Identifiable research and promotion require explicit consent
Flo may use or disclose identifiable health data for targeted research or to feature in promotional materials with your explicit consent. It will contact you to request that consent. You may withdraw that consent at any time by emailing dpo@flo.health.
Supporting quotations
With your explicit consent, we may use or disclose your identifiable Health Data for targeted research or to feature in Flo’s promotional materials. We will contact you to request this consent. You may withdraw your consent at any time by emailing dpo@flo.health.
Qualifications & exceptions
This notice applies to Washington and Nevada residents.
Sharing & Disclosure · Company commitment
Flo says it does not sell personal or health information
For residents covered by this notice, Flo says it does not sell personal information, including health data. Health data includes information linked or linkable to you that shows or suggests past, present or future physical or mental health. This is a no-sale commitment; the notice separately permits processing by service providers and other disclosures.
Supporting quotations
We do not sell your personal information, including your Health Data.
Consumer health data means personal information that is linked or could be linked to you and shows or suggests your past, present, or future physical or mental health (“Health Data”).
This Consumer Health Data Privacy Notice applies to residents of Washington and Nevada and supplements Flo’s Privacy Policy to describe how we process consumer health data collected through our websites, social media accounts, mobile applications, and other online interactions and communications such as email (collectively, our “Services”).
We engage service providers to process your data, including Health Data, to help operate our Services, facilitate communication with you, provide the products and Services you request, and perform other app-related tasks. These companies, referred to as “processors,” are only allowed to use your Health Data in accordance with our contracts and in compliance with applicable law. For the list of the main processors we rely on, please refer to our main Privacy Policy.
We may also share your Health Data with entities within Flo’s corporate group. These include:
Qualifications & exceptions
This notice applies to Washington and Nevada residents.
Not stated here
The linked main Privacy Policy is not supplied; this card does not assess its additional terms.
Cross-references
contrast (model-proposed): Health data may be shared within Flo’s corporate group — contrast: Flo promises not to sell personal information while allowing health-data sharing within its corporate group. Non-sale does not mean no disclosure.
Sharing & Disclosure · Company practice
Service providers process health data under contracts and law
Flo engages processors to operate Services, communicate with you, provide requested products and Services, and perform other app-related tasks. These processors may use health data only in accordance with Flo’s contracts and applicable law. The main Privacy Policy contains the list of main processors.
Supporting quotations
We engage service providers to process your data, including Health Data, to help operate our Services, facilitate communication with you, provide the products and Services you request, and perform other app-related tasks. These companies, referred to as “processors,” are only allowed to use your Health Data in accordance with our contracts and in compliance with applicable law. For the list of the main processors we rely on, please refer to our main Privacy Policy.
Qualifications & exceptions
This notice applies to Washington and Nevada residents.
Not stated here
The linked main Privacy Policy is not supplied; the processor names and further terms cannot be identified from this notice.
Sharing & Disclosure · Company practice
Health data may be shared within Flo’s corporate group
Flo may share health data with group entities. The listed entities are Flo Health UK Limited in the United Kingdom, its registered data controller; Flo Health Cyprus Ltd in Cyprus; Flo Health LTU UAB in Lithuania; and Flo Health NL. B.V. in the Netherlands.
Supporting quotations
We may also share your Health Data with entities within Flo’s corporate group. These include:
Flo Health UK Limited (based in the United Kingdom, and our registered data controller);
Flo Health Cyprus Ltd (based in Cyprus);
Flo Health LTU UAB (based in Lithuania); and
Flo Health NL. B.V. (based in the Netherlands).
Qualifications & exceptions
This notice applies to Washington and Nevada residents.
Sharing & Disclosure · User right or choice
Your permission can enable third-party data exchanges
Flo may disclose health data when you consent, including to providers such as Apple HealthKit and Google Health Connect. The notice also permits disclosure at your direction or with your consent. Separately, allowing a connection to those services enables Flo to import health and activity data into the app.
