This notice supplements Flo’s main Privacy Policy for Washington and Nevada residents. It covers health data collected through websites, social media accounts, apps, email and other online communications. Personal information used in connection with Telehealth Services is excluded from these processing descriptions; the relevant telehealth partner’s privacy notice governs that context.
Supporting quotations
This Consumer Health Data Privacy Notice applies to residents of Washington and Nevada and supplements Flo’s Privacy Policy to describe how we process consumer health data collected through our websites, social media accounts, mobile applications, and other online interactions and communications such as email (collectively, our “Services”).
The data processing activities described elsewhere in this Consumer Health Data Privacy Notice and our main Privacy Policy do not apply to the use of your personal information in connection with Telehealth Services. For information about how your personal information is collected, used, and disclosed in that context, please refer to the privacy notice or notice of privacy practices of your relevant telehealth partner.
Qualifications & exceptions
This notice applies to Washington and Nevada residents.
Not stated here
The main Privacy Policy and telehealth partners’ notices are not supplied in this document.
Legal Rights & Agreement Rules · Procedure
Effective date, archives and changes
This version states an effective date of April 9, 2026 and links to older versions. Flo may update the notice, with updates effective when posted. It asks you to check periodically and says it will contact you directly about updates when the law requires.
Supporting quotations
Effective as of 9 April 2026
If you want to see older versions of this policy, click here.
Changes: We may update this Consumer Health Data Privacy Notice from time to time. Any updated Consumer Health Data Privacy Notice will be effective when posted. Please check this Consumer Health Privacy Notice periodically for updates. If required by law, we will contact you directly to provide you with updates.
Qualifications & exceptions
This notice applies to Washington and Nevada residents.
Not stated here
Linked archived versions are not supplied; this card does not describe their terms or compare changes.
Legal Rights & Agreement Rules · Company practice
Health data may support compliance and legal claims
To provide its Services, Flo may use health data to meet legal, reporting and similar requirements and to investigate, assert or defend legal rights or claims.
Supporting quotations
To provide you with our Services, we may also use your Health Data for the following purposes:
Legal, safety and security reasons, such as activities to:
comply with legal, reporting and similar requirements;
investigate, assert and defend legal rights or legal claims;
Qualifications & exceptions
This notice applies to Washington and Nevada residents.
Legal Rights & Agreement Rules · Company commitment
Flo promises GDPR-equivalent privacy rights regardless of residence
Although this notice is addressed to Washington and Nevada residents, Flo states a broader commitment to provide the same privacy rights afforded under the GDPR regardless of country, state or region of residence. It points to its main Privacy Policy for those rights and adds specific health-data rights in this notice. This is Flo’s stated commitment, not a finding that the GDPR legally applies to every user.
Supporting quotations
Regardless of your country, state, or region of residence, we’re committed to providing you the same privacy rights afforded under the GDPR, which is generally regarded as the highest standard for data protection globally.
In addition to the GDPR rights outlined in our main Privacy Policy, you have specific rights related to your Health Data, including the right to:
This Consumer Health Data Privacy Notice applies to residents of Washington and Nevada and supplements Flo’s Privacy Policy to describe how we process consumer health data collected through our websites, social media accounts, mobile applications, and other online interactions and communications such as email (collectively, our “Services”).
Qualifications & exceptions
The notice has Washington/Nevada scope, but this particular promise expressly applies regardless of residence.
Not stated here
The main Privacy Policy and GDPR text are not supplied; their detailed rights and conditions are not enumerated here.
Legal Rights & Agreement Rules · Company commitment
Exercising rights should not cause discriminatory prices or service
Flo promises freedom from discriminatory treatment for exercising privacy rights. It expressly identifies Washington residents’ right and says that, wherever you are, exercising rights will not cause discriminatory pricing or reduced service quality. Prices can nevertheless change over time or depend on signup timing, so leaving and later returning can mean a different price. Separately, withdrawing consent to health-data processing prevents Flo from providing the Services and requires account deletion; the nondiscrimination promise does not remove that consequence.
Supporting quotations
be free from discriminatory treatment for exercising any of your privacy rights;
If you are a resident of Washington, you have the right not to be subjected to discriminatory treatment for exercising any of your privacy rights. No matter where you are, exercising these rights will not result in discriminatory treatment, such as different prices or a reduction in the quality of our Service;
please note: while your privacy rights will not impact the Service you receive, our pricing may vary over time or based on when you originally signed up. If you choose to stop using our Service in connection with exercising your rights and decide to return later, the price at that time may differ from your original rate; and
withdraw your consent for our collection and sharing of your Health Data. If you withdraw your consent to process Health Data, we will be unable to provide our Services;
Please note that because our Services rely on your consent, withdrawing it will require you to delete your account.
Qualifications & exceptions
This nondiscrimination promise expressly says it applies no matter where you are; Washington residents are also specifically identified.
Cross-references
contrast (model-proposed): Withdrawing health-data consent ends access to the Services — contrast: The promise against discriminatory treatment coexists with loss of Services and required account deletion on withdrawing service consent. The cards preserve both statements without treating every withdrawal consequence as discrimination.
Legal Rights & Agreement Rules · Procedure
Denied rights requests can be appealed to the DPO
To exercise available privacy rights, email support@flo.health. If Flo denies a rights-related request, you can appeal that decision by contacting dpo@flo.health.
Supporting quotations
if we deny your rights-related request, you have the right to appeal the decision by contacting us at dpo@flo.health.
You may exercise the rights available to you by emailing us at support@flo.health.
Qualifications & exceptions
This notice applies to Washington and Nevada residents.
Legal Rights & Agreement Rules · Procedure
Privacy questions can go to Flo or its data protection officer
For privacy questions or concerns, contact Flo or its data protection officer at support@flo.health or dpo@flo.health, or write to Flo Health, Inc., 108 W. 13th Street, Suite 100, Wilmington, DE 19801.
Supporting quotations
If you have any questions or concerns about your privacy, you may contact us or our data protection officer by writing to us at:
Flo Health, Inc.,
108 W. 13th Street,
Suite 100 Wilmington, DE 19801
Or by emailing us at support@flo.health or dpo@flo.health.
Qualifications & exceptions
This notice applies to Washington and Nevada residents.