privacy-in-practice

Published by Floriva · Updated 2026-07-31 · How Floriva checks its guides

Protect Your Symptom and Condition Data

PCOS, PMDD, endometriosis, fibroids, migraine, UTIs, and more. What each condition adds to your logs, and how to keep the pattern without keeping every detail.

Tracking a condition makes your logs richer and more private at the same time. The fix is not to stop tracking. It is to split your notes. Keep dates and short scores where you can see the pattern. Keep names, safety details, and long stories somewhere narrower.

A plain period log holds dates. A condition log holds a life.

Track PCOS and you add lab numbers, skin and hair changes, and insurance paperwork. Track PMDD and you add mood scores, medicine changes, conflict, and sometimes safety notes. Track endometriosis and you add pain during sex, pain with bowel movements, and fertility worries. Track with a wearable and you add a stream of sensor data and another company account.

The answer is not to stop tracking. Office on Women's Health suggests noting when bleeding starts. Also note how heavy the heaviest days were. Also note how many products you used and how many days it lasted. That is useful. MedlinePlus suggests writing down symptoms, questions, and medicines before a visit. Also useful.

The answer is to split the notes on purpose. Keep the pattern where you can see it. Keep the raw detail somewhere narrower.

This is a privacy guide, not medical advice. See a clinician for symptoms, and get care promptly for anything urgent.

1. Start with a two-layer system

Before you look at any condition, set the default.

Then sort your own list by sensitivity. Period start dates are usually low. Daily pain scores are usually low. Sex notes, partner names, substance notes, crisis details, and exact places are usually high.

The trick is that a short note is often just as useful.

One rule stands above the rest. Do not hide an urgent safety concern from care. The point is safer storage, not being alone with risk.

2. Heavy bleeding, clots, and flow changes

This group covers adenomyosis, fibroids, clot tracking, and changes in flow.

ACOG lists adenomyosis as a cause of abnormal uterine bleeding. It says symptoms may include heavy menstrual bleeding and menstrual pain. ACOG also explains what uterine fibroids are. They are benign growths from uterine muscle tissue. They can cause heavy bleeding, pain, and pressure symptoms. Office on Women's Health says to see a doctor for unusual bleeding. That includes bleeding between periods and bleeding after sex more than once. It also includes heavier or longer bleeding, or bleeding after menopause.

What this adds to your logs. Product counts and changes. Clot notes. Bathroom trips and bowel changes from pressure. Imaging dates and reports. Sometimes surgery notes and fertility plans.

Where it leaks. Photos are the big one here. People photograph clots and stains to show a clinician. Those photos sync to cloud albums, carry time and place, and stay in Recently Deleted. Imaging results also create a portal trail plus an insurance claim.

Keep it small. Log the day, a flow word, and a product count. Describe a clot in words rather than a photo when words will do. If you do take a photo, move it out of the main library, strip location, and delete it after the appointment.

3. Pelvic and reproductive pain

This group covers endometriosis, ovarian cysts, cramps, pain location, and pain or bleeding with sex.

MedlinePlus says period pain is often cramping in the lower abdomen. It says the pain may also come with lower back pain, nausea, diarrhea, and headaches. ACOG describes dysmenorrhea as period pain that can happen before or during a period.

The detail that carries diagnostic weight is timing and location. NICE recommends asking about period pain and deep pain during or after sex. It also recommends asking about gut and urinary symptoms that follow the cycle. WHO says endometriosis can affect bowel movements, urination, and sexual health. It says the same about fertility, fatigue, and daily life. ACOG explains ovarian cyst symptoms, diagnosis, treatment choices, and warning symptoms that may need prompt care. Mayo Clinic says care teams may ask when pain began, where it hurts, and how it feels.

Seek care promptly for:

• Severe or worsening pelvic or lower-belly pain.

• Heavy bleeding.

• Fever.

• Faintness or dizziness.

• Shoulder pain with pelvic pain.

• Pregnancy or possible pregnancy.

• New vomiting.

• New trouble peeing.

• Symptoms that feel unsafe.

Do not wait to clean up data if symptoms feel urgent.

What this adds to your logs. Pain by cycle day, including the days without pain. Location, side, and whether it moves. Symptoms outside the bleeding window. Notes about sex, which is where privacy and usefulness pull hardest against each other. Ultrasound dates and reports.

Keep it small and still useful. Use one pain scale and stay on it. Log the cycle day beside every entry. Log location as a short word: lower belly, low back, rectal, leg. For pain with sex, "deep pain with sex, day 24" carries the clinical signal without naming anyone.

Then keep partner names, relationship details, and anything about a specific encounter out of the app.

4. Urinary, vaginal, vulvar, and product symptoms

This group covers UTIs and bladder symptoms, discharge, vulvar symptoms, and reactions to period products.

