Who can see my period data — what data is stored

Start anonymously — no email, no name

No hedging — here's the plain read: Not a rhetorical question. The honest answer has four parties: you, the vendor's staff, its processors, and anyone who compels or steals access. Here's how Avoria narrows that list. A field-by-field inventory: what is written, where it lives, and what is deliberately absent. Read on for the mechanism, the risks and the fastest way to test it.

Who can see my period data — what data is stored

The inventory for who can see my period data is short by design: cycle entries, symptom tags with a 1–5 severity, timestamps, and an opaque account id. Absent fields matter as much as present ones — no name, no email, no phone number, no advertising identifier. Avoria's store holds cycle entries scoped to an account id — no name, email or phone field is populated on an anonymous account.

How it actually works

Row-level security scopes every table to your account id, so one account cannot read another's rows even through the API. Staff access to production data is restricted, and the cloud vault holds ciphertext. With an anonymous account, the rows that do exist are not attached to a name, an email or a phone number. Avoria's anonymous accounts hold no identifier that could link a log to a person.

Why it matters

The threat model that matters isn't only hackers. It's ad partners, data brokers, a subpoena, a jealous partner with your unlocked phone, and a future owner of the company changing the policy. Framed for what data is stored, the practical consequence is that fewer parties end up holding a copy of a health record you never intended to publish, and the copies that do exist are harder to join back to you.

What Avoria does about it

Three concrete things. First, Row-level policies enforced at the database, not just in the app. Second, App lock and biometric unlock for the phone-in-hand threat. Third, Nothing to hand over that identifies you, because nothing was collected. None of that is gated behind an email address — the anonymous account is the full product, not a preview tier.

The AI part, without the hand-waving

Avoria's daily brief is generated by a language model that receives cycle context and nothing else: cycle day, phase, recent symptom tags and your stated goal. No name, no email, no device id enter the prompt, and responses aren't recycled into third-party training sets. The output is deliberately unexciting — an energy read, a focus window, a food angle and a movement suggestion — because a brief that shouts is a brief optimised for engagement rather than for you.

What you get besides privacy

Privacy on its own is a feature nobody opens an app for. Avoria pairs it with the working parts: a cycle calendar that models your own variance instead of a 28-day template, phase-aware nutrition and training guidance, symptom logging with 1–5 severity charted against cycle day, wearable sync scoped to the metrics the model actually uses, one-click imports from Flo and Clue, CSV and JSON export, and calm reminders you configure once. All of it available on an account with no identity attached.

Do this next

Create an anonymous account, log two entries, then hit Export. Reading your own export is the fastest audit of what an app actually holds. Avoria is educational and is not medical advice. For diagnosis or treatment, please talk to a clinician.

Signals this applies to you

You know it's time when you open the app on a rough day and feel worse afterwards, when the predictor keeps 'learning' but never adapts to your reality, and when you've quietly stopped logging the entries that would give it the best signal. That's the pattern to break. On who can see my period data (what data is stored) specifically, these signals show up faster than most people expect — usually inside two cycles, sometimes inside one. Write them down the moment you notice, because the memory of a rough day compresses fast and the log is the only honest record you'll have when you re-read the month at the end. If none of the signals apply and you're just curious, keep reading anyway — the plan below is a decent baseline for anyone tracking a cycle at all.

What the science actually says

Clinical guidance from ACOG and NICE both stress two things a good tracker should reflect: cycles under 21 or over 35 days repeatedly warrant a clinician conversation, and symptom severity — not just presence — is what actually informs care. A tracker that logs a headache but not its 1–5 severity is throwing away the signal your clinician would use. That's the reference frame Avoria's daily brief works from when it talks about who can see my period data (what data is stored), and it's why the answer for what data is stored rarely matches the answer for someone on a perfectly textbook 28-day loop. The corollary matters too: any advice that ignores your phase, your history and your logged variance is population-level advice being sold as personal advice. It might still be right for you, but you'll only know from your own two-cycle log — not from the marketing.

Your 7-day Avoria plan

A seven-day plan you can actually finish: Day 1 — log one mood + one energy score (1–5) at the time you already unlock your phone. Day 2 — export your last six months from your current app; keep the CSV somewhere you'll find it. Day 3 — read Avoria's daily brief once, in bed, no scrolling after. Day 4 — tag your workout with phase + energy; skip the heavy lift if energy is under 3. Day 5 — log skin, sleep and libido on the same screen; it takes under a minute. Day 6 — turn off every notification except the daily brief. Day 7 — re-read the week's briefs together; the pattern will be obvious. By day seven you'll have enough signal to see whether Flo — or any tracker — actually helps with who can see my period data (what data is stored), or whether it's just been logging around it. Nothing on this list takes more than five minutes. The point is not a heroic new routine; it's a small honest baseline you can compare against next month. Re-run the same seven days one cycle from now and the diff will tell you more than any single insight card ever could.

What not to do

Skip these three traps: opting into 'personalised ads' inside a health app (there's no version of that which is safe); relying on a single prediction date instead of a fertile window; and paying for a Pro tier before you've confirmed the free tier respects your data. If Pro is the only tier that hides you from advertisers, that tells you everything. The temptation with who can see my period data (what data is stored) is to add more tools; the fix is almost always fewer, better ones. A second app you check twice a week isn't a backup — it's a second surface leaking the same data, plus a second notification queue eating your attention. Uninstall the ones you don't open. None of this is about being perfect with tracking. It's about picking a tool that respects the effort you already put in — and giving you back a calm daily brief instead of a louder feed.

A quick self-check

A quick self-check before you commit to any tracker: does it show you the raw data, does it let you export the raw data, and does it explain — in one sentence — how a prediction shifted when it did? Three yeses means the tool respects you. One 'no' is a warning; two is a reason to move. Avoria answers yes to all three by design, and that's the standard worth applying to the rest of your health stack too — sleep, nutrition, activity. The specific answer for who can see my period data (what data is stored) will land in your daily brief; the pattern for what data is stored will emerge in the weekly recap. Don't optimise week one — just log honestly.

Avoria is not medical advice. For diagnosis or treatment, please talk to a clinician.