Safely Export, Delete & Port Your Period Data (iPhone)

12 min read
Safely Export, Delete & Port Your Period Data (iPhone)

Introduction

Your menstrual data is deeply personal — and you deserve clear, safe steps to move or remove it on your terms. This guide shows iPhone users how to export menstrual and HealthKit data (export.zip / Cycle PDFs), convert it to JSON/CSV locally, permanently delete unwanted records (including iCloud copies), verify removals, and securely import to a private tracker — all with privacy-first best practices.

Below you’ll find step-by-step iOS instructions, two safe conversion workflows, verification checks, GDPR action steps, a downloadable one-page checklist, and tips for secure transfers (AirDrop, password‑protected files).

Why exporting and deleting your period data matters

Menstrual and fertility data can reveal very intimate patterns about your body and life. Recent reporting and research have shown how some apps or services can share or retain this data in ways users might not expect. That’s why exporting, filtering, and deleting data carefully matters — it gives you control over who keeps what and for how long.

On an iPhone you control several places where that data can live: the Health app (local HealthKit records), iCloud copies when Health sync is enabled, and any third‑party apps that had HealthKit permissions or stored server copies. This guide walks through each of these so you can make decisions intentionally and privately.

Quick checklist: what to prepare before you start

Before you touch exports or deletions, check a few basic security items so you don’t risk accidental exposure or lock yourself out of data you want to keep.

  • Enable a device passcode and make sure Face ID/Touch ID is active.
  • Confirm two‑factor authentication (2FA) is set up for your Apple ID.
  • Review your trusted devices in Settings → [your name] and remove any you don’t recognize.
  • Decide what you want to export (full Health export vs readable Cycle PDFs) and exactly which records you want to delete.
  • Plan where converted files will live temporarily: local computer or private folder in Files (avoid leaving exports in shared cloud folders).

You can download a printable one‑page checklist here: [Download Checklist PDF]. Keep it handy while you work through the steps.

What the iPhone gives you: export formats and limits

Apple provides two main ways to get your period-related data out of the iPhone:

  • Export All Health Data: In the Health app this produces an export.zip containing export.xml — a comprehensive Apple Health XML file with all HealthKit records. This is machine readable but verbose.
  • Cycle Tracking → Cycle History → Export PDF: A human‑readable PDF you can export per cycle or for up to 12 months. This is great for readable backups or sharing a simple summary.

Apple doesn’t offer a native selective CSV/JSON export for specific types. To get CSV or JSON you’ll convert the export.xml locally using tools or vetted apps. For official steps and format notes, see Apple Support on exporting Health data and Cycle Tracking PDF exports.

Step-by-step: Export your Health & Cycle Tracking data (iPhone)

Follow these iOS steps to create a complete export and a readable cycle PDF. Each step is brief and local to your device unless you choose to transfer afterward.

  1. Open Health → tap your profile picture (top right) → choose “Export All Health Data.” Confirm and wait for the export.zip to finish. The file will be offered to save to Files or share via the iOS share sheet.
  2. To save locally, choose Files → pick a private folder (On My iPhone or iCloud Drive private folder). Avoid shared folders that create links publicly.
  3. To export a readable cycle PDF: Health → Browse → Cycle Tracking → Cycle History → choose the cycle period → tap the share/export icon → Export PDF. Save to Files or AirDrop to your Mac.
  4. Tips: Exports can be large. Make sure you have enough storage, disable auto-lock in Settings → Display & Brightness if the export stalls, and use AirDrop to quickly move the file to a nearby Mac if you prefer desktop conversion.
Flat lay of menstrual pad, cup, and tampon against a pink backdrop, highlighting period awareness.
Photo by Karolina Grabowska www.kaboompics.com on Pexels

How HealthKit permissions & iCloud sync affect your data

HealthKit manages permissions per data type. Apps request separate read and write access for Cycle Tracking, Menstruation, Basal Body Temperature, and other types. You can view or revoke these permissions at any time.

  • Check permissions: Health → profile → Privacy → Apps (or Devices) to see which apps have access to which types.
  • iCloud Health sync mirrors Health data across devices on the same Apple ID. If sync is on, deletions on one device propagate to others — and iCloud may hold a copy you need to remove separately.
  • Revoking permissions prevents an app from writing or reading future entries, but it doesn’t automatically delete data the app stored on its own servers. Contact app developers to request server‑side deletion if needed.

Apple’s developer and support docs explain HealthKit permissions and the iCloud Health sync behavior in detail.

Convert export.zip into JSON or CSV — two privacy-first workflows

Converting the Apple export into JSON or CSV gives you structured formats many private trackers accept. JSON preserves nested data, while CSV is easier for spreadsheets. Below are two privacy-first workflows.

This keeps processing on hardware you control and avoids third‑party servers.

  1. AirDrop export.zip from your iPhone to your Mac (or copy via USB to a PC). AirDrop is encrypted and local, so it’s preferred for device-to-device transfers.
  2. On your desktop, use an open‑source tool such as applehealth2csv (GitHub) to convert export.xml → JSON or CSV. For example: run the tool on export.zip and select the type(s) you want to extract (menstruation, cycle entries, BBT).
  3. Process the conversion offline. Inspect the resulting files locally in a text editor or JSON viewer; do not upload the raw export.zip to unknown web services.

