What a cycle app knows, and who else might
Cycle data can reveal pregnancy, pregnancy loss, fertility treatment and sexual activity. Noralia has no account and no cloud sync at all, so there is no server-side profile to disclose, breach or sell.
Why this category is different
Period and fertility tracking produces some of the most revealing data a phone holds. A gap in logging, a change in symptoms, a switch in contraception — read together these can indicate a pregnancy, a pregnancy loss, fertility treatment or sexual activity, often before the person has told anyone.
Under GDPR this is a special category of personal data. In practice, the concern is broader than regulation: it covers who can see a notification on a lock screen, what a shared device exposes, and what happens to a database if a company is acquired or compelled to hand it over.
The usual architecture, and its consequences
Most cycle apps require an account before you can log a single day, then sync entries to a server. That design is convenient — it enables restoring on a new phone — but it creates a permanent, identifiable, server-side record of intimate health data.
Once that record exists, its safety depends on the operator's business model, security practices and legal exposure, none of which the user controls or can inspect. Reporting over recent years has repeatedly found cycle apps sharing data with advertising and analytics partners.
What local-first removes
Noralia takes the opposite approach: there is no Mintlane account to create and no cloud sync to switch off, because neither exists. Cycle entries, symptoms, notes, reminders and settings are stored in an encrypted database on the device, with app lock available on top.
This has a real trade-off and it is worth stating plainly: with no server copy, losing the phone without a backup means losing the history. Noralia chooses that over holding a copy of your cycle data on infrastructure someone else controls.
Optional crash reports are off by default and limited to technical diagnostics; health data is not intentionally included. Everything can be exported or deleted from inside the app.
What that looks like in practice
- No account: nothing to register, nothing to identify you by.
- No cloud sync at all — entries stay in an encrypted local database.
- App lock with biometrics or a code on top of local encryption.
- Crash reporting off by default and limited to technical diagnostics.
- Export or delete your full history yourself, at any time.
Noralia
Noralia has been prepared for Google Play and the App Store and is moving through store review. The Noralia overview has the latest availability and covers what the app does and how it handles cycle data.
More guides
- Cycle tracking without the subscription trap
- Reminders that do not out you
- A cycle prediction is an estimate, not a diagnosis
A full feature overview lives on the Noralia app page, more articles in the Noralia guides, and answers to technical questions in the support section.