Supplemental Flo U.S. State Privacy Notice

Flo · Official agreement

49 of 58 blocks carry cards. 28 cards.

Supplemental Flo U.S. State Privacy Notice

Table of contents

Effective as of 13 November 2025

This notice applies if you are a resident of certain U.S. states and supplements Flo’s Privacy Policy to describe how we personal data collected through our websites, social media accounts, mobile applications, and other online interactions and communications such as email (collectively, our “Services”).

Changes: We may update this notice from time to time, and any update will be effective when posted. If required by law, we will contact you directly to provide you with updates.

Your Rights

Regardless of your country, state, or region of residence, we’re committed to providing you the same privacy rights afforded under the GDPR, which is generally regarded as the highest standard for data protection globally.

In addition to GDPR rights offered in our main Privacy Policy, you may have more specific rights – depending on which state you live in (such as California, Colorado, Oregon, or Delaware). You can exercise your rights using our interactive chatbot, available on our Website or by emailing us at support@flo.health. We will not discriminate against you for exercising your privacy rights.

These rights are listed below:

Please be aware we do not sell or rent your data for monetary gain.

Under certain state laws (for example, California), disclosure of personal information to third parties may be deemed a “sale”. This is because those laws broadly define “sale” and “sharing” to include disclosure of personal data for any benefit – such as analytics, marketing activities, or other business purposes – even if money is not exchanged and the third party does not use the personal information for any other purpose.

We do not knowingly “sell” data about minors.

We will honor opt-out preference signals sent in a format commonly used and recognized, and will process opt-out preference signals at the browser level.

  • Authorized Agents: You can appoint an authorized agent to submit a Right to Know, Delete, or Correct request on your behalf by emailing support@flo.health. If you do this, we will ask the agent to verify that they are authorized to act on your behalf. We may reach out to you directly to verify your identity or to permit the request from the agent.
  • Appeal: If we deny your rights request, you may have the right to appeal by contacting us at support@flo.health. We will respond in writing.

To process your rights requests, we will collect information necessary to verify your identity (such as your email address, User ID, or information about your request).

Data Disclosures

Your data is processed in accordance with our Privacy Policy at all times. This section provides information about how we process your personal data.

Sharing of Personal Data

We do not sell or rent your personal data for monetary gain. We may disclose your personal data (note: this does not include your health information) to third parties which may constitute a “sale,” “sharing,” or “targeted advertising as those terms are broadly defined under U.S. state laws, as discussed above.

Categories of third parties with whom we share:

We also share your personal data with our vendors to help us provide our Services. We remain fully accountable for their actions and omissions, and we require them to comply with strict contractual and regulatory obligations before we engage them. You can find a list of the vendors and third parties we share personal data with for business purposes in our main Privacy Policy.

Disclosures for Business Purposes

Please note, we do not share your health information with third parties for marketing purposes.

We disclose personal data to service providers to provide our Service, this includes:

California Shine the Light: If you are a California resident, you may opt out of sharing your personal data subject to California Civil Code §1798.83 (the “Shine the Light law”) with third parties for those third parties’ direct marketing purposes.

California Eraser Law: If you are a California resident under the age of 18 who has posted content or information on our Website or App, you can delete your posts and comments on other posts, or request removal of the information by contacting us at support@flo.health. Let us know where the content or information is posted, and confirm that you posted it. We will make reasonable efforts to remove the post from public view or anonymize it so you cannot be identified, as required by law. We can’t promise complete or comprehensive removal. For example, third parties may have republished or archived content that we do not control.

Notice of Financial Incentives

Sometimes we offer benefits, and other incentives to you when you engage in surveys or promotions. Your personal data may be collected and retained, and that may be a “financial incentive” or “price or service difference” under the California Consumer Privacy Act. We will request your consent before participation, and you may withdraw it at any time if you change your mind.

We may collect: identifiers; protected class and demographic information; responses to survey questions, commercial information and preferences; and internet or other electronic network activity information and device information. Our good-faith estimate of the value of your personal data is the value of the benefit we offer to you. You agree that the benefits are reasonably related.

Contact

If you have any questions or concerns about your privacy, you may contact us or our Data Protection Officer by writing to us at:

Flo Health, Inc.,

108 W. 13th Street,

Suite 100 Wilmington, DE 19801

Or by emailing us at support@flo.health or by contacting our Data Protection Officer at dpo@flo.health.