Flo collects data from you and other sources. Signup details include name, email, birth month and year, password, location, time zone and language; it may infer sex or gender from use. A first or preferred name is optional and declining it does not affect use. For receiving partners, Flo specifies name and email for the account and birth month/year to check age; gender may be inferred, and it says it collects no health data about that partner.
Supporting quotations
We collect personal data about you when you use the Services. This can come directly from you or from other sources and third parties.
General information: When you sign up for our Services, we collect personal data like your name, email, birth month and year, password, location, time zone, and language. Based on how you use the Services, we may also infer your sex or gender.
You can also enter your first name or a preferred name. This is completely up to you and won’t impact your use of the Services if you choose not to provide it.
If you’re a partner receiving information, we will collect your name and email to set up your account with Flo. We’ll also ask for your month and year of birth to verify your age. While we don’t collect your gender directly, it may be inferred based on your App usage. No health data about you will be collected.
Data Access & Collection · User right or choice
You may log sensitive health and well-being details
You may enter weight, height, BMI, temperature, cycle details and symptoms associated with cycles, pregnancy, perimenopause or menopause. Pregnancy mode allows pregnancy tracking. Entries can also cover sex life, physical and mental health, water intake and sleep, including special-category data under UK GDPR.
Supporting quotations
Well-being: When using our Services, you may enter personal data (including ‘special category data’ as defined in the UK GDPR) about yourself, such as your weight, height, BMI, body temperature, and menstrual cycle details. If you enable pregnancy mode, you can also input and track pregnancy-related information. You may log symptoms linked to your menstrual cycle, pregnancy, perimenopause, or menopause, as well as general health and well-being. This can include details about your sex life, physical and mental health, water intake, and sleep duration.
Linking & Identification · Permission or license
Optional health-service connections import activity and health data
With your permission, Flo can connect to services such as Apple HealthKit and Google Health Connect and automatically import health and activity data, including fitness, weight, height, BMI, calories, heart rate, steps, distance, temperature and sleep. It uses these data for activity insights, cycle predictions and app functionality; its processing table identifies consent for tailored app features. Imports also depend on those providers’ terms and privacy policies. A wearable provider may collect usage data for its own purposes; those external policies are not supplied.
Supporting quotations
Third-party services (including wearables): With your permission, we can connect to third-party services like Apple HealthKit and Google Health Connect. This allows us to automatically import your health and activity data into the app, so you don’t have to log it yourself. The imported data may include fitness activities, weight, height, BMI, calories burned, heart rate, steps taken, distance traveled, body temperature, sleep patterns, and other activity details.
This information helps provide insights into your activities and improves our ability to predict your cycle. We process this data to enhance the App’s features and functionality.
Importing data is subject to the privacy policies and terms of Google Health Connect and Apple HealthKit. If you use a wearable device to connect to Flo, please review its terms and privacy policies as well. Your device provider may collect usage data for its own purposes, such as improving its services.
To support the App’s features, including tailored content, insights and materials in the App, we use the personal data you provide within the App; machine learning models for cycle predictions; the Services you choose to use (e.g. your selected mode) and the App features you interact with; information from connected third-party services (like Apple HealthKit and Google Health Connect); and certain information provided in onboarding questionnaires. Consent We use your cycle data to predict future cycles or ovulation, analyse your personal data to offer new features and Services, and suggest articles or materials (e.g., stories, Health Assistant, and Secret Chats) for you to read.
Not stated here
The linked Google Health Connect, Apple HealthKit and wearable-provider terms and privacy policies are not supplied; their detailed rules cannot be assessed here.
Data Access & Collection · Company practice
Flo may automatically collect device and accessibility information
When you use the services, Flo may automatically collect the device model, operating system and version, unique device identifiers, enabled accessibility features, operator/network information and storage or system-version information. Accessibility examples include display, hearing, physical and motor features.
Supporting quotations
When you use the Services, we may automatically collect certain information:
Device information: device model; information about the operating system and its version; unique device identifiers; enabled device accessibility features (e.g., display features, hearing features, and physical and motor features); mobile operator and network information; device storage information or version of your device system.
Data Access & Collection · Restriction or exception
Location collection is approximate
Flo may collect an IP address for approximate location, country, time zone or mobile-provider information. It says it does not collect your exact location and limits location use to the purposes listed in the policy.
Supporting quotations
Location information: IP address for an approximate location; country; time zone or information about your mobile service provider. We do not collect your exact location. We only use location details for the reasons listed below.
Data Access & Collection · Company practice
Usage and transaction data may be collected using cookies
Flo may collect use frequency, accessed services and features, engagement, and payment transaction information excluding full payment-card details. It may use cookies and similar technologies for this and other information. Its linked Cookie Policy is a separate document and is not supplied here.
Supporting quotations
Data about your use of the Services, including: frequency of use; areas and features of the Services that you access or use; payment transaction information (excluding full payment card details) or engagement with features.
To collect this and other information, we may use cookies and other similar technologies.
Data Access & Collection · Company practice
Third parties may supply additional personal data
Flo may receive personal data from third parties to enhance existing data, personalise the experience, and support analytics and statistics. This provision does not identify every external source or every additional field.
Supporting quotations
Data from external sources: We may receive your personal data from third parties. For example, they may provide additional information to enhance your existing data, personalise your experience, and support analytics and statistics.
Sharing & Disclosure · Company commitment
Third-party sharing is limited to this policy and excludes health data from marketing
Flo promises not to share personal data except as this policy specifies. For marketing, it may share non-health information with AppsFlyer and its partners, Firebase and TikTok Ad Manager with consent, to improve campaigns and encourage inactive users to return. It says health data is not shared with these platforms, which act as processors under Flo’s instructions and, for this marketing use, your consent.
Supporting quotations
We will not share your personal data with third parties except as specified within this Privacy Policy.
We do not share your health data with third parties for marketing purposes. With your consent, Flo may collect and share information with AppsFlyer and its partners, Firebase and TikTok Ad Manager. These are mobile app marketing and analytics platforms (not social media platforms) who help us improve our advertising campaigns, understand the performance of our campaigns and spread the word about Flo. They may also use information collected to remind you to revisit the App if you haven’t used it in a while.
Your health data is not shared with AppsFlyer, Firebase or TikTok Ad Manager. AppsFlyer, Firebase and Tiktok Ad Manager handle your personal data only with your consent and according to our instructions as a data processor.
Cross-references
contrast (model-proposed): Flo promises never to sell your data — contrast: The no-sale commitment coexists with consent-based sharing for specified marketing purposes that excludes health data; a promise not to sell is not a promise never to disclose.
Sharing & Disclosure · Permission or license
AppsFlyer advertising sharing is optional; onboarding processing is not
When you become a member and consent, Flo shares technical identifiers such as IP address and Android or Google advertising IDs, age group, subscription status and app launches with AppsFlyer and partners for promotion. iOS advertising-ID sharing requires allow-tracking consent. AppsFlyer analyses campaigns and may share with partners such as Pinterest, Google Ads, Apple Search Ads and Meta Audience to find you or similar audiences, including on social media. Health data is excluded. You can withdraw advertising-sharing consent in device or Flo settings, but cannot opt out of AppsFlyer’s separate functional processing joining website and app onboarding for some users.
Supporting quotations
When you become a Flo member and give your consent, we share the following personal data with AppsFlyer and its partners to promote the Services:
technical identifiers: IP address (which may also reveal general location information), Android ID (in Android devices), Google advertising ID, and other similar unique technical identifiers;
your age group;
your subscription status;
the fact that you launched the App; and
your advertising identifier if you provide your consent on the iOS ‘allow tracking’ settings.
Flo sends this personal data to AppsFlyer, which analyses it and provides us with insights on how to improve our promotional campaigns.
AppsFlyer may also share your personal data with its partners (e.g., Pinterest, Google Ads, Apple Search Ads, Meta Audience and others) to find you or people like you on various platforms, including social media. These partners use the information shared to help us achieve the purposes described above.
Withdrawing your consent: You can withdraw your consent to sharing your information with AppsFlyer anytime. You can do this by visiting your device settings or adjusting your consent preferences in the Flo App.
Please note, that we also use AppsFlyer for a separate functional purpose to help join up the onboarding process between the Website and App for some users. You cannot opt out of AppsFlyer’s processing of your personal data for this purpose.
Your health data is not shared with AppsFlyer, Firebase or TikTok Ad Manager. AppsFlyer, Firebase and Tiktok Ad Manager handle your personal data only with your consent and according to our instructions as a data processor.
Not stated here
The linked AppsFlyer site is not supplied; partner practices beyond this policy’s description cannot be assessed.
Sharing & Disclosure · Permission or license
Firebase links promotional data to Google services
With membership and consent, Flo shares technical identifiers, subscription status and app-use information with Firebase and connected Google services for promotion; advertising-ID sharing also depends on device consent. Health data is excluded. Firebase analyses campaigns, while linked services such as Google Ads, Analytics and Play use linked information for functionality, campaign measurement and targeted ads. The processor table also lists Android push notifications and experience improvements. You can withdraw sharing consent for this marketing subsection in device settings and separately turn off push notifications there.
Supporting quotations
When you become a Flo member and give your consent, we share the following personal data with Firebase and connected Google services partners to promote the Services:
technical identifiers: IP address (which may also reveal general location information), Android ID or Google advertising ID (in Android devices), IDFA (for iOS devices), and other similar unique technical identifiers;
your subscription status;
information about App usage, such as the fact that you launched the App; and
your advertising identifier if you provide your consent on the settings of your device.
Flo sends your personal data to Firebase, which analyses it and provides us reports and insights on how to optimise our promotional campaigns.
At the same time, your personal data is shared with linked services (e.g. Google Ads, Google Analytics, and Google Play). Linking this information helps us to enhance our app’s functionality, understand how well our marketing efforts are working, and allows us to create targeted campaigns to show you more relevant ads.
Withdrawing your consent: You can withdraw your consent or opt out from the sharing of your personal data with Firebase in accordance with this subsection anytime by adjusting your device settings. You can opt out of receiving push notifications by adjusting your settings on your device at any time.
Promoting Flo and user experience functionality Firebase (Google Cloud EMEA Ltd) Firebase Privacy and Security Information about your app usage, subscription status, and technical identifiers To optimise marketing campaigns. To send push notifications on Android devices. To enhance our app’s functionality. To understand how you use our Services and improve your experience.
Your health data is not shared with AppsFlyer, Firebase or TikTok Ad Manager. AppsFlyer, Firebase and Tiktok Ad Manager handle your personal data only with your consent and according to our instructions as a data processor.
Not stated here
Firebase’s linked privacy and security document is not supplied; its independent terms are not analyzed.
