Tuhr is two surfaces: this website at tuhr.app, and the mobile app launching in June 2026. The privacy story for each is below.
This website
- The waitlist form sends your name and email to Formspree. Nothing else. No tracking pixels, no GA, no Facebook pixel.
- Optional Cloudflare Web Analytics measures aggregate traffic. No cookies, no fingerprinting, no per-user identifiers. How it works.
- The tools (/tools) run entirely in your browser. Nothing you type into them is saved or sent anywhere. Refresh the tab and the state is gone.
- Fonts are served from Google Fonts (with
preconnect); Google receives a request for the font files. Standard for the web; switch to self-hosted fonts is on our list.
The app (early access June 2026)
The app is still in development. The privacy promise we are designing toward is below; the final policy will be published with the release. If anything below isn't true on launch day, we will say so.
- Cycle data, daily logs, qada records, profile, and every personal field will be stored on your device. We are building it without a user account or a server-side database for that data.
- If we ship optional backups, they will be encrypted with a passphrase only you know and written to a destination you choose; the passphrase will not be sent or stored by us.
Why this matters
Period data is among the most intimate data a phone can hold. Existing apps store it in the cloud, profile users on it, and sometimes hand it to advertisers and law enforcement. We chose the constraint that the data physically cannot leave your device because it removes the question of whether to trust us.
Last updated: 2026-04-24. Reach us through the channels on the About page.