Your data is on this phone.
Most period trackers ask you to trust them. PinkyBloom lets you check. Here is the receipt.
Health data sent to a server
0
Not by promise — by design.
Everything that can connect — and what it sends
We'd rather show you the whole list than hide behind a slogan. Most of it never leaves your phone. The few things that can are yours to control — and we can't read any of it.
On-device AI (Pinky)
on deviceRuns entirely on your phone. Your questions and health context never leave the device.
Everything you track
on deviceYour cycle, symptoms, moods and notes are stored encrypted on your device — not on our servers.
iCloud backup
your iCloudOff by default. If you turn it on, it syncs to your own private Apple iCloud — we still can't read it.
Partner sharing
encryptedOff until you choose to pair. Then it's end-to-end encrypted — our relay only ever holds scrambled data we can't open.
Anonymous analytics
no healthOn by default to help us fix bugs — a random ID and app version only, never any health data. Turn it off anytime.
The AI model (Android)
no healthAn optional, one-time download if you enable advanced AI. It sends nothing about you — it just fetches the model, which then runs on your phone.
No internet permission (Android)
on deviceOn Android, the app we wrote never even asks your phone for permission to reach the internet for your data. The built app carries one only because two Google on-device libraries — the screenshot text-reader and the model downloader — include it, and neither sends anything about you.
Don't take our word for it
Turn on airplane mode and keep using PinkyBloom. Log your symptoms, see your predictions, ask Pinky a question — it all still works, because it all runs on your phone. Nothing could have left.
Private isn't a setting. It's the whole design.
No account. No ads. No cloud by default. Just a beautiful tracker that keeps your body's data where it belongs — with you.