Sharing & Disclosure · Permission or license
TikTok Ad Manager opt-out requires restarting the app
With membership and consent, Flo shares technical identifiers, subscription plan, price and currency, and app-use information with TikTok Ad Manager to optimise campaigns; advertising identifiers also require device-settings consent. Health data is excluded. You can withdraw this sharing consent and turn off push notifications in device settings. Close and reopen Flo for device settings to stop TikTok Ad Manager sharing. To delete information already held by TikTok Ad Manager, the policy directs you to controls on TikTok’s platform.
Supporting quotations
When you become a Flo member and give your consent, we share the following personal data with TikTok Ad Manager to promote the Services:
technical identifiers: IP address (which may also reveal general location information), Google advertising ID (in Android devices), IDFA (for iOS devices), and other similar unique technical identifiers;
Information about your subscription, such as purchased plan, price and currency;
information about App usage, such as the fact that you launched the App; and
your advertising identifier if you provide your consent on the settings of your device.
Flo sends your personal data to TikTok Ad Manager, which analyses it and provides us reports and insights on how to optimise our promotional campaigns.
Withdrawing your consent: You can opt out of receiving push notifications by adjusting your settings on your device at any time. You can withdraw your consent or opt out from the sharing of your personal data with TikTok Ad Manager in accordance with this subsection anytime by adjusting your device settings. You will need to restart your app (close the app and reopen it) for the device settings to take effect and to stop Flo sharing your information with TikTok Ad Manager. Please note that if you want TikTok Ad Manager to delete your information, you can control this yourself on the TikTok platform
Your health data is not shared with AppsFlyer, Firebase or TikTok Ad Manager. AppsFlyer, Firebase and Tiktok Ad Manager handle your personal data only with your consent and according to our instructions as a data processor.
Not stated here
The linked TikTok Ad Manager information and TikTok privacy policy are not supplied; their detailed deletion or processing rules cannot be assessed.
Sharing & Disclosure · User right or choice
Stop TikTok sharing through device settings and an app restart
For TikTok Ad Manager’s promotional processing, you can withdraw consent or opt out in device settings at any time, then must close and reopen Flo for that change to stop sharing. Device settings also let you stop push notifications. Deleting information at TikTok Ad Manager is a separate step using TikTok’s platform controls.
Supporting quotations
Withdrawing your consent: You can opt out of receiving push notifications by adjusting your settings on your device at any time. You can withdraw your consent or opt out from the sharing of your personal data with TikTok Ad Manager in accordance with this subsection anytime by adjusting your device settings. You will need to restart your app (close the app and reopen it) for the device settings to take effect and to stop Flo sharing your information with TikTok Ad Manager. Please note that if you want TikTok Ad Manager to delete your information, you can control this yourself on the TikTok platform
Flo sends your personal data to TikTok Ad Manager, which analyses it and provides us reports and insights on how to optimise our promotional campaigns.
Not stated here
Linked TikTok materials are not supplied; their detailed deletion and processing rules are not determined here.
Sharing & Disclosure · User right or choice
iOS ATT tracking is optional and excludes health data
Flo may use Apple ATT to improve advertising. If you allow tracking, Apple asks about sharing the advertising ID and details such as age group, subscription status and app launch. Flo says it does not share health data for advertising. You can change ATT consent at any time in phone settings or Flo’s in-app consent settings.
Supporting quotations
In addition to AppsFlyer, for iOS devices, we may use Apple’s ATT tool to help us improve our advertising and help more people discover Flo’s Services. If you choose to allow tracking, Apple will ask whether you would like to share your device’s advertising ID (sometimes referred to as a IDFA), and details like your age group, subscription status and the fact you launched the Flo App. Please be aware, we do not share your health data with third parties for advertising purposes, and you can change your consent for ATT any time in your phone settings or Flo’s consent settings in the App.
Sharing & Disclosure · Company commitment
Flo uses processors and remains responsible for their actions
Processors handle personal data on Flo’s behalf to operate the services. Flo says it is responsible for their actions and uses data-processing agreements to require compliance with law and its instructions. Group-company processors include Flo Health Cyprus Ltd, Flo Health LTU UAB in Lithuania (its main EU establishment), and Flo Health NL. BV in the Netherlands.
Supporting quotations
Sometimes, we work with other companies to process your personal data on our behalf. We call these companies or service providers “processors.”
Processors are companies that help us operate our Services. We are responsible for any actions of these processors ensuring they follow the law and our instructions by entering into data processing agreements with them.
Flo’s team is spread across several countries. The following group companies within the Flo group act as processors:
Flo Health Cyprus Ltd (based in Cyprus);
Flo Health LTU UAB (based in Lithuania, our main EU establishment); and
Flo Health NL. BV (based in the Netherlands).
Sharing & Disclosure · Company practice
Infrastructure processors are listed for all personal data
Flo’s processor table lists all personal data for AWS storage, Cloudflare app security and content delivery, and Kibana/Elastic protection of members’ data. These are the purposes Flo assigns to those processors; the linked provider policies are not supplied.
Supporting quotations
Infrastructure and security Amazon Web Services, Inc. AWS Privacy Notice All personal data Storing all personal data when you use the App
Infrastructure and security Cloudflare, Inc. Cloudflare Privacy Policy All personal data Security of the App, content delivery
Infrastructure and security Kibana Inc. (Elastic N.V.) Elastic N.V. Privacy Statement All personal data To protect members’ data
Not stated here
The linked AWS, Cloudflare and Elastic privacy policies are not supplied; their own terms cannot be assessed.
Sharing & Disclosure · Company practice
Authentication and website hosting use different data scopes
Flo lists Auth0/Okta for authentication and authorisation using email, IP address and name. It lists Vercel for website performance and efficient delivery using personal data processed through the website. Neither row should be expanded to the all-personal-data scope used in other infrastructure rows.
Supporting quotations
Infrastructure and security Auth0, Inc. (Okta, Inc.) Okta Privacy and Cookie Policy Email address, IP address, and Name Authentication and authorization services
Infrastructure and security Vercel Inc. Vercel’s Privacy Policy Personal data processed via the Website To improve the Website’s performance and ensure efficient service delivery
Not stated here
The linked Okta and Vercel policies are not supplied; only Flo’s stated data and purposes are explained.
Sharing & Disclosure · Company practice
Communication and review providers receive specified contact or survey data
SendGrid/Twilio receives email addresses to send newsletters, surveys and notifications. Trustpilot receives email and a name or preferred nickname for service-review invitations. SurveyMonkey receives IP address, member ID and survey results for the review purpose listed by Flo.
Supporting quotations
Email communications SendGrid, Inc. (Twilio, Inc.) SendGrid Privacy Notice Email address To send you our newsletters, surveys and notifications
Email communications Trustpilot A/S Trustpilot Privacy Policy Email address, and Name (or a nickname if you prefer) To send and invite you to take part in Service reviews.
Email and in-App communications SurveyMonkey (Momentive Europe UC) SurveyMonkey Privacy Notice IP address, member ID, and Results of surveys To send and invite you to take part in Service reviews.
Not stated here
The linked SendGrid, Trustpilot and SurveyMonkey privacy documents are not supplied; their independent terms are not assessed.
Use & Processing · Company practice
Looker and Databricks support usage analytics
Flo lists app usage data for Looker to understand app use, feature engagement and preferences and create statistics. It also labels Databricks’ input as app usage data while describing its purpose as understanding website use and interactions to improve product experiences. The card preserves that distinction in the table rather than assuming the two descriptions mean the same thing.
Supporting quotations
Analytical tools Looker (Google Cloud EMEA, Ltd) Looker Privacy Policy App usage data To understand how you use the App, which features you engage and what you like or dislike the most, and To create statistical reports.
Analytical tools Databricks, Inc. Databricks Privacy Notice App usage data To understand how you use the Website, which features you interact with and what you like or dislike. This helps us improve your product experiences.
Not stated here
The linked Looker and Databricks policies are not supplied; no claims are made about their contents.
Use & Processing · Company practice
Google analytics tools process website usage data
Flo lists Google Tag Manager and Google Analytics 4 for website usage data, to monitor service performance and understand website use with suitable privacy protections. The table links external Google privacy and security documents, which are not supplied.
Supporting quotations
Analytical tools Google LLC (Google Tag Manager & Google Analytics 4)
Website usage data To monitor how well our Services are performing and to understand how you use them on our Website, all while ensuring suitable privacy protections.
Not stated here
Google’s linked privacy and Analytics security documents are not supplied; their detailed protections cannot be assessed here.
Retention & Deletion · Company practice
Zendesk handles support messages; closed website chats expire within two hours
Flo lists Zendesk in the USA for email addresses, email contents and support chatbot messages to process communications. Its website chatbot is powered by Zendesk, and Flo says a closed chat’s contents are automatically deleted within two hours. That specific deadline concerns the website chat, not every email or all account data.
Supporting quotations
Customer Support Zendesk Inc., USA Zendesk Privacy Policy Email address, Content of the emails,and Content of support query chatbot messaging To process communications received from you, and Our Website chatbot is powered by Zendesk. Once a chat is closed, its contents will be automatically deleted within two hours.
Not stated here
The linked Zendesk policy is not supplied; its separate terms are not assessed.
Use & Processing · Company practice
Customer Thermometer’s row lists feedback and machine-learning purposes
Flo’s table lists email addresses and survey responses for Customer Thermometer. The purpose cell lists customer feedback and also machine learning for cycle predictions, retention forecasts and relevant in-app content. This reports the table’s stated scope; it does not assume how those tasks are divided or performed.
Supporting quotations
Customer Support Customer Thermometer Ltd Customer Thermometer Privacy Policy Email address, and Responses to surveys To obtain customer feedback. Machine learning to deliver cycle predictions; forecast customer retention; and display relevant content within the app
Not stated here
The linked Customer Thermometer policy is not supplied, and this row does not explain how the listed machine-learning purposes use its specified data.
Inference & Profiling · Company practice
Tecton processes cycle, goal and symptom data for machine learning
Flo lists Tecton for personal data relating to cycle dates, goals and symptoms, with machine-learning purposes of cycle prediction, customer-retention forecasting and relevant app content. Flo’s processing table separately identifies consent for tailored app features and predictions using personal data.
Supporting quotations
Machine Learning Development Platform Tecton, Inc. Tecton Privacy Policy Personal data relating to cycle dates, goals, symptoms Machine learning to deliver cycle predictions; forecast customer retention; and display relevant content within the app
To support the App’s features, including tailored content, insights and materials in the App, we use the personal data you provide within the App; machine learning models for cycle predictions; the Services you choose to use (e.g. your selected mode) and the App features you interact with; information from connected third-party services (like Apple HealthKit and Google Health Connect); and certain information provided in onboarding questionnaires. Consent We use your cycle data to predict future cycles or ovulation, analyse your personal data to offer new features and Services, and suggest articles or materials (e.g., stories, Health Assistant, and Secret Chats) for you to read.
