It can't leak what it never collects
Reproductive health data is some of the most sensitive there is. FlowKeeper's answer is simple: don't collect it centrally at all. There are no servers, no accounts, and nothing to breach.
Four promises, enforced by design
100% on your device
Your cycles, symptoms, and notes are stored only in the app's local database — never uploaded anywhere.
No account, ever
No email, no password, no sign-up. You open the app and start — there's no identity to track.
Zero analytics
No third-party trackers, no telemetry, no crash reporting to a server. We don't watch how you use it.
No subscriptions
One-time purchase, forever access. You shouldn't have to pay monthly rent on your own health data.
Privacy as architecture, not a promise
Most apps ask you to trust a privacy policy. FlowKeeper removes the need for trust: the data simply never leaves your phone, so there's no central store to leak, subpoena, or sell.
Everything — logging, predictions, reminders — is computed locally. The prediction engine runs entirely on-device, which is exactly why we can explain its math openly.
Where your data lives
Lock it, export it, or erase it
App lock
Add a passcode and biometric unlock, with an auto-lock delay you set. The passcode is hashed and stored in the secure keychain.
Export & import
Generate a PDF summary or a CSV of your raw data whenever you like — and import a CSV back to move your history to a new phone, even between iOS and Android. It all stays on your device: you pick the file, and nothing is ever uploaded.
Delete everything
One tap permanently erases all your logged data from the device. No “are you sure it's really gone” — it's gone.
Health tracking that respects you
Available on iPhone today. Coming to Android soon.