What if I'm not in California or the EU

Several other states have enacted privacy laws with data access rights, including Colorado, Connecticut, Virginia, Utah, Oregon, Texas, Montana, and others. Check whether your state has a consumer privacy law. Even without a legal requirement, many companies honor data access requests from all users as a matter of policy. Submit the request anyway — the worst outcome is no response.

What format should I expect the data in

GDPR requires data in a structured, commonly used, machine-readable format. CCPA requires disclosure but is less specific about format. In practice, companies provide data as CSV files, JSON exports, PDF reports, or through an in-app export tool. Machine-readable formats (CSV, JSON) are more useful because you can analyze the data yourself.

Can I also request deletion after seeing my data

Yes. Both GDPR (Article 17, right to erasure) and CCPA (right to deletion) allow you to request that a company delete your data after you have reviewed it. You can submit the access request first, review what was collected, and then submit a deletion request. Some companies combine both into a single process.

guides

How to Request Your Own Data from Period Tracker Companies

You can request a copy of all data a period tracker company holds about you using CCPA, GDPR, or state privacy laws. Here is how to submit a data access request with template language.

Why Request Your Data Most period tracker users have a vague understanding that the app stores their cycle dates. The reality is usually more extensive. Companies collect and retain: Every cycle start and end date you ever logged Every symptom, mood, and physical observation entry Sexual activity logs and contraception tracking Pregnancy test results and fertility window interactions In app content you viewed (articles, tips, product recommendations) Session timestamps, device information, and behavioral analytics Third party SDK data transmission logs (in some cases) Advertising identifiers and cross app tracking data A data access request reveals the full picture. It often surprises users with the volume and granularity of what was retained, including data from years ago that they assumed was deleted when they stopped using the app. Your Legal Rights by Jurisdiction EU/EEA/UK Residents: GDPR Legal basis : Article 15 (right of access), Article 20 (right to data portability) What you can request : A complete copy of all personal data the company holds about you, the purposes for processing, the categories of recipients who received your data, the retention period, and information a