A state privacy supplement effective November 13, 2025
This notice supplements Flo’s main Privacy Policy for residents of certain U.S. states. It covers personal data collected through websites, social media accounts, mobile apps and other online interactions and communications, including email. Its stated effective date is November 13, 2025.
Supporting quotations
Effective as of 13 November 2025
This notice applies if you are a resident of certain U.S. states and supplements Flo’s Privacy Policy to describe how we personal data collected through our websites, social media accounts, mobile applications, and other online interactions and communications such as email (collectively, our “Services”).
Not stated here
The main Privacy Policy is linked but not supplied in this analysis; this notice does not give an exhaustive list of covered states.
Legal Rights & Agreement Rules · Company practice
Updates take effect when posted
Flo may update this notice from time to time. Changes take effect when posted; Flo will contact you directly with updates if the law requires it.
Supporting quotations
Changes: We may update this notice from time to time, and any update will be effective when posted. If required by law, we will contact you directly to provide you with updates.
Legal Rights & Agreement Rules · Company commitment
Privacy rights depend partly on where you live
Flo commits to offering the same privacy rights afforded under the GDPR regardless of country, state or region of residence. This supplement says additional, more specific rights may depend on your state, giving California, Colorado, Oregon and Delaware as examples. The details of GDPR rights in the linked main Privacy Policy are outside this supplied document.
Supporting quotations
Regardless of your country, state, or region of residence, we’re committed to providing you the same privacy rights afforded under the GDPR, which is generally regarded as the highest standard for data protection globally.
In addition to GDPR rights offered in our main Privacy Policy, you may have more specific rights – depending on which state you live in (such as California, Colorado, Oregon, or Delaware). You can exercise your rights using our interactive chatbot, available on our Website or by emailing us at support@flo.health. We will not discriminate against you for exercising your privacy rights.
Legal Rights & Agreement Rules · Procedure
How to exercise your privacy rights
You can use the website’s interactive chatbot or email support@flo.health to exercise applicable privacy rights. Flo says it will not discriminate against you for doing so. To process a request, it collects information needed to verify your identity, such as your email address, User ID or information about the request.
Supporting quotations
In addition to GDPR rights offered in our main Privacy Policy, you may have more specific rights – depending on which state you live in (such as California, Colorado, Oregon, or Delaware). You can exercise your rights using our interactive chatbot, available on our Website or by emailing us at support@flo.health. We will not discriminate against you for exercising your privacy rights.
To process your rights requests, we will collect information necessary to verify your identity (such as your email address, User ID, or information about your request).
Legal Rights & Agreement Rules · User right or choice
Ask what data Flo holds and how it is used or shared
Subject to the state-dependent rights described in this notice, you can request categories and specific sets of personal data collected about you, its sources, collection purposes, information about sharing, and who received your data and why. Oregon residents can also request a specific list of third parties to whom Flo discloses their personal data.
Supporting quotations
In addition to GDPR rights offered in our main Privacy Policy, you may have more specific rights – depending on which state you live in (such as California, Colorado, Oregon, or Delaware). You can exercise your rights using our interactive chatbot, available on our Website or by emailing us at support@flo.health. We will not discriminate against you for exercising your privacy rights.
Right to Know. You can request information about:
the categories of personal data we have collected about you (you can also ask for the specific sets of personal data we have collected about you);
the sources from which we collected the personal data;
the purposes for collecting;
sharing personal data;
to whom we have disclosed your personal data and why; and
if you are an Oregon resident, you can also request a specific list of third parties to whom we disclose your personal data.
Legal Rights & Agreement Rules · User right or choice
Ask Flo to delete your personal data
The notice lists a right to ask Flo to delete your personal data among the additional rights that may depend on your state. This is a request right; the supplied notice does not set out the full deletion procedure or exceptions in the linked main Privacy Policy.
Supporting quotations
In addition to GDPR rights offered in our main Privacy Policy, you may have more specific rights – depending on which state you live in (such as California, Colorado, Oregon, or Delaware). You can exercise your rights using our interactive chatbot, available on our Website or by emailing us at support@flo.health. We will not discriminate against you for exercising your privacy rights.
Right to Delete. You can ask us to delete your personal data.
Legal Rights & Agreement Rules · User right or choice
Ask Flo to correct inaccurate data
Among the rights that may depend on your state, the notice says you can ask Flo to correct inaccurate personal data it has about you.
Supporting quotations
In addition to GDPR rights offered in our main Privacy Policy, you may have more specific rights – depending on which state you live in (such as California, Colorado, Oregon, or Delaware). You can exercise your rights using our interactive chatbot, available on our Website or by emailing us at support@flo.health. We will not discriminate against you for exercising your privacy rights.
Right to Correct. You can ask us to correct inaccurate personal data that we have about you.
Legal Rights & Agreement Rules · Procedure
An agent can request access, deletion or correction
You can appoint an authorized agent to submit a Right to Know, Delete or Correct request by emailing support@flo.health. Flo will ask the agent to verify their authority and may contact you directly to verify your identity or obtain your permission for the request.
Supporting quotations
Authorized Agents: You can appoint an authorized agent to submit a Right to Know, Delete, or Correct request on your behalf by emailing support@flo.health. If you do this, we will ask the agent to verify that they are authorized to act on your behalf. We may reach out to you directly to verify your identity or to permit the request from the agent.
Cross-references
qualifies (model-proposed): How to exercise your privacy rights — qualifies: Agent requests for access, deletion or correction require verification of authority and may require direct verification or permission from the user.
Legal Rights & Agreement Rules · User right or choice
A denied rights request may be appealed
If Flo denies your rights request, you may have a right to appeal by emailing support@flo.health. Flo says it will respond in writing; the notice does not specify an appeal deadline or response period.
Supporting quotations
Appeal: If we deny your rights request, you may have the right to appeal by contacting us at support@flo.health. We will respond in writing.
Legal Rights & Agreement Rules · User right or choice
California minors can seek removal of their posts
California residents under 18 who posted content or information on Flo’s website or app can delete their posts and comments on others’ posts or email support@flo.health to request removal. Identify where the material appears and confirm you posted it. Flo promises reasonable efforts to remove it from public view or anonymize it as legally required, but cannot promise complete removal, including copies republished or archived by third parties outside its control.
Supporting quotations
California Eraser Law: If you are a California resident under the age of 18 who has posted content or information on our Website or App, you can delete your posts and comments on other posts, or request removal of the information by contacting us at support@flo.health. Let us know where the content or information is posted, and confirm that you posted it. We will make reasonable efforts to remove the post from public view or anonymize it so you cannot be identified, as required by law. We can’t promise complete or comprehensive removal. For example, third parties may have republished or archived content that we do not control.
Legal Rights & Agreement Rules · Procedure
Contact Flo or its Data Protection Officer
For privacy questions or concerns, write to Flo Health, Inc., 108 W. 13th Street, Suite 100 Wilmington, DE 19801. You can also email support@flo.health or contact the Data Protection Officer at dpo@flo.health.
Supporting quotations
If you have any questions or concerns about your privacy, you may contact us or our Data Protection Officer by writing to us at:
Flo Health, Inc.,
108 W. 13th Street,
Suite 100 Wilmington, DE 19801
Or by emailing us at support@flo.health or by contacting our Data Protection Officer at dpo@flo.health.