With the stories about data from period tracking apps being shared with law enforcement, I was wondering if there was a self hosted alternative I could host for my daughter. My searches so far have not returned any good results. Thanks!

  • CameronDev@programming.dev
    link
    fedilink
    English
    arrow-up
    50
    ·
    1 year ago

    I wrote a period app for my partner, everything is encrypted and never leaves the device.

    It has a option where you can set false passwords, so that if you are being compelled to unlock it, it will get up fake data.

    Code is open source: https://github.com/cameroncros/PrivatePeriodTracker

    https://play.google.com/store/apps/details?id=com.cross.privateperiodtracker

    It may not meet your needs, but perhaps worth a look. I am open to adding features (except for ads and tracking obviously).

    (I have posted this before, but with an inappropriate account)

    • Biff@lemmy.world
      link
      fedilink
      English
      arrow-up
      30
      arrow-down
      1
      ·
      1 year ago

      “if you are being compelled to unlock it” What kind of world are we living in? I feel awful for the kids of today.

      • Countess425@lemmy.world
        link
        fedilink
        English
        arrow-up
        2
        ·
        edit-2
        1 year ago

        That’s just if it’s unlocked with your thumbprint, since, if you’re being arrested the cops get your thumbprint anyway, but if it’s a password or phrase, you have the right to remain silent, correct?

      • UFO64@lemmy.world
        link
        fedilink
        English
        arrow-up
        2
        arrow-down
        1
        ·
        1 year ago

        This could 100% happen in the US today given the reproductive laws being passed.

    • JonDotG@lemmy.worldOP
      link
      fedilink
      English
      arrow-up
      9
      ·
      1 year ago

      This is super cool. Unfortunately all the teens are using iPhones and I don’t think I’ll be able to install this. If it’s ever an iPhone app I’ll be the first downloader.

      • CameronDev@programming.dev
        link
        fedilink
        English
        arrow-up
        6
        ·
        1 year ago

        Pretty unlikely that I ever port to iPhone, I dont have one to dev on. To be honest, my partner doesnt even use it, so it was a little bit of a waste of time, except for a learning opportunity.

      • cooopsspace@infosec.pub
        link
        fedilink
        English
        arrow-up
        3
        arrow-down
        8
        ·
        edit-2
        1 year ago

        Given that Apple is more likely to submit to government (any, any country) coercion and doesn’t allow side loading of apps your next phone should be Android. Especially one that supports GrapheneOS or CalyxOS.

        Failing that, many apps work as web applications and if saved to the home screen it’ll both look and feel like a native app.

        • UFO64@lemmy.world
          link
          fedilink
          English
          arrow-up
          3
          arrow-down
          1
          ·
          1 year ago

          Apple’s systems are designed so that they don’t really have a choice in the matter. The end user holds the only master key.

  • TenderfootGungi@lemmy.world
    link
    fedilink
    English
    arrow-up
    23
    ·
    1 year ago

    Use the one built into iPhones and either encrypt iCloud so Apple cannot read it ( but no way to recover if you forget password) or turn off iCloud sync for health data (you will lose history with new phone).

    Or, print out a one page annual calendar and use a pencil.

  • cooopsspace@infosec.pub
    link
    fedilink
    English
    arrow-up
    8
    ·
    edit-2
    1 year ago

    I’d probably just spin up a calendar such as one on Nextcloud but also change the name of the event to another plausible name such as:

    Pay day.
    Grandma coming to town.
    Grandma leaving town.
    Walk the cat.
    Pick up groceries.
    Collect mail.
    Drop off mail.

    • corroded@lemmy.world
      link
      fedilink
      English
      arrow-up
      6
      ·
      1 year ago

      As someone who uses Nextcloud, why do you suggest obfuscating the name of the calendar event? My nextcloud instance is only accessible from outside my LAN via HTTPS, so no concern about someone using a packet sniffer on public WiFi or something of that sort. The server is located on my property, so physical security isn’t a real concern unless someone breaks in with a USB drive or physically removes the server from the rack and steals it. If someone was to gain access to my network remotely, they’d still need login credentials for Nextcloud or for Proxmox in order to clone the VM drive.

