Flo lists app usage data for Looker to understand app use, feature engagement and preferences and create statistics. It also labels Databricks’ input as app usage data while describing its purpose as understanding website use and interactions to improve product experiences. The card preserves that distinction in the table rather than assuming the two descriptions mean the same thing.
Supporting quotations
Analytical tools Looker (Google Cloud EMEA, Ltd) Looker Privacy Policy App usage data To understand how you use the App, which features you engage and what you like or dislike the most, and To create statistical reports.
Analytical tools Databricks, Inc. Databricks Privacy Notice App usage data To understand how you use the Website, which features you interact with and what you like or dislike. This helps us improve your product experiences.
Not stated here
The linked Looker and Databricks policies are not supplied; no claims are made about their contents.
Use & Processing · Company practice
Google analytics tools process website usage data
Flo lists Google Tag Manager and Google Analytics 4 for website usage data, to monitor service performance and understand website use with suitable privacy protections. The table links external Google privacy and security documents, which are not supplied.
Supporting quotations
Analytical tools Google LLC (Google Tag Manager & Google Analytics 4)
Website usage data To monitor how well our Services are performing and to understand how you use them on our Website, all while ensuring suitable privacy protections.
Not stated here
Google’s linked privacy and Analytics security documents are not supplied; their detailed protections cannot be assessed here.
Use & Processing · Company practice
Customer Thermometer’s row lists feedback and machine-learning purposes
Flo’s table lists email addresses and survey responses for Customer Thermometer. The purpose cell lists customer feedback and also machine learning for cycle predictions, retention forecasts and relevant in-app content. This reports the table’s stated scope; it does not assume how those tasks are divided or performed.
Supporting quotations
Customer Support Customer Thermometer Ltd Customer Thermometer Privacy Policy Email address, and Responses to surveys To obtain customer feedback. Machine learning to deliver cycle predictions; forecast customer retention; and display relevant content within the app
Not stated here
The linked Customer Thermometer policy is not supplied, and this row does not explain how the listed machine-learning purposes use its specified data.
Use & Processing · Company practice
Firebase’s processor role includes Android notifications and analytics
Flo lists app usage, subscription status and technical identifiers for Firebase/Google Cloud EMEA. Its purposes include campaign optimisation, Android push notifications, functionality and understanding use to improve the experience. The separate marketing subsection specifies consent and withdrawal controls for its promotional sharing.
Supporting quotations
Promoting Flo and user experience functionality Firebase (Google Cloud EMEA Ltd) Firebase Privacy and Security Information about your app usage, subscription status, and technical identifiers To optimise marketing campaigns. To send push notifications on Android devices. To enhance our app’s functionality. To understand how you use our Services and improve your experience.
We do not share your health data with third parties for marketing purposes. With your consent, Flo may collect and share information with AppsFlyer and its partners, Firebase and TikTok Ad Manager. These are mobile app marketing and analytics platforms (not social media platforms) who help us improve our advertising campaigns, understand the performance of our campaigns and spread the word about Flo. They may also use information collected to remind you to revisit the App if you haven’t used it in a while.
Withdrawing your consent: You can withdraw your consent or opt out from the sharing of your personal data with Firebase in accordance with this subsection anytime by adjusting your device settings. You can opt out of receiving push notifications by adjusting your settings on your device at any time.
Not stated here
Firebase’s linked privacy and security document is not supplied; its own practices are not inferred.
Use & Processing · Restriction or exception
US skin analysis processes facial images on the device
US users may have access to skin analysis. Flo asks for consent to use a facial image and the device asks for camera permission; both are required. On supported devices, TrueDepth captures facial contours alongside a standard image. Flo says analysis occurs entirely on-device and that information is deleted when analysis finishes. Images never leave the device or enter device storage, are held only in memory while using the app and cleared on closing it, and are not uploaded to Flo, sold or used for advertising. Only analysis results such as skin type, breakouts or pigmentation go to Flo for the report and relevant insights. The feature provides neither diagnosis nor treatment.
Supporting quotations
If you're in the US, you may have access to our skin analysis feature.
How it works: We'll ask for your consent to use your facial image to create your skin report, and your device will ask for permission to use your camera. If you agree to both, on supported devices, we use TrueDepth camera APIs to capture facial contours in addition to a standard image to provide skin scanner functionality. Your device’s camera captures your facial image and measures an area of focus from your image for analysis. This information is analyzed entirely on your device, by skin-analysis technology, and is deleted as soon as the analysis finishes.
What we receive and why: Your facial image from your camera never leaves your device. They are not sent over the network, and they are not saved to your device's storage. They are held only in your device's memory while you're using the app, and cleared when you close it. They are also never uploaded to Flo’s servers, sold to third parties or used for advertising or marketing purposes. Only the analysis results (for example, skin-type classification and skin appearance such as the presence of breakouts or pigmentation) are sent to Flo. We use this data to create your report, and provide you with relevant insights and information. This feature does not offer you a medical diagnosis or medical treatment.
Use & Processing · User right or choice
Marketing opt-out leaves essential service emails in place
Flo may send email, pop-up or push updates about services, offers, promotions, rewards and events, based on your chosen services, mode and feature interactions. It may also contact you through third-party platforms such as social media. You can unsubscribe from marketing emails using their link and stop push notifications in device settings; opting out does not stop essential service-related emails. Flo may seek additional consent for some communications, and its processing table identifies consent for personalised recommendations and cycle notifications.
Supporting quotations
We might contact you via email, pop-ups or push notifications to share updates with you about Services, offers, promotions, rewards and events. These messages will be based on the Services you have chosen from Flo, (e.g. your selected mode) and the features you interact with.
