Drip is an open-source, gender-inclusive menstrual cycle tracker maintained by a volunteer collective ("bloodyhealth") and funded in part by Germany's Federal Ministry of Education and Research via the Prototype Fund, the Open Knowledge Foundation Germany, and the Mozilla Foundation. Its privacy policy states the app collects no usage data or personal information, shows no ads, and stores menstrual-health data locally on the device by default, while flagging that a user's own device-level cloud-backup setting may still copy that local data off-device unless disabled. The app's full source code is published under the GPLv3 license on GitLab with dozens of publicly named contributors, and no security incident or regulatory action involving Drip was found in this research.
TIMELINE
NO ENTRIES ON FILE YET.
TOOLS WE RECOMMEND
PLUS
RECEIPTS
9 ON FILE
COLLECTION
Drip's FAQ page states that, by default, drip data is stored only on the user's phone, which the maintainers give as the reason their privacy policy itself is short.
Drip's Privacy Policy (last updated August 30, 2022) states the app collects no usage data or personal information, shows no ads, and contains no spyware; any menstrual-health data the app stores is kept locally on the user's device.
Drip's source code repository, publicly hosted on GitLab under the "bloodyhealth" namespace, describes the project as open source and available on Google Play, the App Store, and F-Droid; the repository's public commit history names dozens of individual contributors, and the project maintains public Mastodon and Twitter accounts plus a public contact email.
Drip's repository publishes the app's complete source code under the GNU General Public License version 3 (GPLv3), letting anyone inspect, audit, or fork the actual running code rather than relying solely on the operator's description of it.
Drip's FAQ discloses that the project is maintained by an informal, unregistered volunteer collective doing largely unpaid work, and names the Prototype Fund — a German public-interest software funding program — as a dated funder starting October 2023, when two people were funded to work on the app part-time for five months.
Drip's Privacy Policy page displays a "Funding by:" section with logos linking to Germany's Federal Ministry of Education and Research (bmbf.de), the Prototype Fund (prototypefund.de), the Open Knowledge Foundation Germany (okfn.de), and the Mozilla Foundation (foundation.mozilla.org); the page carries no descriptive text alongside the logos beyond the links themselves.
Drip's Privacy Policy notes that although the app saves data only locally, a user's own device-level settings may still trigger an automatic cloud backup of that local data, and advises users to check their general device settings to prevent this from happening — the one documented way locally stored Drip data could leave the device without an explicit in-app share action.
Drip's Privacy Policy points users to the app's published source code as the way to verify its privacy claims independently; no dedicated third-party security audit, bug-bounty program, or breach/regulatory-action record for Drip was found in this research, so this pillar rests on a clean record without a formal third-party audit artifact.
Drip's Privacy Policy states the only device permission tied to a feature is push notifications for reminders, and that permission is optional — declining it does not block use of the app; the policy discloses no analytics, advertising, or crash-reporting SDKs.