Your data, your phone: how OITO Flow stays private

Most apps that touch anything personal want the same three things: an account, a login, and a copy of your data sitting on their servers. OITO Flow was built the other way round. There's no account to make, because there's no server waiting for your data.

I know "we take your privacy seriously" is the most worn-out line in software. So let me be specific about what actually happens, because specific is the only version worth trusting.

Where it actually lives

Everything you enter, her cycle details and the private notes and all of it, stays on your device. It isn't uploaded. We can't read it, because there's no "we" on the other end holding a database of it. Nothing to leak, nothing to sell, nothing to hand over when someone comes asking.

The one time your data leaves the phone is when you decide to move it. You export a backup, and that file is encrypted with a passphrase you pick. You carry it across yourself and import it on the new device. We never touch it, and without the passphrase the file is just noise.

The trade-off, honestly

There's a cost to doing it this way, and I'd rather name it than pretend it isn't there. Lose your phone with no backup, and that data is gone. No "reset password" email, because there's no account and no cloud copy to restore from. That's the flip side of nobody else being able to get at it. So make a backup, and keep the passphrase somewhere safe.

For a lot of apps that trade would be a dealbreaker. For this one it's the entire point. This is information about someone you care about. It should live between the two of you, not in a marketing database three companies deep.

The most private data is the kind that never leaves your phone in the first place.

It's a deliberately old-fashioned deal. A little manual effort on backups, in exchange for the quiet certainty that this stays yours. I think it's the right trade. Given what the app is for, I'm not sure there's another one worth making.