Office on Women's Health lists UTI symptoms and says a clinician may test a clean urine sample. Mayo Clinic lists cystitis symptoms too. It says to contact care for urgent, frequent, or painful urination lasting several hours. The same goes for blood in urine, back or side pain, fever, chills, nausea, or vomiting. NIDDK lists bladder symptoms to raise with a health care professional. Trouble urinating. Loss of bladder control. Waking to use the bathroom. Pelvic pain. Leaking urine.

ACOG says vaginitis symptoms can include discharge, odor, itching, and burning. They can also include redness, pain with sex, spotting, and burning when urinating. CDC guidelines discuss discharge evaluation and testing in clinical care. ACOG says vulvar pain, burning, and itching can have many causes. It says contact dermatitis can come from skin touching things like soaps, fabrics, or perfumes.

For products, FDA says cleared tampons are meant for one-time use, and that FDA has not cleared or approved reusable tampons.

What this adds to your logs. Symptom timing against your cycle. Product brand and type, which is genuinely useful for contact reactions. STI testing questions and dates. Sex timing. Skin photos.

Where it leaks. Two places people underrate. First, skin photos, which are identifiable and sync like any other photo. Second, product and laundry notes, which can reveal routine and household details.

Keep it small. Log symptom, timing, and product changed. Note testing as "test done, result pending" rather than writing the reasoning. Skip photos unless a clinician asked for one, and delete them after.

5. Mood, focus, sleep, and PMDD

This group covers PMDD, PMS mood symptoms, cycle-linked anxiety, focus problems, and sleep.

Office on Women's Health lists many PMS symptoms. Breast tenderness, bowel changes, cramping, and headache. Appetite changes and food cravings. Irritability, sleep problems, and tension. Anxiety, sadness, and mood swings. It also lists trouble thinking or focusing among PMDD symptoms. It says PMDD can interfere with daily life. NIMH describes ADHD as a disorder marked by lasting inattention, hyperactivity, and impulsivity. That matters here because focus problems often get logged next to cycle timing. NHLBI offers a sleep diary to review with a doctor. It records sleep quality and quantity. It also records medicine use, alcohol, caffeine, and daytime sleepiness.

This is the most sensitive group on the page. One month of PMDD notes can hold a lot at once. Mood, anger, and anxiety. Sex and sleep. Medicine, alcohol, or substance use. Conflict and self-harm risk. And period timing. All in the same file.

Keep it small. Daily scores plus one short label carry almost all of the clinical value. A score on cycle day 26 tells a clinician what a paragraph would. Keep the paragraph elsewhere.

Keep the safety plan out of the app. Crisis contacts, self-harm detail, and the plan itself need a different home. Put them somewhere you fully control. Put them somewhere you can reach fast.

And know when privacy is not the first task. If there is immediate danger to you or someone else, use emergency services now. Maybe you are in crisis but not in immediate physical danger. That includes suicidal, mental health, and substance use crisis. Contact 988 or a local crisis line. The 988 Lifeline supports people in suicidal crisis or emotional distress. Handle privacy afterward.

6. Hormones, medicine, and life stage

This group covers birth control, PCOS, perimenopause, and menstrual migraine.

NICHD describes PCOS as a hormone condition. It can involve irregular periods, acne, and increased hair growth. It can also involve insulin resistance and fertility concerns. Office on Women's Health lists menopause-transition symptoms as well. Those include period changes, hot flashes, sleep problems, mood changes, and vaginal or urinary changes. Mayo Clinic says migraine can include intense throbbing pain, nausea, and vomiting. It can also include strong light or sound sensitivity. Mayo lists hormone changes, stress, alcohol, caffeine, bright lights, and strong smells among possible triggers. The American Migraine Foundation says menstrual migraine can occur around menstruation. It says migraine may change during perimenopause and menopause. It also says headache diaries help doctors review patterns.

What this adds to your logs. Medicine names and doses. Missed or late doses. Side effects. Lab results. Pharmacy records, which live outside the app entirely. For migraine, aura notes and rescue medicine use. For perimenopause, symptoms that can intersect with work and age.

Two specific cautions.

Prescription data has its own trail. A pharmacy record, an insurance claim, and a refill reminder each exist whether or not you log anything. Rename calendar reminders so they do not spell out the medicine.

Documenting for insurance is a different goal. If you are building a case for coverage, more detail helps. Log actual cycle lengths over several months rather than "irregular." Log symptom severity so there is a before and after when treatment starts. Log how much it affected work or school, because appeals often turn on that. Clinical notes carry more weight in appeals than self-submitted app screenshots. Work through your provider. Just be deliberate that you are choosing a fuller record for a reason.

7. Pregnancy questions and timing

This group covers late periods, cycle predictions, and emergency contraception.

Office on Women's Health says home pregnancy tests may be more accurate after the first day of a missed period. It also says irregular periods make test timing harder to predict. ACOG says emergency contraception can help prevent pregnancy after sex when birth control was not used or did not work as expected.

Why this group needs extra care. The data itself is ordinary. The interpretation is not. A missed period, a test note, a pharmacy receipt, and a search history add up. Together they read as a story. No single item says anything on its own.