Not stated here
Tecton’s linked privacy policy is not supplied; its own terms are not analyzed.
Charges & Financial Obligations · Company practice
Payment providers receive banking data for different payment tasks
Flo lists payment and banking information plus personal identifiers for Apple, Google and PayPal to process app subscriptions, and for Stripe to process certain website purchases. Chargeback Gurus is listed for payment and banking information to handle disputes and refunds. These provider rows do not say Flo itself collects full card details.
Supporting quotations
Payments Apple, Inc. Apple: App Store & Privacy Notice Payment and banking information, and Personal identifiers To handle and process payments for your App subscription.
Payments Google LLC, USA Google Privacy Policy Payment and banking information, and Personal identifiers To handle and process payments for your App subscription.
Payments Stripe, Inc., USA Stripe Privacy Policy Payment and banking information, and Personal identifiers To collect and process payments for certain Website purchases.
Payments PayPal Inc. PayPal Privacy Statement Payment and banking information, and Personal identifiers To handle and process payments for your App subscription.
Payments Chargeback Gurus (International Risk Mitigation, LLC) Chargeback Gurus Privacy Policy Payment and banking information To handle disputes and process refunds
Not stated here
Linked Apple, Google, Stripe, PayPal and Chargeback Gurus policies are not supplied; their independent payment and privacy terms are outside this analysis.
Linking & Identification · Company practice
AppsFlyer’s processor row includes onboarding, invitations and partner linking
Flo lists device model, language and operating-system information for AppsFlyer UK Ltd. Its purposes include website-to-app onboarding, inviting friends or partners, linking Flo for Partners accounts, optimising marketing and simplifying, tracking and improving influencer campaigns. The platform-specific provisions distinguish consent-based marketing from onboarding processing that cannot be opted out of.
Supporting quotations
Promoting Flo and user experience functionality AppsFlyer UK Ltd AppsFlyer Privacy Policy Information about your device model, language and operating system. Enable linking for Website to App onboarding journey or invite a friend or partner to Flo, and To optimise marketing campaigns. To link accounts when using Flo for Partners and to simplify, track and improve influencers campaigns.
Please note, that we also use AppsFlyer for a separate functional purpose to help join up the onboarding process between the Website and App for some users. You cannot opt out of AppsFlyer’s processing of your personal data for this purpose.
Not stated here
The linked AppsFlyer policy is not supplied; this describes Flo’s stated purposes only.
Use & Processing · Company practice
Firebase’s processor role includes Android notifications and analytics
Flo lists app usage, subscription status and technical identifiers for Firebase/Google Cloud EMEA. Its purposes include campaign optimisation, Android push notifications, functionality and understanding use to improve the experience. The separate marketing subsection specifies consent and withdrawal controls for its promotional sharing.
Supporting quotations
Promoting Flo and user experience functionality Firebase (Google Cloud EMEA Ltd) Firebase Privacy and Security Information about your app usage, subscription status, and technical identifiers To optimise marketing campaigns. To send push notifications on Android devices. To enhance our app’s functionality. To understand how you use our Services and improve your experience.
We do not share your health data with third parties for marketing purposes. With your consent, Flo may collect and share information with AppsFlyer and its partners, Firebase and TikTok Ad Manager. These are mobile app marketing and analytics platforms (not social media platforms) who help us improve our advertising campaigns, understand the performance of our campaigns and spread the word about Flo. They may also use information collected to remind you to revisit the App if you haven’t used it in a while.
Withdrawing your consent: You can withdraw your consent or opt out from the sharing of your personal data with Firebase in accordance with this subsection anytime by adjusting your device settings. You can opt out of receiving push notifications by adjusting your settings on your device at any time.
Not stated here
Firebase’s linked privacy and security document is not supplied; its own practices are not inferred.
Security & Safeguards · Company practice
Turnstile verifies website visitors without cross-site tracking
Flo lists Cloudflare Turnstile for IP addresses used in fraud detection and validation, time on the website or interaction signals, and browser/device information. Its purpose is distinguishing real visitors from bots and keeping the website secure. Flo says this use does not use cookies or track people across websites.
Supporting quotations
Security and verification of web users Cloudflare Turnstile Cloudflare's Privacy Policy IP address for fraud detection and validation, time spent on the Website or interaction signals (such as clicks), and Browser and device information To help keep our Website safe and secure. Cloudflare Turnstile confirms our Website visitors are real and blocks unwanted bots without slowing down web experiences for real users. This does not use cookies or track users across websites.
Not stated here
The linked Cloudflare policy is not supplied; this no-cookie and no-cross-site-tracking statement concerns Turnstile’s described use, not all Flo processing.
Cross-references
contrast (model-proposed): Usage and transaction data may be collected using cookies — contrast: Flo may use cookies for collection generally, but specifically says its Turnstile visitor verification does not use cookies or cross-site tracking. The statements cover different operations.
Use & Processing · Restriction or exception
US skin analysis processes facial images on the device
US users may have access to skin analysis. Flo asks for consent to use a facial image and the device asks for camera permission; both are required. On supported devices, TrueDepth captures facial contours alongside a standard image. Flo says analysis occurs entirely on-device and that information is deleted when analysis finishes. Images never leave the device or enter device storage, are held only in memory while using the app and cleared on closing it, and are not uploaded to Flo, sold or used for advertising. Only analysis results such as skin type, breakouts or pigmentation go to Flo for the report and relevant insights. The feature provides neither diagnosis nor treatment.
Supporting quotations
If you're in the US, you may have access to our skin analysis feature.
How it works: We'll ask for your consent to use your facial image to create your skin report, and your device will ask for permission to use your camera. If you agree to both, on supported devices, we use TrueDepth camera APIs to capture facial contours in addition to a standard image to provide skin scanner functionality. Your device’s camera captures your facial image and measures an area of focus from your image for analysis. This information is analyzed entirely on your device, by skin-analysis technology, and is deleted as soon as the analysis finishes.
What we receive and why: Your facial image from your camera never leaves your device. They are not sent over the network, and they are not saved to your device's storage. They are held only in your device's memory while you're using the app, and cleared when you close it. They are also never uploaded to Flo’s servers, sold to third parties or used for advertising or marketing purposes. Only the analysis results (for example, skin-type classification and skin appearance such as the presence of breakouts or pigmentation) are sent to Flo. We use this data to create your report, and provide you with relevant insights and information. This feature does not offer you a medical diagnosis or medical treatment.
Retention & Deletion · User right or choice
Skin results stay in the profile under the policy’s retention rules
Flo stores the date and results of skin analysis in your profile for review and tracking, under section 8 or until you request deletion. You can withdraw consent or ask for deletion at support@flo.health. Section 8 keeps data as necessary for services or collection purposes, retains it for three years after app deletion or inactivity unless earlier deletion is requested, and processes account deletion within one month with backups taking up to 90 days. Deletion is not recoverable. Certain data may remain where law requires or permits it, including legal obligations, claims, or public-interest, scientific, historical or statistical archiving. Flo describes secure permanent deletion and possible automated notices to processors.
Supporting quotations
Retention: We store the date of your skin analysis and your results in your Flo profile so you can see them again and track any changes over time. We store this information in accordance with our retention policy (see section 8 of this policy), or until you ask us to delete it.
You stay in control of your data and this feature operates with your consent. You can withdraw your consent, and/or request deletion of your data at any time by contacting us at support@flo.health.
We will keep your personal data for as long as necessary to provide you with the Services or fulfill the purposes for which it was collected (except as noted below).
Impact of account deactivation/requests to erase personal data: You can deactivate your account at any time by following instructions in the ‘How to exercise your privacy rights’. We will process your request within one-month. In some cases, it will take up to 90 days to completely erase your personal data from our backup systems. If you choose to deactivate your account, Flo will delete your personal data, and it will not be recoverable should you later create another account.
Deleting the App or inactivity: If you delete the App from your device or your account becomes inactive, we will retain your personal data for three years in case you decide to reactivate the Services or reinstall the App. After three years of inactivity, your personal data will be deleted. Flo will apply this standard retention policy. However, you can still request earlier deletion by contacting us at any time.
Limitations: Even after your account is deleted, we may need to retain certain personal data and other information. This is required or permitted by applicable law, like the GDPR, and may include situations like:
complying with legal obligations;
managing and handling legal claims; and
archiving for public interest, scientific or historical research, or statistical purposes.
We use industry-standard methods to securely and permanently delete your personal data from our systems, making it impossible to recover. This process may include sending automated notifications to our processors who process your personal data on our behalf.
Cross-references
contrast (model-proposed): US skin analysis processes facial images on the device — contrast: Facial images stay on the device, while analysis results go to Flo and persist in the profile under the retention policy. The distinction is between images and derived results, not conflicting promises about the same data.
Sharing & Disclosure · Company practice
Commercial offers exchange subscription and activity information, not health data
When you join through a commercial partner such as Wellhub, Flo may receive a customer ID or email to validate the subscription and may share limited event information back. Flo says it will never share health or other sensitive data with that commercial partner. In the Wellhub example, Wellhub sends its ID to Flo, and Flo confirms whether you have been active in the app. Partner privacy policies are separate; questions can go to dpo@flo.health.
Supporting quotations
Flo offers the Services to customers of selected commercial partners. These partnership offers involve limited sharing of personal data with Flo so that we know you have joined us via our commercial partner (like, Wellhub). Flo may receive information from the commercial partner to validate your subscription, which may include a customer ID or email address. Flo may share limited event information with the commercial partner, but Flo will never share any health data (or any other sensitive data) about you. If you join Flo via a commercial partner, please check their privacy policy for more information, or contact us at dpo@flo.health if you have any questions.
Example: Flo has partnered with Wellhub, a health and wellbeing platform. Flo is available to Wellhub’s members as a health and wellbeing service. If you sign up for Flo using your Wellhub subscription, a Wellhub ID is shared with Flo. After you sign up to Flo, Flo will confirm to Wellhub if you have been active in the App.
Not stated here
Commercial partners’ privacy policies are not supplied; their independent handling cannot be assessed.
Cross-references
contrast (model-proposed): Members over 18 control limited, read-only partner sharing — contrast: Commercial subscription partners are promised no health or sensitive data; a chosen personal partner can receive selected account information through Flo for Partners. The two kinds of partner have different scopes.
Legal Rights & Agreement Rules · Restriction or exception
US telehealth uses partner privacy notices rather than this policy’s processing rules
Flo is not a medical provider and does not deliver medical care. For US users it facilitates access to telehealth partners. If you choose those services, Flo may act as the partner’s service provider, collecting and sharing information such as ZIP code and insurance provider to facilitate care. Some information may be protected health information under HIPAA. Flo says it processes on the partner’s behalf under applicable law and contracts, including a HIPAA business associate agreement where required. This policy’s described processing activities do not apply to personal information used with telehealth services; the relevant partner’s privacy notice governs that context.
