On May 31, 2026, Dutch digital-rights group Bits of Freedom filed a complaint with the Netherlands' Data Protection Authority against Flo, the world's largest period-tracking app, alleging it processes highly sensitive reproductive data and enables targeted advertising built on intimate user information. The timing was awkward: Flo had spent the prior days, roughly May 28 through June 1, running a social-media campaign publicly addressing its privacy record for one of the first times.

Why It Matters

Period-app privacy is the defining trust battleground in femtech, and Flo — with hundreds of millions of users — is the category's lightning rod. A new EU regulatory complaint, landing exactly as Flo tries to rewrite its privacy reputation, shows the gap between marketing and watchdog assessment remains wide. A GDPR finding against Flo could reshape data practices across every cycle-tracking app, and the contrast with insurer-backed rival Clue underscores that trust, not features, may decide who wins women's health.

Bits of Freedom argues that menstruation apps collect — and potentially share — data spanning menstrual cycles, symptoms, sexual activity, and pregnancy intentions such as whether a user is trying to conceive or avoid pregnancy. The group says Flo is used by more than 200,000 women in the Netherlands and contends that 57% of those Dutch users are not fully aware their data is shared with third parties.

Flo's campaign, meanwhile, leaned into transparency as a brand asset. It featured the company's VP of Privacy and Data Protection Officer Sue Khan and VP of Security Laure Lydon, alongside cybersecurity creator Tazin Khan, in a series of videos directly referencing the lawsuit that produced an $8 million Flo settlement in 2025 (part of a larger multi-party payout also involving Google and Flurry).

The collision of a polished trust campaign and a fresh regulatory complaint captures femtech's central tension post-Dobbs: the same reproductive data that powers the product is the data users most fear being weaponized. Flo has pushed features like anonymous mode in response, but watchdogs argue the default flows still leak too much.

Sources

Update — 2026-06-08

{Initial entry — story first created.}