privacy-in-practice
Period Tracking Abroad: Privacy Laws by Jurisdiction
Your period tracker's privacy changes at the border. How jurisdiction affects your data, what server location means, and what to do before you travel.
Two Jurisdictions Apply to Your Data When You Travel Most people think about privacy law as applying to where they are. In reality, period tracker data sits at the intersection of two legal environments: where the data is stored, and where you physically are. Server jurisdiction determines what laws govern the company holding your data. Flo is incorporated in the US; its servers are primarily in the US, meaning US law (and the FTC's jurisdiction) applies to how it handles your data regardless of where you use the app. Clue is headquartered in Berlin; its data is subject to GDPR, which applies regardless of where its users travel. Natural Cycles is a Swedish American company; it's subject to both EU and US regulatory frameworks. This matters because legal process follows the server. A US court can compel Flo to produce your data whether you're currently in Berlin or Bangkok. A German court can issue requests to Clue regardless of whether you're physically in Germany. Device jurisdiction is the second layer. When you're physically in a country, that country's laws apply to your person and to the device in your possession. A country that criminalizes abortion or certain reproductive d