Supporting quotations
Flo is not a medical provider and does not deliver medical care. If you are located in the United States, we provide options and facilitate access to services provided by our telehealth partners (“Telehealth Services”).
If you choose to use a Telehealth Services, Flo may act as a service provider to the applicable telehealth partner. In this role, we may collect certain personal information—such as your ZIP code and insurance provider—and share it with the partner to facilitate that service. In some cases, this information may be treated as Protected Health Information under the Health Insurance Portability and Accountability Act of 1996 (“HIPAA”).
We will process this information on behalf of our telehealth partners in accordance with applicable law and our contractual obligations, including, where required, entering into a HIPAA business associate agreement.
The data processing activities described in this Privacy Policy do not apply to the use of your personal information in connection with Telehealth Services. For information about how your personal information is collected, used, and disclosed in that context, please refer to the privacy notice or notice of privacy practices of the relevant telehealth partner.
Not stated here
The relevant telehealth partner’s privacy notice is not supplied; this analysis cannot describe its collection, uses, disclosures or detailed HIPAA terms.
Cross-references
narrows (model-proposed): Policy scope, controller and effective date — narrows: Telehealth information is expressly outside this policy’s described processing activities and instead follows the relevant partner notice; this limits the general services scope.
Sharing & Disclosure · Permission or license
De-identified research sharing is separate from consent for specific studies
Flo may aggregate, anonymise or de-identify personal data so it cannot identify you, then share it with third parties such as research institutions or use it for statistics. Examples include general age and demographics plus aggregated activity or symptom statistics for research, articles and scientific publications. To include you in a specific research study, Flo says it will ask for consent, which you can withdraw at dpo@flo.health.
Supporting quotations
We may aggregate, anonymise or de-identify your personal data so that it cannot be used to identify you. This personal data might be shared with third parties, like research institutions or used for statistical purposes. For example, we share general age and demographic information, along with aggregated statistics about activities or symptoms to identify patterns across and support scientific research. This helps us create articles, blog posts and scientific publications that advance research on female health.
If we want to include you in specific research studies, we will ask for your consent. You can withdraw your consent at any time by emailing us at dpo@flo.health.
Sharing & Disclosure · Restriction or exception
Community posts are visible to others and must not identify people
Secret Chats and guided groups let members share information, but posting personal data that directly identifies you or another person is prohibited. Posts are accessible to the Flo community and may be seen, disclosed or collected by others and used outside Flo’s control, including unauthorised contact. If you accidentally post personal data, email support@flo.health to request removal.
Supporting quotations
The App includes community areas like Secret Chats and guided groups where members with similar interests can share information and support each other.
Posting personal data that can directly identify you or others in such groups is not allowed and violates our rules, including the Secret Chats Rules. Any information you share in these community areas is accessible to the Flo community. Please think carefully before posting anything that could identify you in any public forum. Remember, what you post can be seen, disclosed, or collected by others and may be used in ways beyond our control, including contacting you for unauthorised purposes. If you accidentally post personal data and want it removed, email us at support@flo.health.
Not stated here
The linked Secret Chats Rules are not supplied; this card explains the restrictions stated in the Privacy Policy only.
Sharing & Disclosure · Permission or license
Limited legal, security and business events can permit preservation or disclosure
Flo may preserve or share some personal data in response to legal process as required by law, including national-security or law-enforcement needs; when necessary for service integrity or member security consistently with law; to assert rights or defend claims; at the data provider’s request or authorisation; or during acquisition, transfer or reorganisation. For security it may also delete some data, such as resetting a password to prevent unauthorised access. Depending on the circumstances it may rely on legitimate interests or legal obligations for these activities.
Supporting quotations
We may also preserve or share some of your personal data in the following limited circumstances:
in response to subpoenas, court orders, or legal processes, as required by applicable law (including to meet national security or law enforcement needs);
when necessary to maintain the security and integrity of the Services or to protect any member’s security, consistent with applicable laws. In such cases, we may also delete some of your personal data (e.g., by resetting your password to prevent unauthorised access);
to assert legal rights or defend against legal claims;
when disclosure is authorised or requested by the member who has provided the personal data;
in the event of a business acquisition, transfer or reorganisation; and
depending on the situation, we may rely on legitimate interest or legal obligations as the basis for these processing activities.
Linking & Identification · User right or choice
Anonymous Mode reduces identity linkage without guaranteeing perfect security
Anonymous Mode is available to all Flo users and lets you use the app without linking email, name or other identifiers to your account and data. Flo says this prevents it and third parties from identifying you through that linkage, but qualifies the promise: security measures might be bypassed in rare cases. Unlinking reduces risk rather than guaranteeing that no identification is ever possible.
Supporting quotations
Anonymous Mode lets you use Flo without linking your email, name, or other personal identifiers to your account.
Flo is the first female health app to add further privacy to your personal data by creating and providing Anonymous Mode. This feature is available to all Flo users and lets you use the app without linking your name, email address or technical identifiers to your data. This means we can’t identify you if you switch to Anonymous Mode and neither can any third parties.
Security: while Anonymous Mode minimises risks by unlinking personal data from health data, it’s important to note that in rare cases, security measures might be bypassed.
Not stated here
The linked Anonymous Mode FAQs are not supplied; further implementation details are unknown.
Retention & Deletion · Procedure
Switching to Anonymous Mode deletes access to the old account
For existing users, some non-identifiable data such as cycle information moves to a new Anonymous Mode account. The old account and personal data are deleted under Flo’s retention policy, and you lose access to it. That policy processes account deletion within one month, with backups sometimes taking up to 90 days, and makes deleted data unrecoverable. It also permits certain retention where law requires or allows it, including legal obligations, claims, and public-interest, scientific, historical or statistical archiving.
Supporting quotations
What happens with your old account: if you already have a Flo account, some non-identifiable data (like your cycle information) will be transferred to your new Anonymous Mode account. However, your old account with personal data will be deleted according to our retention policy and you will no longer have access to it.
Impact of account deactivation/requests to erase personal data: You can deactivate your account at any time by following instructions in the ‘How to exercise your privacy rights’. We will process your request within one-month. In some cases, it will take up to 90 days to completely erase your personal data from our backup systems. If you choose to deactivate your account, Flo will delete your personal data, and it will not be recoverable should you later create another account.
Limitations: Even after your account is deleted, we may need to retain certain personal data and other information. This is required or permitted by applicable law, like the GDPR, and may include situations like:
complying with legal obligations;
managing and handling legal claims; and
archiving for public interest, scientific or historical research, or statistical purposes.
Account & Service Control · Restriction or exception
Anonymous Mode limits integrations, messages and support
Some features are unavailable in Anonymous Mode because they depend on personal data, potentially including wearable integration and certain emails or push notifications. Because Flo cannot identify you in this mode, support may be unable to answer specific or technical questions, although it says it will help where possible.
Supporting quotations
Limitations of Anonymous Mode: in Anonymous Mode, some features of the App will not be available because they rely on personal data. These features may include:
integration with your wearable device; and
certain push notifications and emails.
Customer Support: when using Anonymous Mode, we cannot identify you. This means our customer support may not be able to assist with specific or technical questions. However, we will do our best to help where possible.
Members over 18 control limited, read-only partner sharing
If you are over 18, you can choose Flo for Partners and stop sharing at any time. The partner has read-only access to information you choose to share and cannot download or edit it through the service. They cannot see or edit calendar information from before sharing began, personal notes, logged symptoms or feelings, or interactions with other features such as Secret Chats.
Supporting quotations
If you are over 18, you can choose the Flo for Partners Service, allowing certain information from your Flo account to be shared with your partner. As the main member, you have complete control over this sharing and you can stop it at any time.
Your partner will have read-only access to the information you choose to share. They cannot download or edit your information. Specifically they cannot see or edit:
calendar information created before you decided to share;
personal notes;
any symptoms or feelings logged in the App; or
interactions with other features (e.g. Secret Chats).
Sharing & Disclosure · Company practice
Partner content follows cycle, pregnancy and mode changes
When an eligible main member chooses Flo for Partners, a partner can see current cycle day and cycle-phase predictions in cycle or trying-to-conceive mode, plus tailored daily education and key-phase notifications. Pregnancy mode provides pregnancy updates, education and notices about body changes, common symptoms and milestones. Switching modes also updates the partner’s app and adjusts its content. The main member can stop sharing at any time; these common-symptom insights are not access to the main member’s private symptom log.
Supporting quotations
If you are over 18, you can choose the Flo for Partners Service, allowing certain information from your Flo account to be shared with your partner. As the main member, you have complete control over this sharing and you can stop it at any time.
If you’re trying to conceive or tracking your menstrual cycle: your partner will see a view-only version of your current cycle day and cycle phase predictions. They will also receive tailored daily educational insights and notifications during key phases of your cycle.
If you’re pregnant: your partner will get regular updates about your pregnancy, including tailored daily educational insights. They will be notified about changes to your body, common symptoms and important milestones.
Your partner will also see updates in their App if you switch between modes (e.g. from ‘track pregnancy’ to ‘track cycle’) and their content will adjust accordingly.
any symptoms or feelings logged in the App; or
Cross-references
qualifies (model-proposed): Members over 18 control limited, read-only partner sharing — qualifies: The partner feature’s read-only permission is limited to the stated cycle or pregnancy information and mode-dependent updates; it does not reveal private logs or earlier calendar history.
Data Access & Collection · Company practice
Receiving partners provide account details but no health data
For a receiving partner’s account, Flo collects name and email and asks for birth month and year to verify age. It does not directly collect gender but may infer it from app use. Flo says it collects no health data about the receiving partner; this is distinct from the main member’s shared information.
Supporting quotations
If you’re a partner receiving information, we will collect your name and email to set up your account with Flo. We’ll also ask for your month and year of birth to verify your age. While we don’t collect your gender directly, it may be inferred based on your App usage. No health data about you will be collected.
Retention & Deletion · Company practice
Uninstalling or inactivity leaves a three-year retention period
Flo generally keeps personal data as necessary for services or its collection purposes. If you uninstall the app or become inactive, it retains personal data for three years in case you return, then deletes it after three years of inactivity. You can request earlier deletion. Certain data may still be retained when law requires or permits it, including legal obligations, claims, or public-interest, scientific, historical or statistical archiving.
Supporting quotations
We will keep your personal data for as long as necessary to provide you with the Services or fulfill the purposes for which it was collected (except as noted below).
Deleting the App or inactivity: If you delete the App from your device or your account becomes inactive, we will retain your personal data for three years in case you decide to reactivate the Services or reinstall the App. After three years of inactivity, your personal data will be deleted. Flo will apply this standard retention policy. However, you can still request earlier deletion by contacting us at any time.
