Is Clue safe? What the privacy policy actually says

Short answer: Clue is one of the more careful mainstream period trackers. It’s based in Germany under GDPR, says it doesn’t sell your data, and is open about using de-identified data for scientific research. The caveats are structural: it requires an account, and your cycle data lives on Clue’s servers — so its privacy rests on Clue’s policies and good conduct rather than on the data never leaving your phone.

Why Clue has a good reputation

Clue earns its standing for a few concrete reasons:

• GDPR by default. Clue is headquartered in Berlin and operates under the EU’s General Data Protection Regulation, one of the strictest privacy regimes in the world. That gives users real rights — access, deletion, portability — by law, not just by goodwill.
• A research-driven culture. Clue collaborates with universities and publishes on menstrual health. Its use of de-identified, aggregated data is framed around science rather than ad targeting.
• No FTC enforcement history. Unlike Flo, Clue hasn’t been sanctioned by a regulator for breaking its own privacy promises.

The honest caveats

None of the above makes Clue an on-device tracker. The trade-offs:

• It requires an account. That means Clue holds an identifier that can be linked to your cycle. (Want to avoid this entirely? Trackers that work without an account.)
• Your data lives on Clue’s servers. It can be read by Clue, is subject to whatever legal jurisdiction applies, and — like any server — could in principle be breached.
• “De-identified” isn’t the same as “gone.” Sharing aggregated data for research is benign for most people and arguably a public good. But it’s still your data being processed by third parties; if your threat model is “no one but me touches this,” that line matters.
• Some third-party tooling. Like most apps, Clue’s privacy policy permits analytics tooling. Check the current policy for exactly what’s in use today, since these change.

Is Clue safe enough for you?

For the majority of users who want a thoughtful, well-run tracker and aren’t trying to defend against a worst-case legal or breach scenario, Clue is a reasonable, relatively private choice — more so than most of the free, ad-heavy apps. If you specifically want a tracker that holds no readable copy of your data anywhere off your phone, Clue’s server-based model can’t offer that, by design.

That’s the line that separates the careful-server tier (Clue) from the on-device tier. We lay it out in what makes a period tracker private, and rank the field in the best period tracker apps.

The bottom line

Clue is a good-faith operator in a category full of bad ones, and its reputation is largely deserved. If you trust a careful company under GDPR to hold your data, Clue is among the better picks. If you’d rather not extend that trust to anyone, the answer isn’t a better policy — it’s a different architecture, like Dew, Euki, or Drip, where there’s no server copy to trust in the first place.