access.
Cross-device sync: the gap both leave open
Neither Drip nor Clue handles the cross-device problem in a way that preserves on-device privacy. Drip has no sync at all. Clue syncs via its servers, trading privacy for convenience.
Floriva's approach is opt-in encrypted sync: data is encrypted on your device before transmission, with a key that Floriva doesn't hold. You get cross-device continuity without adding a server-side data exposure risk.
Cited signals
- Drip is completely free with no subscription, ads, or in-app purchases Drip app (open source)
- Flo Health paid a $59.5M combined settlement for sharing reproductive health data without user consent Reuters / FTC, September 2025
Drip vs Clue vs Floriva: Platform and Privacy
| Feature | Floriva | Drip | Clue |
|---|---|---|---|
| iOS | Yes | No | Yes |
| Android | Yes | Yes | Yes |
| On-device storage | Yes | Yes | No |
| Account required | No | No | Yes |
| Open source | No | Yes | No |
| Cross-device sync | Yes (E2E encrypted) | No | Yes |
| GDPR compliant | N/A, no server data | N/A | Yes |
| Data can be subpoenaed | No | No | Yes |
| Price | Paid app (no free tier) | Free | Free / $9.99/mo |
Strengths and trade-offs
Floriva
Pros
- On-device storage on both iOS and Android
- No account required
- Opt-in encrypted cross-device sync
- Auditable privacy model
Cons
- Paid subscription required, not free
- Not open source
Drip
Pros
- Open source and auditable
- On-device only, less company-held data to request
- No account, no ads, no data selling
Cons
- Android-only
- Very limited feature set
- No sync or backup between devices
Clue
Pros
- iOS and Android
- Strong feature set with research-backed cycle tracking
- GDPR compliance, no ad-supported model
Cons
- Server-based storage, subpoena risk exists
- Account required
- Premium tier needed for full features
Quick answers to the obvious questions.
What is Drip period tracker?
Drip is a free, open-source period tracker for Android. It stores all data on your device with no account required and optional encrypted sync support. The source code is publicly available, which means the data handling can be independently audited. Drip's main limitations are that it is Android-only and has a minimal feature set compared to commercial trackers.
Is Clue private enough for sensitive health data?
Clue has a better privacy track record than most commercial period trackers. It is GDPR-compliant, Berlin-based, has no ad-supported model on the free tier, and has not faced FTC enforcement actions like Flo or Premom. However, Clue stores data server-side. GDPR protects against commercial data misuse but does not prevent law enforcement access via court order. For users in states with abortion restrictions, this distinction matters.
Can I use Drip on iPhone?
No. Drip is Android-only. iPhone users looking for on-device, account-free period tracking should consider Euki (free, iOS + Android) or Floriva (paid app with no free tier, iOS + Android with optional encrypted sync).
Questions people ask before they switch.
Is Drip period tracker still active?
Drip is an active open-source project, though development velocity is lower than commercial apps. The codebase is maintained and the app works. For users whose priority is auditable, open-source privacy, Drip remains a viable option for Android.
Does Clue require an account?
Yes. Clue requires an email account to use the app. This links your cycle data to your identity on Clue's servers. This is the structural reason Clue's data can be accessed via legal process, despite its GDPR compliance and clean commercial data handling record.
What period tracker is best for Android?
For Android users prioritizing privacy, Floriva is the strongest overall choice because it combines on-device storage with a more complete tracker. Drip is the open-source Android fallback if price and code auditability matter most. Clue is the best server-based fallback for Android with its clean enforcement record and GDPR compliance. Flo is the most feature-rich free option but has a documented history of data sharing violations.