Limitations: Even after your account is deleted, we may need to retain certain personal data and other information. This is required or permitted by applicable law, like the GDPR, and may include situations like:
complying with legal obligations;
managing and handling legal claims; and
archiving for public interest, scientific or historical research, or statistical purposes.
Cross-references
contrast (model-proposed): Account deletion is irreversible, with backup and legal-retention qualifications — contrast: Uninstalling or becoming inactive normally leaves data for three years; requesting account deletion triggers a separate deletion process with backup timing and legal exceptions. These are different user actions.
Retention & Deletion · Procedure
Account deletion is irreversible, with backup and legal-retention qualifications
You can request account deactivation at any time using the privacy-rights procedure. Flo says it processes the request within one month, while complete backup erasure can take up to 90 days; if more time is needed, it will explain. Identifiers are immediately unlinked, so deletion cannot be undone and deleted data will not be recoverable in a new account. Some data may nevertheless remain when law requires or permits it, such as for legal obligations or claims and public-interest, scientific, historical or statistical archiving.
Supporting quotations
Impact of account deactivation/requests to erase personal data: You can deactivate your account at any time by following instructions in the ‘How to exercise your privacy rights’. We will process your request within one-month. In some cases, it will take up to 90 days to completely erase your personal data from our backup systems. If you choose to deactivate your account, Flo will delete your personal data, and it will not be recoverable should you later create another account.
We will handle your request within one month of receiving it. In some cases, such as for complete deletion of your personal data stored in our backup systems, it may take 90 days. If we need more time to action your request, we will let you know and explain the reason for the delay. Please be aware that once the deletion process begins, it can’t be undone. This is because your personal identifiers are immediately unlinked from your App information, which means we can no longer identify you, even if some data temporarily remains in our backup systems.
Limitations: Even after your account is deleted, we may need to retain certain personal data and other information. This is required or permitted by applicable law, like the GDPR, and may include situations like:
complying with legal obligations;
managing and handling legal claims; and
archiving for public interest, scientific or historical research, or statistical purposes.
Flo describes permanent deletion and possible processor notices
Flo says it uses industry-standard methods to delete personal data securely and permanently from its systems so it cannot be recovered. The process may include automated notifications to processors handling data on its behalf. This describes how data selected for deletion is removed, subject to the policy’s retention exceptions.
Supporting quotations
We use industry-standard methods to securely and permanently delete your personal data from our systems, making it impossible to recover. This process may include sending automated notifications to our processors who process your personal data on our behalf.
Security & Safeguards · Company commitment
Flo lists security safeguards but does not guarantee absolute security
Flo describes technical and organisational measures reflecting the data and risks, including sensitive-data risks: encryption in transit and at rest, regular vulnerability scans and penetration testing, integrity measures, necessary-only employee access with accountability, and regular privacy impact assessments. It also commits to a privacy audit upon merger or takeover. Despite these measures, Flo does not guarantee absolute security or that data will not be intercepted during transmission.
Supporting quotations
We take various technical and organisational steps to protect your personal data from loss, theft, misuse, and unauthorised access, disclosure, alteration, and destruction. These measures are designed based on the nature of the personal data we handle and the risks associated with special categories of personal data we collect. This includes:
encryption: your personal data is encrypted both in transit and at rest;
vulnerability scanning: we conduct regular scans and penetration testing;
data integrity protection: we have measures in place to protect the integrity of your data;
organisational and legal measures: for example, our employees have different levels of access to your personal data, limited to what is necessary for operating the Services. We hold our employees strictly accountable for any disclosure, unauthorised access, alteration, destruction or misuse of your personal data; and
privacy assessments: we conduct regular data protection impact assessments to ensure that the Services comply with privacy principles. We also commit to a privacy audit in the event of Flo’s merger or takeover.
While we strive to protect your information, we cannot guarantee absolute security, nor can we ensure that your personal data won’t be intercepted during transmission to us.
Cross-references
qualifies (model-proposed): Flo reports privacy and security certifications — qualifies: The detailed security disclaimer qualifies the opening security and certification assurances: absolute security and interception prevention are not guaranteed.
Security & Safeguards · Procedure
Keep credentials private and consider an additional device lock
Flo asks you to keep your password secure and not share it. It suggests adding a passcode or Face ID for extra protection.
Supporting quotations
Please keep your password secure and don’t share it with others. Consider adding a passcode or enabling face ID for an extra layer of protection.
Security & Safeguards · Procedure
Breach notice depends on law; Flo may reset access to address incidents
For a security breach, where law requires, Flo will post a notice or try to contact you by email and take reasonable steps to fix the issue under law and this policy. For potential personal-data breaches it may log you out of all devices, reset your password or take other necessary measures. Its security provision also permits some data deletion when necessary for service or member security consistently with law. Report service security incidents at security@flo.health.
Supporting quotations
If there is a security breach and where required by law, we will either post a notice or try to contact you by email. We will take reasonable steps to fix the issue according to applicable laws and this Privacy Policy. For potential personal data breaches, we may take additional actions, such as logging you out from all the devices, resetting your password and other necessary steps to address the situation.
If you want to report a security incident related to the Services, please email us at security@flo.health.
when necessary to maintain the security and integrity of the Services or to protect any member’s security, consistent with applicable laws. In such cases, we may also delete some of your personal data (e.g., by resetting your password to prevent unauthorised access);
Account & Service Control · Restriction or exception
Children’s privacy section includes India in the age-16 rule
Flo says its services are not for children and it does not knowingly collect data from anyone under 13. Residents of the EEA, UK, Canada and India must be at least 16. Some app features are available only to members 18 or older; Flo for Partners specifically says over 18. Report underage use at support@flo.health. India appears in this detailed section even though the opening age summary omits it.
Supporting quotations
General age limitation: our Services are not for children, and we do not knowingly collect personal data from anyone under 13. If you know of someone under 13 using the Services, please email us at support@flo.health.
Age limitation for residents of the European Economic Area (EEA), United Kingdom (UK), Canada and India: For legal reasons, residents of the EEA, the UK, Canada or India must be at least 16. If you know of someone under 16 using the Services, please email us at support@flo.health.
Some features of the App are only available to members who are 18 or older.
If you are over 18, you can choose the Flo for Partners Service, allowing certain information from your Flo account to be shared with your partner. As the main member, you have complete control over this sharing and you can stop it at any time.
Cross-references
qualifies (model-proposed): Minimum app age depends on location — qualifies: The detailed age provision adds India to the age-16 jurisdictions omitted from the opening summary; the summary card carries that qualification.
Use & Processing · User right or choice
Marketing opt-out leaves essential service emails in place
Flo may send email, pop-up or push updates about services, offers, promotions, rewards and events, based on your chosen services, mode and feature interactions. It may also contact you through third-party platforms such as social media. You can unsubscribe from marketing emails using their link and stop push notifications in device settings; opting out does not stop essential service-related emails. Flo may seek additional consent for some communications, and its processing table identifies consent for personalised recommendations and cycle notifications.
Supporting quotations
We might contact you via email, pop-ups or push notifications to share updates with you about Services, offers, promotions, rewards and events. These messages will be based on the Services you have chosen from Flo, (e.g. your selected mode) and the features you interact with.
Opt-out options: You can unsubscribe from marketing emails by clicking the “Unsubscribe” link in the email. Opting out of these marketing emails or notifications will not stop essential Service-related emails. To stop receiving push notifications, adjust your settings on your device. In some cases, we might ask for additional consent for certain communications.
Please note we may contact you through third-party platforms (like social media) with information about our Services, offers, promotions, rewards and events.
We also customize product and service recommendations and cycle date notifications to you, such as through emails or push notifications. We may also contact you about third-party products and offers. Consent We may offer you a discount for Flo Premium.
Social-media engagement data is used solely for engagement
Flo may promote itself and interact with customers on social media. When you engage there, it processes details such as username, profile picture and Flo-related comments or posts, solely for engagement purposes.
Supporting quotations
We may use social media to promote Flo and interact with our customers. When you engage with us on these platforms, we process information about you, like your username, profile picture and any comments or posts related to Flo. This information is used solely for engagement purposes.
Sharing & Disclosure · Company practice
Data is processed internationally, with safeguards for EEA and UK transfers
UK-based Flo transfers personal data to and processes it in the US and other countries, usually through cloud-based transfers when you use the services. Destination laws apply and may offer different protections from your home country. For transfers outside the EEA and UK, Flo says it applies safeguards such as agreements containing European Commission Standard Contractual Clauses and transfer-risk assessments. Contact support@flo.health for more information.
Supporting quotations
Flo is based in the UK. The personal data we collect is transferred to and processed in the US, where it is subject to US law and to other countries (where it follows the laws of those countries). These transfers are usually cloud-based and occur when you use our Services. Please note, the laws in these countries may not offer the same protections as those in your country.
Personal data in the EEA and the UK is protected by the GDPR and the UK GDPR. When we transfer personal data outside of these areas, we apply appropriate safeguards to ensure your personal data is protected. For example, we use data transfer agreements that include the European Commission’s Standard Contractual Clauses and conduct transfer risk assessments.
For further information, please email us at support@flo.health.
Legal Rights & Agreement Rules · Company commitment
Flo U.S. states DPF commitments and conditional onward-transfer liability
Flo Health, Inc., the US subsidiary, says it self-certifies and complies with the EU–US DPF, UK Extension and Swiss–US DPF for personal data processed in reliance on those frameworks. For onward transfers to third parties acting for it, Flo U.S. remains liable for noncompliant processing unless it proves it was not responsible for the cause of the damage. DPF Principles govern if they conflict with this policy in that framework context.
Supporting quotations
Flo Health, Inc., Flo’s U.S. subsidiary, (“Flo U.S.”) is self-certified and complies with the EU–US DPF, the UK Extension to the EU–US DPF and Swiss–US DPF (collectively, the “DPFs”). Flo U.S. has certified to the U.S. Department of Commerce that, on reliance of the DPFs, it adheres to the DPF Principles when processing personal data of individuals within the EU, UK and/or Switzerland. For onward transfers, Flo U.S. is responsible for processing personal data it receives under the DPFs, and then transfers to a third party acting on its behalf. Flo U.S. remains liable under the DPFs if those third parties process personal data in a way that is not in compliance with the DPFs, unless it can prove that we are not responsible for the cause of any damage.
If there is any conflict between the terms in this Privacy Policy and the DPF Principles, the DPF Principles will govern
Not stated here
The linked DPF Principles are not supplied, and certification status is not independently checked here; only Flo’s stated commitment and precedence rule are analyzed.
Start DPF complaints with Flo; unresolved complaints can go to free JAMS services
EU, UK and Swiss individuals with DPF complaints should first contact dpo@flo.health or Flo Health UK Limited, Fourth Floor, International House, 1 St Katharine’s Way, London, E1W 1UN, United Kingdom. Flo U.S. commits to referring unresolved DPF complaints to JAMS. If acknowledgment is untimely or Flo’s answer is unsatisfactory, you may contact JAMS to complain; its services are free to you.