Security tips: run conversions on an offline or well‑secured machine if you’re concerned; keep the conversion tool up to date and review its GitHub README for flags and examples.

Workflow B — On‑device (iOS app exporter)

If you prefer doing everything on your iPhone, use a vetted Health exporter app that performs local conversion and lets you save JSON/CSV to Files or AirDrop it to your desktop.

  • Install only apps with clear privacy policies and a statement that data is not uploaded to third‑party servers.
  • Grant only the minimal Health read permissions needed (Cycle Tracking, Menstruation, etc.).
  • Export to Files and then AirDrop or password‑protect the exported file before sharing.

Caution: avoid apps or services that require you to upload export.zip or your Health data to a server you don’t control. Prefer open‑source or privacy-focused tools and read their privacy documentation closely.

A menstrual cup with spillage captured on a soft pink background, symbolizing menstruation.
Photo by Karolina Grabowska www.kaboompics.com on Pexels

Filter & prepare your data before importing

Before importing to a new tracker, remove any metadata or fields you don’t want to transfer. This keeps only the essentials and reduces accidental linkage to other identifiers.

  • Fields to remove: device IDs, provider URIs, app metadata, and any external identifiers the converter included.
  • Fields to keep (example): cycle start/end dates, flow intensity, symptoms, basal body temperature timestamps, notes tagged to cycles.
  • Tools for inspection: local text editor (VS Code, TextEdit), a JSON viewer, or a spreadsheet app (for CSV). Verify timestamps and timezone fields are correct after conversion.

Make a small test import first with one cycle to ensure formatting works and no extra fields get pulled in by the new tracker.

Securely transfer files to your new private tracker

Transfer choices affect privacy. Here are recommended methods and things to check before importing.

  • Preferred: AirDrop (device‑to‑device encrypted), USB transfer to your computer, or saving to Files in a private, encrypted folder.
  • Use password‑protected ZIP files if you must send via the internet. Use a strong unique password and share it separately (e.g., over a secure messaging app).
  • Avoid unencrypted email or public cloud links. If cloud transfer is necessary, use a reputable, privacy-focused provider and protect links with passwords and expirations.

If the tracker app supports imports, follow its import tool and check whether it uploads imported files to its servers. Read the tracker’s privacy policy and data-retention rules before importing.

How to permanently delete unwanted records on iPhone (and iCloud)

Deleting data requires explicit actions in the Health app and, if you use iCloud, a separate step to remove copies from iCloud. Follow these steps carefully.

  1. Open Health → Browse (or Search) → choose the relevant category (e.g., Cycle Tracking or Menstruation).
  2. Tap “Show All Data” → swipe left on a single entry and tap Delete, or tap Edit → Delete All to remove all entries for that type.
  3. To remove iCloud copies: go to Settings → [your name] → iCloud → See All → turn off Health for this iPhone. Then go to Settings → [your name] → iCloud → Manage Storage → Health → Delete Data From iCloud to clear the cloud copy.
  4. Note: Deleting the Health app does not delete Health data. You must delete records and clear iCloud copies explicitly.
  5. Revoke third‑party app permissions: Health → profile → Privacy → Apps → select the app → turn off read/write. Then delete the app and contact its developer to request server-side deletion if you suspect server copies exist.

Keep records of deletion actions (screenshots or export timestamps) in case you need to show proof later.

How to verify deletion — export and inspect

Verification is an essential final step. After deleting data, export your Health data again and search for any remaining entries.

  1. Export All Health Data again (Health → profile → Export All Health Data) and save the new export.zip.
  2. Open export.xml (or convert to JSON/CSV) and search for keywords like “cycle”, “menstruation”, or the specific timestamps you deleted.
  3. Check every device on the same Apple ID and any third‑party apps that had access — they may have retained copies or re‑written entries if permissions remained enabled.
  4. If you find records you expected to be gone, re-check iCloud Health sync settings and contact the third‑party app developers asking for confirmation of deletion.

GDPR & your rights: practical steps to request export or deletion from apps

If a tracker stores your data server-side, GDPR gives you concrete rights. These include access, portability, rectification, and erasure. Portability typically applies when processing is based on consent or contract and the data was provided by you.

Practical steps:

  1. Use the app’s export or account settings to request data first.
  2. If that fails, contact the controller or data‑protection officer using the contact in the app’s privacy policy and request a data export (machine‑readable format) or deletion.
  3. Keep records of your request (date, method, and any replies). Controllers generally have up to 30 days to respond.
  4. If the controller does not comply, escalate to your national Data Protection Authority (DPA).

Copy/paste GDPR request template:

Subject: GDPR Data Access / Deletion Request

Hello,

I request a copy of the personal data you hold about me (data portability) and/or deletion of my personal data under GDPR. My account email is: [your email].

Please provide:
- A full export of my account and Health data in a machine-readable format (JSON or CSV).
- Confirmation that you have deleted all personal data, including backups, and the date this was completed.

