Consumer Health Data Privacy Notice

Flo · Official agreement

74 of 84 blocks carry cards. 34 cards.

Consumer Health Data Privacy Notice

Table of contents

Effective as of 9 April 2026

If you want to see older versions of this policy, click here.

This Consumer Health Data Privacy Notice applies to residents of Washington and Nevada and supplements Flo’s Privacy Policy to describe how we process consumer health data collected through our websites, social media accounts, mobile applications, and other online interactions and communications such as email (collectively, our “Services”).

Changes: We may update this Consumer Health Data Privacy Notice from time to time. Any updated Consumer Health Data Privacy Notice will be effective when posted. Please check this Consumer Health Privacy Notice periodically for updates. If required by law, we will contact you directly to provide you with updates.

1. What is consumer health data?

Consumer health data means personal information that is linked or could be linked to you and shows or suggests your past, present, or future physical or mental health (“Health Data”).

2. Sources of Health Data

As described in more detail in our main Privacy Policy, we collect Health Data from the following sources:

3. Types of Health Data we collect

As described in our main Privacy Policy, we collect Health Data outlined below. Additionally, we may be able to infer health information from non-Health Data you provide during your use of our Services.

You remain in control of your data. We may collect Health Data that you input into the App, which includes:

  • Information collected as part of the Services you have selected, including: mode you have selected, menstrual cycle dates, pregnancy dates, symptoms related to your menstrual cycle, perimenopause and menopause symptoms, information relating to your sex life, sexual history, pregnancy and ovulation test results;
  • Your physical and mental well-being: mood, appetite, cycle-related pain, discharge, menstrual flow, water intake, disease or injury, sleep, energy levels, skin concerns, medication (including hormonal birth control and painkillers), and lifestyle/activity data;
  • Information collected from third-party services (including wearables), including: your heart rate, weight, height, calories burned, BMI, body temperature, step count, sleep data, and other activity data you choose to share with us; and
  • Information entered into our Symptom Checker*, including: common symptoms associated with reproductive health conditions, menstrual history, previously diagnosed reproductive health conditions, family medical history, and lifestyle data.

*Symptom Checker is not a substitute for professional medical advice, diagnosis, or treatment of any kind.

4. How we use Health Data

As described in our main Privacy Policy, we will process your Health Data to provide you with the Services including to support existing functions of the App and provide you with tailored content, insights and materials you see when you use the App. This includes using your Health Data to:

To provide you with our Services, we may also use your Health Data for the following purposes:

Legal, safety and security reasons, such as activities to:

Internal business purposes, such as:

Aggregated, Anonymized or De-Identified Health Data

We may aggregate, anonymize, or de-identify your Health Data so it can no longer reasonably be used to identify you, and use this de-identified information to analyze trends, improve our Services, and develop testimonials or other promotional materials.

With your explicit consent, we may use or disclose your identifiable Health Data for targeted research or to feature in Flo’s promotional materials. We will contact you to request this consent. You may withdraw your consent at any time by emailing dpo@flo.health.

5. How we disclose Health Data

We do not sell your personal information, including your Health Data.

We engage service providers to process your data, including Health Data, to help operate our Services, facilitate communication with you, provide the products and Services you request, and perform other app-related tasks. These companies, referred to as “processors,” are only allowed to use your Health Data in accordance with our contracts and in compliance with applicable law. For the list of the main processors we rely on, please refer to our main Privacy Policy.

We may also share your Health Data with entities within Flo’s corporate group. These include:

We may also disclose your Health Data when you have provided your consent - for example, third party providers like Apple HealthKit and Google Health Connect.

We may also disclose your Health Data under the following limited circumstances:

Telehealth partners

If you use services from one of our telehealth partners (“Telehealth Services”), we may ask for certain health-related information so we can share it with them and help deliver those services. In this context, Flo acts as a service provider to the telehealth partner. We may share your name, email address, ZIP code, Flo mode, and insurance provider with the telehealth partner delivering your service. In some cases, this information may be treated as Protected Health Information under the Health Insurance Portability and Accountability Act of 1996 (“HIPAA”).

We process this information on behalf of our telehealth partner in accordance with applicable law and our contractual obligations, including, where required, entering into a HIPAA business associate agreement.

The data processing activities described elsewhere in this Consumer Health Data Privacy Notice and our main Privacy Policy do not apply to the use of your personal information in connection with Telehealth Services. For information about how your personal information is collected, used, and disclosed in that context, please refer to the privacy notice or notice of privacy practices of your relevant telehealth partner.

6. How we collect your consent

When we rely on your consent to process your Health Data, you will be asked to provide it when signing up for our Services. You can withdraw your consent at any time by contacting us at support@flo.health or by deleting your account through the App.

Please note that because our Services rely on your consent, withdrawing it will require you to delete your account.

7. Your rights

Regardless of your country, state, or region of residence, we’re committed to providing you the same privacy rights afforded under the GDPR, which is generally regarded as the highest standard for data protection globally.

In addition to the GDPR rights outlined in our main Privacy Policy, you have specific rights related to your Health Data, including the right to:

You may exercise the rights available to you by emailing us at support@flo.health.

8. Contact Information

If you have any questions or concerns about your privacy, you may contact us or our data protection officer by writing to us at:

Flo Health, Inc.,

108 W. 13th Street,

Suite 100 Wilmington, DE 19801

Or by emailing us at support@flo.health or dpo@flo.health.