Supporting quotations
Complaints and dispute resolution: Flo U.S. is committed to resolving complaints about its collection and use of your personal data. EU, UK and Swiss individuals with inquiries or complaints regarding the DPFs should first contact us by emailing us at dpo@flo.health or by mail using the address: Flo Health UK Limited, Fourth Floor, International House, 1 St Katharine’s Way, London, E1W 1UN, United Kingdom.
Flo U.S. has further committed to refer unresolved DPF complaints to JAMS, an alternative dispute resolution provider located in the U.S. If you do not receive timely acknowledgment of your complaint from us, or if we have not addressed your complaint to your satisfaction, please contact JAMS or visit https://www.jamsadr.com/DPF-Dispute-Resolution for more information or to file a complaint. The services of JAMS are provided at no cost to you.
Not stated here
The linked JAMS information is not supplied; its additional procedures are not analyzed.
Legal Rights & Agreement Rules · User right or choice
DPF arbitration has prerequisites, limited remedies and exclusions
A resident of a participating European country, including the UK and Switzerland, may be able to invoke binding arbitration for unresolved DPF complaints. First contact Flo and allow it to resolve the issue, seek JAMS assistance, and contact the US Department of Commerce directly or through the identified authorities, allowing it time to resolve the issue. Each party bears its own attorney fees. Arbitrators may grant only individual-specific, non-monetary equitable relief needed to remedy the DPF violation. The same claimed violation cannot be arbitrated through this option if previously arbitrated, finally adjudicated in a court action involving the individual, or settled by the parties.
Supporting quotations
Arbitration: You may also be able to invoke binding arbitration for unresolved complaints, but prior to initiating such arbitration, a resident of a European country (including the UK and Switzerland) participating in the DPFs must first (1) contact us and afford us the opportunity to resolve the issue; (2) seek assistance from JAMS; and (3) contact the US Department of Commerce (either directly or through a European data protection authority, the UK’s Information Commissioner’s Office or the Swiss Federal Data Protection) and afford the Department of Commerce time to attempt to resolve the issue. If such a resident invokes binding arbitration, each party shall be responsible for its own attorney’s fees. Please be advised that pursuant to the DPFs, the arbitrator(s) may only impose individual-specific, non-monetary, equitable relief necessary to remedy any violation of the DPF with respect to the resident. The arbitration option may not be invoked if the individual’s same claimed violation of the principles (1) has previously been subject to binding arbitration; (2) was the subject of a final judgment entered in a court action to which the individual was a party; or (3) was previously settled by the parties.
The DPF section identifies oversight and dispute-resolution authorities
Flo’s DPF section identifies US Federal Trade Commission investigatory and enforcement powers over covered transferred data, along with the UK Information Commissioner’s Office, relevant EU data protection authority, and Swiss Federal Data Protection and Information Commissioner for Swiss disputes. This reports the policy’s named oversight bodies without expanding their legal powers.
Supporting quotations
Flo U.S. is subject to the investigatory and enforcement powers of the US Federal Trade Commission concerning personal data transferred under the DPFs, the UK’s Information Commissioner’s Office, the relevant EU Data Protection Authority, and the Swiss Federal Data Protection and Information Commissioner for resolving disputes with Swiss individuals.
Legal Rights & Agreement Rules · Context
US state and consumer-health notices are separate documents
US residents are directed to Flo’s U.S. State Privacy Law Notice. The policy also directs Washington and Nevada residents to its Consumer Health Data Privacy Notice. These referenced notices are separate from the supplied Privacy Policy, so their additional rights and obligations are not established here.
The U.S. State Privacy Law Notice and Consumer Health Data Privacy Notice are not supplied; this analysis does not claim complete coverage of their regional or health-data rules.
Account & Service Control · Procedure
Privacy contacts include UK and EU offices
For privacy questions or concerns, write to Flo Health UK Limited, Fourth Floor South, International House, 1 St Katharine’s Way, London, E1W 1UN, United Kingdom; or Flo Health LTU UAB, its main EU establishment, at Lvivo g. 21-101, Vilnius, 09306, Lithuania. You can also email support@flo.health or dpo@flo.health to reach Flo or its data protection officer.
Supporting quotations
If you have any questions or concerns about your privacy, you may contact us or our data protection officer by writing to us at:
Flo Health UK Limited:
Fourth Floor South, International House,
1 St Katharine’s Way, London,
E1W 1UN,
United Kingdom
Flo Health LTU UAB (our main EU establishment):
Lvivo g. 21-101
Vilnius
09306
Lithuania
You can also reach us by email at support@flo.health or dpo@flo.health.
Legal Rights & Agreement Rules · User right or choice
You may contact a local data protection authority
Flo says you may contact your local data protection authority if needed. Its rights section specifies that any right to lodge a complaint depends on local law; the contact paragraph links a list of authorities without supplying its contents.
Supporting quotations
If needed, you may also contact your local data protection authority.
Depending on local laws, you may have the right to lodge a complaint with your local data protection authority about any of our activities. If you have any concerns about our privacy practices, please let us know by emailing our support team at support@flo.health or by emailing our data protection officer at dpo@flo.health.
Not stated here
The linked authority list is not supplied; no specific regulator’s jurisdiction or procedure is inferred.
Legal Rights & Agreement Rules · Context
Policy scope, controller and effective date
This policy is effective from 31 August 2026 and covers Flo’s apps, flo.health and its subdomains, products and services. Flo Health UK Limited is the registered data controller; other Flo companies also handle data. App names may vary by location. The described processing activities exclude personal information used with Telehealth Services, for which the relevant partner’s privacy notice applies. US residents are also directed to a separate state privacy notice, and Washington and Nevada residents to a consumer health data notice.
Supporting quotations
Effective as of 31 August 2026
This Privacy Policy explains how Flo Health UK Limited and our other companies (“Flo” or “we” or “us”) follow privacy laws such as the General Data Protection Regulation (“GDPR”), the UK GDPR, and any other laws that protect your personal data. It also describes how Flo collects, stores, uses, and shares personal data from you through the Flo mobile application, the Flo Period & Ovulation Tracker application (the “App”),* and the flo.health website (the “Website”), including all subdomains, products and services (together, the “Services”).
Flo Health UK Limited is a company registered in the U.K. and the registered data controller of the Services.
The App might have different names depending on your location.
The data processing activities described in this Privacy Policy do not apply to the use of your personal information in connection with Telehealth Services. For information about how your personal information is collected, used, and disclosed in that context, please refer to the privacy notice or notice of privacy practices of the relevant telehealth partner.
The linked app-name list, telehealth partner notices, U.S. State Privacy Law Notice and Consumer Health Data Privacy Notice are not supplied; their additional scope and rules are not established here.
Sharing & Disclosure · Company commitment
Flo promises never to sell your data
Flo’s opening promises never to sell your data. Its processing principles specifically say it does not sell or rent personal data for money and shares only as this policy outlines, including with service providers. This commitment therefore coexists with the expressly described forms of sharing; it is not a promise of no disclosures.
Supporting quotations
Your body, your data. At Flo, privacy is our top priority. We will never sell your data. We are based in the United Kingdom, and comply with the highest global standards of data protection laws, including the GDPR. This means that no matter where you are in the world, you can trust that Flo is committed to keeping your personal data safe.
No sale of personal data: we do not sell or rent your personal data for money. We will only share your personal data as outlined in this Privacy Policy. This includes sharing your personal data with our service providers who help us operate our Services. We will not use information from Apple HealthKit or Google Health Connect for advertising or sell it to advertising platforms, data brokers or resellers.
Security & Safeguards · Company commitment
Flo reports privacy and security certifications
Flo reports independent ISO/IEC 27001 information-security and ISO/IEC 27701 privacy certifications. It promises transparency about data use and protection of users’ rights. These are Flo’s statements in the policy, not an independent verification of its security. The detailed security section says it cannot guarantee absolute security or prevent all interception during transmission.
Supporting quotations
We are proud to hold two certifications for internationally recognised privacy and security standards. Flo has obtained independent certifications called:
ISO/IEC 27001 for Information Security; and
ISO/IEC 27701 in Privacy.
Our certifications show our promise to keep your information secure and manage your privacy to a high standard. When you use Flo, you trust us with your personal data. We promise to always be clear about how your personal data is used, protect your rights and respect your data.
While we strive to protect your information, we cannot guarantee absolute security, nor can we ensure that your personal data won’t be intercepted during transmission to us.
Linking & Identification · User right or choice
Anonymous Mode unlinks identifying details from health data
Flo says Anonymous Mode is available to all users and unlinks name, email and technical identifiers from data so Flo and third parties cannot identify you through that linkage. Its detailed section warns that security measures might rarely be bypassed. Switching moves some non-identifiable data to a new account and deletes access to the old account under the retention policy, including its legal-retention exceptions. Some features, such as wearable integration and certain messages, may be unavailable, and support may be unable to help with specific or technical issues because it cannot identify you. The linked FAQs are not supplied.
Supporting quotations
Flo is the first female health app to add further privacy to your personal data by creating and providing Anonymous Mode. This feature is available to all Flo users and lets you use the app without linking your name, email address or technical identifiers to your data. This means we can’t identify you if you switch to Anonymous Mode and neither can any third parties.
Security: while Anonymous Mode minimises risks by unlinking personal data from health data, it’s important to note that in rare cases, security measures might be bypassed.
What happens with your old account: if you already have a Flo account, some non-identifiable data (like your cycle information) will be transferred to your new Anonymous Mode account. However, your old account with personal data will be deleted according to our retention policy and you will no longer have access to it.
Limitations of Anonymous Mode: in Anonymous Mode, some features of the App will not be available because they rely on personal data. These features may include:
integration with your wearable device; and
certain push notifications and emails.
Customer Support: when using Anonymous Mode, we cannot identify you. This means our customer support may not be able to assist with specific or technical questions. However, we will do our best to help where possible.
Limitations: Even after your account is deleted, we may need to retain certain personal data and other information. This is required or permitted by applicable law, like the GDPR, and may include situations like:
Use & Processing · Company practice
Data supports predictions, content and service safety
Flo collects personal data to improve the experience, including service safety, prediction accuracy and relevant content and offers. The detailed collection and processing provisions identify the data and conditions for particular uses.
Supporting quotations
When you use Flo, we collect your personal data to make your experience better. This includes ensuring the safety of our Services, improving the accuracy of your predictions and giving you relevant content and offers.
Sharing & Disclosure · Permission or license
Promotion using device and account details requires agreement
If you agree, Flo may use device information and other details to promote Flo, including device ID, age group, subscription status, email and app launches. The summary describes a conditional promotional use, not automatic consent from using the app. Flo separately says it does not share health data with third parties for marketing.