Opt-out options: You can unsubscribe from marketing emails by clicking the “Unsubscribe” link in the email. Opting out of these marketing emails or notifications will not stop essential Service-related emails. To stop receiving push notifications, adjust your settings on your device. In some cases, we might ask for additional consent for certain communications.
Please note we may contact you through third-party platforms (like social media) with information about our Services, offers, promotions, rewards and events.
We also customize product and service recommendations and cycle date notifications to you, such as through emails or push notifications. We may also contact you about third-party products and offers. Consent We may offer you a discount for Flo Premium.
Social-media engagement data is used solely for engagement
Flo may promote itself and interact with customers on social media. When you engage there, it processes details such as username, profile picture and Flo-related comments or posts, solely for engagement purposes.
Supporting quotations
We may use social media to promote Flo and interact with our customers. When you engage with us on these platforms, we process information about you, like your username, profile picture and any comments or posts related to Flo. This information is used solely for engagement purposes.
Use & Processing · Company practice
Data supports predictions, content and service safety
Flo collects personal data to improve the experience, including service safety, prediction accuracy and relevant content and offers. The detailed collection and processing provisions identify the data and conditions for particular uses.
Supporting quotations
When you use Flo, we collect your personal data to make your experience better. This includes ensuring the safety of our Services, improving the accuracy of your predictions and giving you relevant content and offers.
Use & Processing · Company practice
Flo lists service improvement and safety as legitimate interests
Flo may rely on legitimate interests to identify and fix issues, prevent fraud and bot installs, improve content, monitor performance, send subscription notices, scan security vulnerabilities, analyse usage trends and forecast retention. It says it balances those interests against your rights so its activities do not negatively affect you or your rights.
Supporting quotations
Legitimate interests: We may process your personal data based on our legitimate interests to improve our Services. For example, we might use your personal data to:
identify and fix issues;
fraud prevention, including ensuring interactions (e.g. app-installs) are from real members, not bots;
improve content in the App;
monitor and analyse App performance;
notify you about your subscriptions;
scan for vulnerabilities to ensure security; and
review overall App usage trends and forecast customer retention.
We carefully balance our interests with your rights to ensure our activities don't negatively impact you or your rights. More examples of our legitimate interests are listed in the table below.
Use & Processing · Company practice
Personalised recommendations and cycle notifications use consent
The table identifies consent for customised product or service recommendations and cycle-date notifications, including email and push messages. Flo may also contact you about third-party products and offers; a Flo Premium discount is an example.
Supporting quotations
We also customize product and service recommendations and cycle date notifications to you, such as through emails or push notifications. We may also contact you about third-party products and offers. Consent We may offer you a discount for Flo Premium.
Use & Processing · Company practice
Support, clinical review and service messages use legitimate interests
Flo lists legitimate interests for answering requests and providing support, reviewing app content and complaints for clinical safety and medical accuracy, and sending technical, security, support and administrative messages or satisfaction surveys. Name and email may be used for support and matters requiring the medical team; update requests are an example of service notices.
Supporting quotations
To respond to your comments, questions, requests and to provide you with customer service. Legitimate interest We use your name and email to respond to your support request or to contact you about a specific question or issue you’ve raised.
To review App content, feedback and complaints to ensure the App’s clinical safety and medical accuracy. Legitimate interest We use your name and email to review support requests that need our medical team’s attention.
To send you technical notices and updates; security alerts, ensure the safety of our App and investigate incidents; support and administrative messages; and customer satisfaction surveys. Legitimate interest To request that you update your App to ensure you have access to the latest features.
Use & Processing · Company practice
Usage analytics can shape content, campaigns and offers
Under legitimate interests, Flo monitors app trends, use and activity to check operation, fix problems, improve the experience and serve relevant content. It may also use overall usage trends to deliver content, sales campaigns and offers.
Supporting quotations
To monitor and analyse trends, usage and activities in connection with our App. Legitimate interest We review your usage activity in the App to make sure it works correctly, fix any issues, serve you relevant content, and improve your future experience. We may also use overall usage trends to deliver the right content, sales campaigns and offers to you.
Use & Processing · Company commitment
Personal data is limited to collected or authorised purposes
Flo commits to processing personal data only for the specific purposes for which it was collected or which you authorised.
Supporting quotations
Data minimisation and purpose limitation: we only process personal data for the specific purposes for which it was collected or authorised by you.
Use & Processing · User right or choice
Request correction or restricted processing
If you think Flo holds incorrect personal data, you can request a correction. In certain circumstances you can also request restricted processing—for example, while Flo verifies disputed accuracy. These are request rights subject to the section’s identity checks and request-handling conditions.
Supporting quotations
If you think your personal data that we hold is incorrect, you can contact us to request a correction.
You can request that we limit the processing of your personal data in certain circumstances. For example, if you believe your personal data is inaccurate, you can ask us to restrict the processing while we verify it.
If your request is unclear, we might reach out to you for clarification. We may also refuse or charge a reasonable fee for requests that are clearly unfounded and/or excessive.
To process your request, we’ll need to verify your identity. Usually, this involves confirming that the request is coming from the email you used to register. If you haven’t registered, we may ask you for additional verification to ensure we respond appropriately.
Use & Processing · User right or choice
You may object to processing, including direct marketing
You may object to processing of personal data, such as its use for direct marketing. The policy’s general verification and request-handling conditions apply; this sentence does not say every objection automatically stops all processing.
Supporting quotations
You can object to the processing of your personal data, such as if we use it for direct marketing purposes.
If your request is unclear, we might reach out to you for clarification. We may also refuse or charge a reasonable fee for requests that are clearly unfounded and/or excessive.
To process your request, we’ll need to verify your identity. Usually, this involves confirming that the request is coming from the email you used to register. If you haven’t registered, we may ask you for additional verification to ensure we respond appropriately.