I was going to recommend this to someone I know but when I realised your readme.md is entirely AI-generated, I guess the whole project is probably vibe-coded. I can't in good conscience recommend someone trust their health data to a vide-coded app because they tend to have security problems.

Also all ai-generated code is public domain so your AGPL license is kinda empty. Might as well use MIT.

I recommend you set the Content-Security-Policy http header so that inline javascript (commonly used for XSS attacks) cannot be executed.

https://web.dev/articles/strict-csp

CSP being off is not exactly a security hole but it makes security holes much more likely. By using a strict CSP configuration you close off the possibility of a whole class of holes.

Also think about setting the Access-Control-Allow-Origin header and enable CORS on your REST endpoints.

https://developer.mozilla.org/en-US/docs/Web/HTTP/Reference/Headers/Access-Control-Allow-Origin

Again, kind of a pain in the ass but gets rid of a bunch of potential problems before they start.

Why not use drip or mensinator? Both FOSS.

What a chad. I wish I were woman to use your app.

A lot of cycle trackers right now sell that data and there is some concern it could be used to find women who have miscarried and charge them with a crime.

Something like your idea is safer for women to use.

I use Android, my wife - iOS. So many things that on F-Droid are simply unavailable to her (yes, I tried to convince her to go to our side). So I searched for living projects with self-hosting idea, did not find one and decided to create one. I have a CS background, though my professional work today is mostly in finance as a senior analyst where I write code to automate and optimize workflows. Ovumcy started as a personal project exploring a self-hosted approach to cycle tracking.

Do you know about drip? It as local non-profit cross-platform open source smartphone app and my girlfriend is a happy user for years.

I did the same thing for my partner. She didn't migrate in the end, and google killed my play store account.

https://bloodyhealth.gitlab.io/ - is also a good option.

Some kind of data import would be nice to have according to my partner, but it might be tricky with all the different apps.

My partner might volunteer to try it out, but since she is very regular it probably wouldn't help much for input.

The main feature she says she misses from Flo (we are also data savy, so she left it), was for when things were irregular, the ability for it to predict the why's and when's like stress, etc.

In the current iteration, if something is irregular can you put in what happened and have it auto-adjust?

Also, reminder notifications a couple of days out were helpful.

I had been considering a project like this as well, but one that uses on-device analytics to record the why's and when's, then allowing for scrubbed anonymous submissions (date adjusting/etc like you do in a clinical trial) to allow for algorithm development while preserving privacy.

Happy to have a conversation about this for future potential PRs (I am an avid FOSS contributor in both planning and code, even working on a project for the Linux Foundation kernel dev team now).

There definitely an actively developped open source privacy focused period tracker available, go check it out: https://gitlab.com/bloodyhealth/drip But all data stays local on your device , which is of course good from privacy pov but if you are looking for something accessible from different devices then this might not be suitable.

Acronyms, initialisms, abbreviations, contractions, and other phrases which expand to something larger, that I've seen in this thread:

6 acronyms in this thread; the most compressed thread commented on today has 9 acronyms.

[Thread #140 for this comm, first seen 7th Mar 2026, 01:40] [FAQ] [Full list] [Contact] [Source code]

I use a period tracker to identify file extensions.

Awesome! My wife just had her IUD removed and will probably start tracking again. Will get this set up for her and see if she likes it, will provide feedback if she has any.

This is super cool! I'm not afab so I can't help test and my question may be ignorant but I'm curious why one would want this functionality to not be something native and benefits from being hosted at all?

There are some f-droid trackers that look nice (I keep seeing one there with a super pretty ui) but I'm not sure what the tradeoffs of just using a native application for something like this might be