Thank you,
[your name]

Common troubleshooting & FAQs

Here are quick solutions to common problems you may meet during export, deletion, or transfer.

  • Export fails or stalls: check free storage on your iPhone, disable auto-lock temporarily, and try again. Use AirDrop to move the file off-device if it still fails.
  • Deleted data reappears: iCloud Health sync may be on another device or a third‑party app may re-write entries. Turn off iCloud Health sync on all devices, revoke app permissions, and then delete again.
  • Moving to Android: convert to CSV/JSON on a desktop and transfer via USB or encrypted file sharing; many Android trackers can import CSV/JSON if formatted appropriately.
  • Worried about server copies: contact the app developer with a deletion request and keep a record. Use GDPR rights if they operate in the EU/UK.

One-page printable checklist (download + how to use it)

The downloadable one-page checklist summarizes the exact sequence to follow: secure your device, export Health data and Cycle PDFs, convert locally, filter fields, import to your new tracker, delete originals, revoke permissions, verify deletions, and keep proof.

How to use it: print or open it on a second device while you work so you can follow each step and tick items off. After finishing, securely delete temporary files, empty your device’s trash, and revoke any shared links you created during transfer.

Closing: next steps and gentle encouragement

You’re in control. Exporting, filtering, and deleting your period data thoughtfully gives you real privacy and reduces the risk of unwanted sharing or long-term retention. Make small checks a habit: review HealthKit permissions quarterly and keep a recent export in a secure location if you want a backup.

If you’d like, I can draft a full post with screenshots and the printable checklist PDF, or produce a GDPR request letter you can copy and send to an app. You can also consult Apple Support, the applehealth2csv GitHub, and ICO guidance for deeper technical or legal detail.

  • Apple Support — Export All Health Data & Cycle Tracking export PDF: https://support.apple.com/en-vn/108323
  • Apple Support — Manage Health data & iCloud sync / deletion: https://support.apple.com/en-vn/108779
  • Apple Security / HealthKit permissions guidance: https://support.apple.com/en-by/guide/security/sec88be9900f/web
  • applehealth2csv (GitHub) — open-source converter: https://github.com/muquit/applehealth2csv
  • ICO guidance on data portability & rights: https://ico.org.uk/for-organisations/uk-gdpr-guidance-and-resources/individual-rights/individual-rights/right-to-data-portability/

Try App

Learn what App does, browse features, and get support resources.

Frequently Asked Questions

If I delete cycle data on my iPhone, is it gone forever?
Deleting cycle data on your iPhone removes it from that device and, if Health sync via iCloud is enabled, from all devices on the same Apple ID — but it isn’t necessarily gone forever until you also remove iCloud copies and any server copies held by third‑party apps. After deletion turn off Health iCloud sync and delete Health data from iCloud, revoke any app permissions, and verify by exporting Health data to confirm the entries are gone.
Can I export only Cycle Tracking entries instead of all Health data?
Apple’s built‑in “Export All Health Data” produces an XML export.zip for everything; however you can export readable cycle summaries as PDFs from Cycle Tracking → Cycle History → Export PDF. To get only Cycle Tracking in CSV/JSON, export the full XML then locally convert and filter the cycle/menstruation entries, or use a vetted app that explicitly offers selective export while keeping processing local.
Is AirDrop a safe way to transfer my Health export?
Yes — AirDrop is a local, encrypted transfer and is generally safer than email or unprotected cloud links, provided both devices have strong passcodes and AirDrop visibility is set appropriately (Contacts Only or temporarily Everyone). For extra safety, encrypt or password‑protect exported files before transfer and avoid sending unencrypted health exports via email or public cloud links.
How do I make sure a third‑party tracker deletes my data from their servers?
Request deletion through the app’s privacy settings or contact the developer’s data‑protection contact and keep written proof of the request. Under GDPR/UK‑GDPR you can submit a deletion (erasure) and portability request; controllers typically have 30 days to respond. If they don’t comply, escalate to the relevant Data Protection Authority and keep records of all communications and timestamps.
Which format should I use to port data to a new private tracker: JSON or CSV?
Use JSON when possible, because it preserves nested HealthKit structure (events, timestamps, symptom metadata) and is better for accurate imports; use CSV if the new tracker only accepts spreadsheets or you prefer manual review. Always convert/export locally, remove any metadata you don’t want to share, and transfer the file via an encrypted channel (AirDrop, password‑protected ZIP, or secure local import).

Written by

Lunara

Hi, I'm Lunara. I was tired of wellness tools that felt like chores, or worse, like they were judging me. I believe your body already knows what it needs. My job is just to help you listen. Whether you're tracking your cycle, building a morning routine, or simply trying to understand why Tuesdays feel harder than Mondays — I'm here to be a quiet companion, not a demanding coach. I care deeply about your privacy. Your data stays yours. I'll never sell it, never train AI on your personal moments, and I'll always give you a way out if you need one. Some things are just between you and your journal. When I'm not thinking about cycle phases and habit streaks, you'll find me advocating for women's health literacy, learning about the science of rest, and reminding people that "good enough" is actually good enough. I'm so glad you're here. 🌙