      To be clear, I’m not disagreeing with you; I’m wondering if I may be over-estimating data security on my home network. Considering you’re posting from infosec.pub, I’m assuming you know more about this than I do.

      Also, I feel like I need to say that the fact that OP even needs to consider data security for something like really makes me wonder how parts of our society have gone so wrong.

      • bogo@sh.itjust.works
        link
        fedilink
        English
        arrow-up
        5
        ·
        1 year ago

        If your concern for wanting to self host is that you’re concerned your government might attempt to access that data, then you should also assume they could get a warrant for that data and force you to decrypt it if it were encrypted at rest on a machine in your home.

        • corroded@lemmy.world
          link
          fedilink
          English
          arrow-up
          2
          ·
          edit-2
          1 year ago

          That’s a very valid point, and certainly a reason to obfuscate the calendar event. I would argue that in general, if the concern is the government forcing you to decrypt the data, there’s really no good solution. If they have a warrant, they will get the encrypted data; the only barrier is how willing you are to refuse to give the encryption key. I think some jurisdictions prevent this on 5th amendment grounds, but I’m not not a lawyer.

          • bogo@sh.itjust.works
            link
            fedilink
            English
            arrow-up
            2
            ·
            1 year ago

            Right, this is exactly what I was saying. Plausible deniability because you know you’re not going to be able to fight to protect the data when they come knocking.

      • SeriousBug@infosec.pub
        link
        fedilink
        English
        arrow-up
        4
        ·
        1 year ago

        The police can confiscate your servers. Considering some states are treating abortion as murder, I don’t think it’s unrealistic to say the police could raid your home and confiscate your devices just on suspicion.

        The only thing safe against that is an encrypted device locked with a password, no biometrics like fingerprints or face ID. As far as I know, you can refuse to give a password under the 5th amendment, but you can’t refuse to unlock a device with a fingerprint reader or face ID.

  • iamacat@lemmy.world
    link
    fedilink
    English
    arrow-up
    5
    ·
    1 year ago

    Drip is one of the better options if you want to just download something from your app store of choice. It’s FOSS, requires minimal permissions, and seems to store all data locally.

  • irotsoma@lemmy.world
    link
    fedilink
    English
    arrow-up
    2
    ·
    1 year ago

    I’ve heard log28 is a good simple app with a local database and without tracking. I haven’t looked at it too closely to verify much. But seems like it hasn’t had an update for a while.

  • Jo Miran@lemmy.ml
    link
    fedilink
    English
    arrow-up
    1
    ·
    1 year ago

    If for some reason self hosting doesn’t work out, try looking into Proton Calendar. Secured, encrypted, and Swiss. They do not entertain subpoenas.

  • nutbutter@discuss.tchncs.de
    link
    fedilink
    English
    arrow-up
    0
    ·
    1 year ago

    Menstrual cycle trackers

    • Drip - Menstrual cycle and fertility tracking. Everything you enter stays on your device.
    • log28 - a (very) simple no-frills period tracker for Android.
  • Chickenstalker@lemmy.world
    link
    fedilink
    English
    arrow-up
    3
    arrow-down
    13
    ·
    1 year ago

    Why do you even need an app? A paper calendar should suffice. Seriously, what function does an app do?

    • JonDotG@lemmy.worldOP
      link
      fedilink
      English
      arrow-up
      11
      arrow-down
      1
      ·
      edit-2
      1 year ago

      Aside from what the other commenter said, this is something I’m looking for for my daughter and believe it or not she prefers an app.

      Also, this is the self hosted community. People self host all kinds of stupid shit. Why are you here?

    • RankWeis@sh.itjust.works
      link
      fedilink
      English
      arrow-up
      8
      ·
      1 year ago

      Besides ease of use and the practicality of having it at hand at all times, these apps show you important stats like longest time between periods, average time between periods, current time since last period. Same with length of period. All useful stats for you, your doctor, and potentially your partner if you’re trying for a baby.