Supporting quotations
If you agree, we may use information about your device and other details (such as your device’s ID, your age group, subscription status, email and the fact you launch the app) to spread the word about Flo.
We do not share your health data with third parties for marketing purposes. With your consent, Flo may collect and share information with AppsFlyer and its partners, Firebase and TikTok Ad Manager. These are mobile app marketing and analytics platforms (not social media platforms) who help us improve our advertising campaigns, understand the performance of our campaigns and spread the word about Flo. They may also use information collected to remind you to revisit the App if you haven’t used it in a while.
Account & Service Control · User right or choice
Contact Flo to exercise data rights or withdraw consent
You can contact support@flo.health to access, change, correct, delete or update data, and dpo@flo.health for the data protection officer. Consent can be withdrawn at any time. Flo says it handles requests within one month; complete deletion from backups may take 90 days, and it will explain any extra time needed. Once deletion starts it cannot be undone, because identifiers are immediately unlinked from app information. Requests require identity verification; Flo may seek clarification and may refuse or charge a reasonable fee for clearly unfounded or excessive requests. Certain information may remain when law requires or permits it, including legal obligations, claims, or public-interest, scientific, historical or statistical archiving.
Supporting quotations
You can reach out to us anytime. You can access, change, correct, delete and update your personal data by emailing us at support@flo.health. Or you can get in touch with our data protection officer at dpo@flo.health. If you gave us consent to process your personal data, you can take your consent back at any point. If you have any questions about this Privacy Policy, let us know.
We will handle your request within one month of receiving it. In some cases, such as for complete deletion of your personal data stored in our backup systems, it may take 90 days. If we need more time to action your request, we will let you know and explain the reason for the delay. Please be aware that once the deletion process begins, it can’t be undone. This is because your personal identifiers are immediately unlinked from your App information, which means we can no longer identify you, even if some data temporarily remains in our backup systems.
If your request is unclear, we might reach out to you for clarification. We may also refuse or charge a reasonable fee for requests that are clearly unfounded and/or excessive.
To process your request, we’ll need to verify your identity. Usually, this involves confirming that the request is coming from the email you used to register. If you haven’t registered, we may ask you for additional verification to ensure we respond appropriately.
Limitations: Even after your account is deleted, we may need to retain certain personal data and other information. This is required or permitted by applicable law, like the GDPR, and may include situations like:
complying with legal obligations;
managing and handling legal claims; and
archiving for public interest, scientific or historical research, or statistical purposes.
Account & Service Control · Restriction or exception
Minimum app age depends on location
The general minimum app age is 13. The detailed children’s section requires at least 16 for residents of the EEA, UK, Canada and India, adding India to the opening summary’s list. Some features require age 18 or older; Flo for Partners specifically says over 18.
Supporting quotations
You must be at least 13 years old to use the app. If you are in the European Economic Area, United Kingdom and Canada, you must be 16 years old.
Age limitation for residents of the European Economic Area (EEA), United Kingdom (UK), Canada and India: For legal reasons, residents of the EEA, the UK, Canada or India must be at least 16. If you know of someone under 16 using the Services, please email us at support@flo.health.
Some features of the App are only available to members who are 18 or older.
If you are over 18, you can choose the Flo for Partners Service, allowing certain information from your Flo account to be shared with your partner. As the main member, you have complete control over this sharing and you can stop it at any time.
Legal Rights & Agreement Rules · Procedure
Flo reviews the policy annually and notifies material changes
Flo may update this policy and addendums and reviews them at least yearly, updating them if needed. It says it will notify you by email or in the app about material changes it needs to tell you about. Latest updates are available on the website and in the app.
Supporting quotations
We may update this Privacy Policy and any addendums from time to time. We review them at least once a year and make updates if needed to ensure they remain accurate. If there are material changes to this policy that we need to tell you about, we will let you know by email or through the App.
The latest updates to this policy are available on our Website and in the App.
Legal Rights & Agreement Rules · Company practice
Processing bases depend on the feature and purpose
Depending on the features used, Flo relies on consent to process health data for services, contract for account and administrative commitments, legitimate interests for specified activities, and legal obligations where applicable law requires processing. The policy does not treat every operation as consent-based.
Supporting quotations
Depending on the features you use, we will process your personal data based on the following reasons:
Your consent: You can allow us to process your health data to provide the Services.
Contractual obligations: We process certain personal data to meet our contractual commitments to you, such as managing your Flo account and handling administrative tasks.
Legal obligation: We may be legally required to process your personal data to comply with applicable laws and regulations.
Use & Processing · Company practice
Flo lists service improvement and safety as legitimate interests
Flo may rely on legitimate interests to identify and fix issues, prevent fraud and bot installs, improve content, monitor performance, send subscription notices, scan security vulnerabilities, analyse usage trends and forecast retention. It says it balances those interests against your rights so its activities do not negatively affect you or your rights.
Supporting quotations
Legitimate interests: We may process your personal data based on our legitimate interests to improve our Services. For example, we might use your personal data to:
identify and fix issues;
fraud prevention, including ensuring interactions (e.g. app-installs) are from real members, not bots;
improve content in the App;
monitor and analyse App performance;
notify you about your subscriptions;
scan for vulnerabilities to ensure security; and
review overall App usage trends and forecast customer retention.
We carefully balance our interests with your rights to ensure our activities don't negatively impact you or your rights. More examples of our legitimate interests are listed in the table below.
Inference & Profiling · Company practice
Consent supports personalised app features and cycle predictions
Flo identifies consent as the basis for tailored app features. Inputs include data you enter, chosen modes and used features, onboarding responses and connected health-service data. It uses machine-learning cycle predictions and personal data to predict cycles or ovulation, offer features and suggest articles or other materials. Health-service connections require permission; imports are also subject to those providers’ terms, and wearable providers may collect usage data for their own purposes.
Supporting quotations
To support the App’s features, including tailored content, insights and materials in the App, we use the personal data you provide within the App; machine learning models for cycle predictions; the Services you choose to use (e.g. your selected mode) and the App features you interact with; information from connected third-party services (like Apple HealthKit and Google Health Connect); and certain information provided in onboarding questionnaires. Consent We use your cycle data to predict future cycles or ovulation, analyse your personal data to offer new features and Services, and suggest articles or materials (e.g., stories, Health Assistant, and Secret Chats) for you to read.
Third-party services (including wearables): With your permission, we can connect to third-party services like Apple HealthKit and Google Health Connect. This allows us to automatically import your health and activity data into the app, so you don’t have to log it yourself. The imported data may include fitness activities, weight, height, BMI, calories burned, heart rate, steps taken, distance traveled, body temperature, sleep patterns, and other activity details.
Importing data is subject to the privacy policies and terms of Google Health Connect and Apple HealthKit. If you use a wearable device to connect to Flo, please review its terms and privacy policies as well. Your device provider may collect usage data for its own purposes, such as improving its services.
Not stated here
Linked Google Health Connect, Apple HealthKit and wearable-provider policies are not supplied; their detailed rules are outside this analysis.
Use & Processing · Company practice
Personalised recommendations and cycle notifications use consent
The table identifies consent for customised product or service recommendations and cycle-date notifications, including email and push messages. Flo may also contact you about third-party products and offers; a Flo Premium discount is an example.
Supporting quotations
We also customize product and service recommendations and cycle date notifications to you, such as through emails or push notifications. We may also contact you about third-party products and offers. Consent We may offer you a discount for Flo Premium.
Charges & Financial Obligations · Company practice
Transactions and account notices use the contractual basis
Flo processes transactions and sends confirmations and subscription reminders for account management and administration under the contractual basis. Examples include device-based push reminders for expiring or expired subscriptions and emailed invoices where applicable.
Supporting quotations
We process transactions and send related information, including confirmations and reminders about your subscription, for account management reasons and other administrative purposes. Contract We use your device data to send reminders, like push notifications, if your subscription has expired or is about to expire. If applicable, we may also email you your invoice.
Use & Processing · Company practice
Support, clinical review and service messages use legitimate interests
Flo lists legitimate interests for answering requests and providing support, reviewing app content and complaints for clinical safety and medical accuracy, and sending technical, security, support and administrative messages or satisfaction surveys. Name and email may be used for support and matters requiring the medical team; update requests are an example of service notices.
Supporting quotations
To respond to your comments, questions, requests and to provide you with customer service. Legitimate interest We use your name and email to respond to your support request or to contact you about a specific question or issue you’ve raised.
To review App content, feedback and complaints to ensure the App’s clinical safety and medical accuracy. Legitimate interest We use your name and email to review support requests that need our medical team’s attention.
To send you technical notices and updates; security alerts, ensure the safety of our App and investigate incidents; support and administrative messages; and customer satisfaction surveys. Legitimate interest To request that you update your App to ensure you have access to the latest features.
Linking & Identification · Company practice
AppsFlyer connects website signup to the app
For onboarding and user experience, Flo relies on legitimate interests to connect website and app data. If you sign up on the website, it uses AppsFlyer’s deeplinking service to recognise you as an existing member when you download the app. This is the onboarding purpose specified in the table. Flo expressly says users cannot opt out of AppsFlyer’s processing for this separate functional onboarding purpose.
Supporting quotations
To enhance your user experience and connect data between the Website and App during the onboarding process.
Legitimate interest When you sign up for the Services on the Website, we use a third party deeplinking service, AppsFlyer, to help us identify you as an existing member when you download the App.
Please note, that we also use AppsFlyer for a separate functional purpose to help join up the onboarding process between the Website and App for some users. You cannot opt out of AppsFlyer’s processing of your personal data for this purpose.
Cross-references
contrast (model-proposed): Advertising measurement excludes health data and requires consent — contrast: AppsFlyer’s functional onboarding processing cannot be opted out of, whereas advertising measurement is consent-based. The purposes differ; this is a reviewed tension between mandatory functionality and optional promotion.
Use & Processing · Company practice
Usage analytics can shape content, campaigns and offers
Under legitimate interests, Flo monitors app trends, use and activity to check operation, fix problems, improve the experience and serve relevant content. It may also use overall usage trends to deliver content, sales campaigns and offers.
Supporting quotations
To monitor and analyse trends, usage and activities in connection with our App. Legitimate interest We review your usage activity in the App to make sure it works correctly, fix any issues, serve you relevant content, and improve your future experience. We may also use overall usage trends to deliver the right content, sales campaigns and offers to you.
Sharing & Disclosure · Permission or license
Consent covers testimonials, surveys and promotions
Flo lists consent for promotional communications such as posting your review or comment on its website. For invited surveys or promotions, it may use your name, responses and supplied content, including testimonial videos, for product improvement and marketing. If it gives a participation gift, it processes contact details to deliver it.
