Is Clue safe? What the privacy policy actually says

Short answer: Clue says it does not sell your data, and as a Berlin company under GDPR it is one of the more careful mainstream period trackers. But its own App Store privacy label (checked August 23, 2026) declares “Data Used to Track You” for identifiers, and links health and fitness data to your identity. It needs an account and keeps your cycle on its servers, so its privacy rests on Clue’s policies, not on the data never leaving your phone.

Does Clue sell your data?

No, not in the strict sense: Clue says it does not sell personal data. It does share de-identified, aggregated data with researchers, its policy allows third-party analytics, and its App Store label declares “Data Used to Track You”. So your data is processed beyond Clue, even though it isn’t sold. If you’d rather take it back, here is how to delete your Clue data and account.

Why Clue has a good reputation

Clue earns its standing for a few concrete reasons:

• GDPR by default. Clue is headquartered in Berlin and operates under the EU’s General Data Protection Regulation, one of the strictest privacy regimes in the world. That gives users real rights — access, deletion, portability — by law, not just by goodwill.
• A research-driven culture. Clue collaborates with universities and publishes on menstrual health. Its use of de-identified, aggregated data is framed around science rather than ad targeting.
• No FTC enforcement history. Unlike Flo, Clue hasn’t been sanctioned by a regulator for breaking its own privacy promises.

Clue’s privacy policy, in plain words

None of the above makes Clue an on-device tracker. What the policy and label add up to:

• It requires an account. That means Clue holds an identifier that can be linked to your cycle. (Want to avoid this entirely? Trackers that work without an account.)
• Your data lives on Clue’s servers. It can be read by Clue, is subject to whatever legal jurisdiction applies, and — like any server — could in principle be breached.
• “De-identified” isn’t the same as “gone.” Sharing aggregated data for research is benign for most people and arguably a public good. But it’s still your data being processed by third parties; if your threat model is “no one but me touches this,” that line matters.
• Some third-party tooling — and a tracking label. Like most apps, Clue’s privacy policy permits analytics tooling, and its App Store label puts it in the “tracks you” tier of our Period Tracker Privacy Index. Check the current policy for exactly what’s in use today, since these change.

Is Clue safe enough for you?

For the majority of users who want a thoughtful, well-run tracker and aren’t trying to defend against a worst-case legal or breach scenario, Clue is a reasonable, relatively private choice — more so than most of the free, ad-heavy apps. If you specifically want a tracker that holds no readable copy of your data anywhere off your phone, Clue’s server-based model can’t offer that, by design.

That’s the line that separates the careful-server tier (Clue) from the on-device tier. We lay it out in what makes a period tracker private, and rank the field in the best period tracker apps.

The bottom line

Clue is a good-faith operator in a category full of bad ones, and its reputation is largely deserved. If you trust a careful company under GDPR to hold your data, Clue is among the better picks. If you’d rather not extend that trust to anyone, the answer isn’t a better policy — it’s a different architecture, like Dew, Euki, or Drip, where there’s no server copy to trust in the first place.