Where it leaks, in order of how often people forget:

• Search history on a shared or managed device

• A store or delivery receipt in email

• A test photo in the camera roll, with time and place attached

• A prediction widget on a home screen that says "period due" out loud

• A calendar entry naming a pharmacy or a clinic

• A pharmacy or portal note in an account someone else can open

Keep it small. Log a date and a short neutral label. Skip test photos. Turn off prediction widgets and rename alerts. Check your receipts and downloads folder after, not just the app.

If you have legal concerns about this category specifically, read who can legally get your period data before you log more.

8. Whole-body symptoms and context notes

This group covers digestive symptoms, period flu, and event planning.

Mayo Clinic says to contact care when gas or gas pain comes with other signs. Those include severe or long-lasting belly pain, bloody stools, or a change in stool color or frequency. They also include weight loss, chest pain, nausea, vomiting, diarrhea that does not go away, or constipation.

Also seek care promptly for:

• Black stool.

• Rectal bleeding.

• Blood in urine.

• Signs of dehydration.

• Faintness or dizziness.

• Pregnancy or possible pregnancy.

Do not wait to clean up data if symptoms feel urgent.

What this adds. Bowel and stomach detail. People find it embarrassing to store. It is also genuinely useful for spotting gut patterns that follow the cycle. Illness notes, where the question is whether it is the cycle or a bug. And event notes, which are the sleeper privacy problem in this group.

Event notes deserve a callout. "Wedding, 14th, period likely" names a date, a place, and other people. Outfit photos carry metadata. Group chats about the same plan sit on someone else's phone. Log the date and a symptom, not the event and the guest list.

9. Wearables and continuous sensors

A wearable changes the shape of the problem. A manual log is something you choose to write. A sensor stream is collected whether you think about it or not.

What that means in practice:

• The device maker has an account, separate from your period app.

• Data usually syncs to that company's servers by default.

• Third-party apps connected to the device get their own access.

• Fitness, sleep, and heart data sit alongside cycle data, which makes the whole set more revealing than any part.

The FTC explains how websites and apps can collect information. They use tools such as cookies, pixels, device fingerprinting, and ad identifiers. A connected device adds more of those signals, not fewer.

One more risk to name. Data stored on a company's server can be reached by legal process. That means a subpoena or a court order. A subpoena is a legal order to hand over records. A tracker that keeps data on your device has no server copy.

What to check:

• Which company account holds the device data?

• Is cycle data syncing to that account?

• Which third-party apps are connected, and which can you remove?

• Can you turn off cycle features while keeping the rest?

• Can you export and then delete the history?

• What do the alerts say on the watch face?

Know when privacy steps cannot help. Privacy steps can lower some exposure. They cannot fix unsafe homes, coercive relationships, urgent medical symptoms, or legal risk. Maybe someone is monitoring your phone or pressuring you to share data. Then use the safest device and support channel you have. If symptoms feel medically unsafe, get care first. You can clean up records later.

10. Before you export, screenshot, or send

Run this every time, regardless of condition:

• Who will receive this?

• Why do they need it?

• Is a one-page summary enough?

• Does it include sex, partner, or conflict notes?

• Does it include safety or self-harm details?

• Does it include medicine or substance notes?

• Will it become part of a medical record?

• Can I strip private notes first?

• Will a copy stay in email, cloud storage, or a portal?

Then build the summary rather than sending the export:

Tracking summary
    
    Time range:
    
    Period start dates:
    
    Main symptom and when it happens:
    
    Worst days:
    
    Function impact:
    
    Medicines or treatment changes:
    
    Safety concerns:
    
    What I want help with:

11. What the law covers, and what it does not

HHS says HIPAA applies to covered entities and business associates, and that many organizations holding health information do not have to follow HIPAA privacy and security rules. HHS also points health app makers to guidance with three questions. What does the app do? What data does it collect? What services does it provide? The answers help work out which laws apply.

The FTC says the updated Health Breach Notification Rule reaches further. It applies to health apps and similar tools that HIPAA does not cover. The FTC says breach notices may involve disclosures nobody approved. The FTC also says privacy and security matter for apps that collect and share health information. Different federal laws may apply, depending on the app.

Put simply: a consumer symptom app is usually not a medical record, and it usually is not covered like one. That does not mean nothing applies. It means the protections are different and thinner.

So check the app itself:

• Does it require an account?

• Does it store data on company servers?

• Does it sync to cloud backups?

• Does it allow export?

• Does it share data with analytics or advertising partners?

• Does it collect location, contacts, or device IDs?

• Can you delete the account and the data?

• Does deletion cover backups?

What Floriva changes

Floriva is built for the first layer of the two-layer system. Dates, scores, and short symptom labels stay on your device, without a cloud account holding your history.

It does not decide what you type. It does not control your screenshots, your photos, your pharmacy record, your portal, or your wearable's company account. Those are still your calls, and the sections above are how to make them. See how our data handling works.