Supporting quotations
Promotional communications regarding our Services. Consent If you give your consent and we use your personal data, we can post your review or comment on our Website.
To enable you to participate in surveys and promotions.
Consent If we ask you to participate in a survey or promotion, we use your name, survey responses and any other content (e.g. testimonial videos) that you provide for product improvement and marketing purposes. We may give you a gift for participating in the survey or promotion, so will process your contact details to provide you with this gift.
Sharing & Disclosure · Permission or license
Advertising measurement excludes health data and requires consent
Flo lists consent for using technical identifiers to understand which ads work and where users come from, and excludes health data from that purpose. With consent it may collect and share information with AppsFlyer and partners, Firebase and TikTok Ad Manager to improve campaigns or remind inactive users to return. For iOS ATT, permitted sharing can include advertising ID, age group, subscription status and launch activity; you can change ATT consent in phone or Flo settings. Flo says it does not share health data with third parties for advertising or marketing.
Supporting quotations
Promote Flo by improving how our advertising and campaigns perform Consent We use some technical identifiers to help us understand which advertisements are effective and where our users are coming from. This allows us to improve how Flo is promoted. The personal data we use for this purpose does not include health data.
We do not share your health data with third parties for marketing purposes. With your consent, Flo may collect and share information with AppsFlyer and its partners, Firebase and TikTok Ad Manager. These are mobile app marketing and analytics platforms (not social media platforms) who help us improve our advertising campaigns, understand the performance of our campaigns and spread the word about Flo. They may also use information collected to remind you to revisit the App if you haven’t used it in a while.
In addition to AppsFlyer, for iOS devices, we may use Apple’s ATT tool to help us improve our advertising and help more people discover Flo’s Services. If you choose to allow tracking, Apple will ask whether you would like to share your device’s advertising ID (sometimes referred to as a IDFA), and details like your age group, subscription status and the fact you launched the Flo App. Please be aware, we do not share your health data with third parties for advertising purposes, and you can change your consent for ATT any time in your phone settings or Flo’s consent settings in the App.
Account & Service Control · Company practice
Commercial partner signup uses identifiers to verify eligibility
If you sign up through a Flo commercial partner offer, Flo uses unique identifiers to verify that you subscribe to that partner’s service. The table lists contract as the legal basis.
Supporting quotations
Sign up to Flo through Flo’s commercial partner offerings Contract If you sign up to Flo through a Flo partner offer, we’ll use unique identifiers to verify that you are a subscriber to the partner’s service.
Use & Processing · Company commitment
Personal data is limited to collected or authorised purposes
Flo commits to processing personal data only for the specific purposes for which it was collected or which you authorised.
Supporting quotations
Data minimisation and purpose limitation: we only process personal data for the specific purposes for which it was collected or authorised by you.
Sharing & Disclosure · Company commitment
No paid sale or rental; specified service and marketing sharing remains
Flo says it does not sell or rent personal data for money and shares only as outlined in this policy, including with service providers. It will not use Apple HealthKit or Google Health Connect information for advertising or sell it to advertising platforms, brokers or resellers. Separately, consent may permit non-health information to be shared with named marketing and analytics platforms; Flo says health data is not shared with third parties for marketing.
Supporting quotations
No sale of personal data: we do not sell or rent your personal data for money. We will only share your personal data as outlined in this Privacy Policy. This includes sharing your personal data with our service providers who help us operate our Services. We will not use information from Apple HealthKit or Google Health Connect for advertising or sell it to advertising platforms, data brokers or resellers.
We do not share your health data with third parties for marketing purposes. With your consent, Flo may collect and share information with AppsFlyer and its partners, Firebase and TikTok Ad Manager. These are mobile app marketing and analytics platforms (not social media platforms) who help us improve our advertising campaigns, understand the performance of our campaigns and spread the word about Flo. They may also use information collected to remind you to revisit the App if you haven’t used it in a while.
Account & Service Control · Procedure
Worldwide rights requests require identity and authority checks
Flo commits to providing GDPR-equivalent privacy rights regardless of location. Requests may be made by you or an authorised representative, whose authority may be verified. Flo verifies identity, usually through the registered email; unregistered users may need extra verification. It may seek clarification or refuse or charge a reasonable fee for clearly unfounded or excessive requests. These conditions apply to the rights described in this section.
Supporting quotations
Regardless of where you live, we’re committed to providing you the same privacy rights afforded under the GDPR, which is generally regarded as the highest standard for data protection globally.
You have rights in relation to your personal data. Only you or someone authorised to act on your behalf can make a request about your personal data. If you authorise someone to act on your behalf, we may need to verify their authorisation.
If your request is unclear, we might reach out to you for clarification. We may also refuse or charge a reasonable fee for requests that are clearly unfounded and/or excessive.
To process your request, we’ll need to verify your identity. Usually, this involves confirming that the request is coming from the email you used to register. If you haven’t registered, we may ask you for additional verification to ensure we respond appropriately.
Cross-references
qualifies (model-proposed): Request correction or restricted processing — qualifies: Correction and restriction requests use the general identity-verification and request-handling conditions, rather than an unconditional change on demand.
qualifies (model-proposed): Access and transfer your data — qualifies: Access and portability requests are subject to the general verification rules and treatment of clearly unfounded or excessive requests.
qualifies (model-proposed): You may object to processing, including direct marketing — qualifies: Objection requests follow the general identity and request-handling procedure; the objection provision does not promise automatic cessation of every processing operation.
Use & Processing · User right or choice
Request correction or restricted processing
If you think Flo holds incorrect personal data, you can request a correction. In certain circumstances you can also request restricted processing—for example, while Flo verifies disputed accuracy. These are request rights subject to the section’s identity checks and request-handling conditions.
Supporting quotations
If you think your personal data that we hold is incorrect, you can contact us to request a correction.
You can request that we limit the processing of your personal data in certain circumstances. For example, if you believe your personal data is inaccurate, you can ask us to restrict the processing while we verify it.
If your request is unclear, we might reach out to you for clarification. We may also refuse or charge a reasonable fee for requests that are clearly unfounded and/or excessive.
To process your request, we’ll need to verify your identity. Usually, this involves confirming that the request is coming from the email you used to register. If you haven’t registered, we may ask you for additional verification to ensure we respond appropriately.
Account & Service Control · User right or choice
Access and transfer your data
You can ask what data Flo processes, obtain access and a copy, including a structured portable .json file, and request a format suitable for moving or transferring it to other services. iOS Flo Premium members can also download an in-app report containing some data. General requests remain subject to verification and the section’s request-handling conditions.
Supporting quotations
You have the right to know what personal data we process about you. You can request access to all your personal data and to receive a copy of it, including in a structured and portable form (we use .json files). For iOS Flo Premium members, the App also allows you to download a report with some of your personal data directly.
You can request your personal data in a format that lets you easily move, copy or transfer it to third parties for other services or purposes.
If your request is unclear, we might reach out to you for clarification. We may also refuse or charge a reasonable fee for requests that are clearly unfounded and/or excessive.
To process your request, we’ll need to verify your identity. Usually, this involves confirming that the request is coming from the email you used to register. If you haven’t registered, we may ask you for additional verification to ensure we respond appropriately.
Retention & Deletion · User right or choice
Deletion can affect history-based features and cannot be reversed once started
You may ask for deletion at any time, including requesting account deletion in app settings, but removing historical data may affect features that depend on it. Flo says requests are handled within one month; complete deletion from backups may take 90 days, and additional time will be explained. Deletion cannot be undone once started because identifiers are immediately unlinked from app information, even while some data temporarily remains in backups. The section’s identity and request-handling conditions apply. Certain data may remain when applicable law requires or permits it, including for legal obligations, legal claims, and public-interest, scientific, historical or statistical archiving.
Supporting quotations
You can ask us to delete your personal data at any time. Keep in mind that deleting some personal data might affect your experience with certain features that depend on historic information.
You can request to delete your account or make certain changes directly in the App's settings.
We will handle your request within one month of receiving it. In some cases, such as for complete deletion of your personal data stored in our backup systems, it may take 90 days. If we need more time to action your request, we will let you know and explain the reason for the delay. Please be aware that once the deletion process begins, it can’t be undone. This is because your personal identifiers are immediately unlinked from your App information, which means we can no longer identify you, even if some data temporarily remains in our backup systems.
If your request is unclear, we might reach out to you for clarification. We may also refuse or charge a reasonable fee for requests that are clearly unfounded and/or excessive.
To process your request, we’ll need to verify your identity. Usually, this involves confirming that the request is coming from the email you used to register. If you haven’t registered, we may ask you for additional verification to ensure we respond appropriately.
Limitations: Even after your account is deleted, we may need to retain certain personal data and other information. This is required or permitted by applicable law, like the GDPR, and may include situations like:
complying with legal obligations;
managing and handling legal claims; and
archiving for public interest, scientific or historical research, or statistical purposes.
Use & Processing · User right or choice
You may object to processing, including direct marketing
You may object to processing of personal data, such as its use for direct marketing. The policy’s general verification and request-handling conditions apply; this sentence does not say every objection automatically stops all processing.
Supporting quotations
You can object to the processing of your personal data, such as if we use it for direct marketing purposes.
If your request is unclear, we might reach out to you for clarification. We may also refuse or charge a reasonable fee for requests that are clearly unfounded and/or excessive.
To process your request, we’ll need to verify your identity. Usually, this involves confirming that the request is coming from the email you used to register. If you haven’t registered, we may ask you for additional verification to ensure we respond appropriately.
Account & Service Control · User right or choice
Use the chatbot or support contact, and withdraw health-data consent
Use the website’s interactive chatbot or contact support@flo.health to exercise privacy rights. Flo requires consent to use health data, and you can withdraw it by contacting Flo or deleting the account in the app. The summary also permits withdrawal of other processing consent at any time and gives dpo@flo.health as the data protection officer contact.
Supporting quotations
To exercise your privacy rights, you can use our interactive chatbot, available on our Website or by emailing us at support@flo.health.
Your consent is required for us to use your health data. You can withdraw this consent at any time by either contacting us or deleting your account through the App.
You can reach out to us anytime. You can access, change, correct, delete and update your personal data by emailing us at support@flo.health. Or you can get in touch with our data protection officer at dpo@flo.health. If you gave us consent to process your personal data, you can take your consent back at any point. If you have any questions about this Privacy Policy, let us know.
Legal Rights & Agreement Rules · User right or choice
Local law may permit a regulator complaint
Depending on local law, you may complain to your local data protection authority about Flo’s activities. Flo also invites privacy concerns at support@flo.health or dpo@flo.health.
Supporting quotations
Depending on local laws, you may have the right to lodge a complaint with your local data protection authority about any of our activities. If you have any concerns about our privacy practices, please let us know by emailing our support team at support@flo.health or by emailing our data protection officer at dpo@flo.health.