Supporting quotations
We may also disclose your Health Data when you have provided your consent - for example, third party providers like Apple HealthKit and Google Health Connect.
When you, as the user, direct or consent to the disclosure of your personal data; and
from third parties: You may also allow us to connect to third-party services, such as Apple HealthKit and Google Health Connect. This enables us to import Health Data and information about your activities into the App without the need for you to log it yourself.
Qualifications & exceptions
This notice applies to Washington and Nevada residents.
Sharing & Disclosure · Company practice
Required legal disclosures come with challenge and minimization commitments
Flo may disclose health data in response to subpoenas, court orders or legal processes as required by law, including national-security or law-enforcement requirements. It commits to exhausting available legal remedies to challenge such a request and seeking to limit disclosure to the minimum necessary for the purpose.
Supporting quotations
We may also disclose your Health Data under the following limited circumstances:
In response to subpoenas, court orders, or legal processes, as required by law (including to meet national security or law enforcement requirements) - we will exhaust available legal remedies to challenge such a request and will seek to limit the disclosure to the minimum necessary for the purpose. Learn more about Flo’s award-winning Anonymous Mode here;
Qualifications & exceptions
This notice applies to Washington and Nevada residents.
Not stated here
The linked Anonymous Mode page is not supplied; this card does not claim any specific protection from that feature.
Sharing & Disclosure · Company practice
Health data may be disclosed for legal rights or claims
Flo may disclose health data to assert its legal rights or defend against legal claims. This is a separate listed disclosure circumstance from responding to a legally required request.
Supporting quotations
We may also disclose your Health Data under the following limited circumstances:
To assert our legal rights or defend against legal claims;
Qualifications & exceptions
This notice applies to Washington and Nevada residents.
Sharing & Disclosure · Company practice
Business changes may involve health-data disclosure
Flo may disclose health data during an acquisition, business transfer or reorganization involving any part of its business.
Supporting quotations
We may also disclose your Health Data under the following limited circumstances:
During an acquisition, business transfer, or reorganization involving any part of our business.
Qualifications & exceptions
This notice applies to Washington and Nevada residents.
Sharing & Disclosure · Company practice
Telehealth data follows the partner’s separate privacy framework
If you use a telehealth partner’s services, Flo may ask for health-related information to share with that partner and help deliver the services, acting as the partner’s service provider. Flo may share your name, email, ZIP code, Flo mode and insurance provider. In some cases the information may be HIPAA Protected Health Information. Flo processes it under applicable law and its contracts, including a HIPAA business associate agreement where required. The processing descriptions elsewhere in this notice and Flo’s main Privacy Policy do not apply to this telehealth use; consult the relevant partner’s privacy notice or notice of privacy practices.
Supporting quotations
Telehealth partners
If you use services from one of our telehealth partners (“Telehealth Services”), we may ask for certain health-related information so we can share it with them and help deliver those services. In this context, Flo acts as a service provider to the telehealth partner. We may share your name, email address, ZIP code, Flo mode, and insurance provider with the telehealth partner delivering your service. In some cases, this information may be treated as Protected Health Information under the Health Insurance Portability and Accountability Act of 1996 (“HIPAA”).
We process this information on behalf of our telehealth partner in accordance with applicable law and our contractual obligations, including, where required, entering into a HIPAA business associate agreement.
The data processing activities described elsewhere in this Consumer Health Data Privacy Notice and our main Privacy Policy do not apply to the use of your personal information in connection with Telehealth Services. For information about how your personal information is collected, used, and disclosed in that context, please refer to the privacy notice or notice of privacy practices of your relevant telehealth partner.
Qualifications & exceptions
This notice applies to Washington and Nevada residents.
Not stated here
The partner privacy notices and HIPAA text are not supplied; this notice does not establish that every Flo interaction is covered by HIPAA.
Cross-references
narrows (model-proposed): Who this notice covers — narrows: The telehealth partner framework expressly excludes telehealth use from the processing descriptions elsewhere in this notice and the main Privacy Policy.