Privacy FAQ: Your Questions Answered

No. 

Flo has never, and will never, sell user data. Doing so would contradict our mission to create a better future for female health. We solely fund Flo's development through a subscription fee for premium features, while still allowing our users to continue using the app free of charge if they wish. This commitment is explicitly stated in our Privacy Policy, verified through our ISO 27701 privacy certification.

We make money through Flo Premium subscriptions, not by selling your data.

Learn more about how we use data 

Yes. 

We know many women are worried about how their personal health data could be used in today’s political climate. Let’s be clear: there is no legitimate medical or public health reason for a state government to demand someone’s menstrual cycle data. The only context we are aware of where this could be requested is in connection to prosecuting or intimidating women over their reproductive choices.

Flo has never shared menstrual or reproductive health data with any government, and we are committed to ensuring it stays that way. If a government authority ever demanded access, we would:

• Challenge the request if it was overly broad, unlawful, or aimed at policing women’s health decisions.
• Exhaust every legal avenue to avoid or limit disclosure to the absolute minimum required by law.
• Protect users through design — features like Anonymous Mode mean your cycle logs aren’t tied to your name, email, or phone number, making them impossible to connect to you personally.

Your reproductive health information belongs to you. Flo will never be complicit in efforts to use it against women.

Learn more about Anonymous Mode
Read about Your privacy in post-Roe America: How Flo keeps your data safe our privacy journey 

Learn more about how Flo responds to data requests 

Yes. But don’t just take our word for it. Flo has earned trust through action, not just promises:

✅ Dual ISO certifications - Only period tracker with both ISO 27001 (Security) and ISO 27701 (Privacy)
✅ Anonymous Mode - Industry-leading privacy technology
✅ Transparency- Transparent about our practices, and honest about our privacy journey, including lessons learned

✅ Privacy - first design - Privacy considerations are built into every feature from the start. 
✅ Expert leadership - Award-winning privacy and security team, and an independent expert advisory Board

440+ million users around the world trust Flo with their health data. We understand the trust our users place in our technology to keep their information private. We work every day to maintain that trust.

See our certifications 
Meet our privacy team 

In 2022, Flo reached a settlement with the FTC regarding data sharing practices between 2016 and 2019. The FTC questioned whether our Privacy Policy adequately disclosed how data was shared with third parties (including the Facebook Analytics SDK and other analytics providers). It did not allege that Flo sold user data or experienced a data breach.

What we were actually doing: We used third-party SDKs to internally measure app performance – the same tools most apps use to fix crashes and improve reliability. The data involved was  technical and limited.. None of this data contained our members’ names, addresses, or birth dates. Nor did we share health information for marketing or advertising purposes. 

The settlement was not an admission of wrongdoing. The FTC did not launch a complaint against Flo, nor did it make any findings regarding Flo’s sharing of information. As a growing company at the time, Flo settled to avoid the time and cost associated with litigation. As part of the settlement, it was mutually agreed that Flo would engage Guidepost Solutions for an independent audit of our privacy practices. The audit verified our data protection measures and confirmed our commitment to transparency. We didn't commission that audit to check a box. We did it because we wanted independent verification of what we already believed to be true.

Read the complete privacy journey 

In 2019,  a general article was published which raised concerns about apps using SDKs (software development kits), such as the Facebook Analytics SDK. Flo was mentioned. Like many companies in the industry, Flo previously used Facebook's Analytics SDK to understand our app’s performance and fix crashes. It was not used for advertising or commercial purposes, and we have never – and will never – sell user data. 

While this was transparent in our Privacy Policy, some users had concerns. We want to be clear that the SDK was not used to collect health information and was not used for advertising purposes. Nevertheless, we immediately:

1. Removed the Facebook Analytics SDK
2. Conducted an internal privacy audit
3. Enhanced our privacy disclosures

Read more about 2019 and what we learned 

Flo collects three types of data:

1. Health & well-being data you choose to share - such as period dates, symptoms, moods, cycle information, pregnancy tracking, exercise, and sleep
2. Account information - such as email, name (optional), birth year, and language preferences
3. Technical data - such as device type, app version, usage information, IP address (unless you use Anonymous Mode)

If you use Anonymous Mode, Flo can’t link your health data to your identity.

See complete data collection details

You can use the app without providing an email address, whether or not Anonymous Mode is enabled.

However, if you choose to provide it, your email address allows you to:

• Log in to your account
• Recover your account if you forget your password
• Support you with customer support requests, such as exercising your privacy rights
• Receive important service updates

If you don't want to provide an email that’s completely fine. Just note that some activities may be limited without one.

Flo shares data with third parties only in limited circumstances, and we do not share your personal data except as specified in our Privacy Policy:

1) Service providers: We work with companies that help us operate the app (cloud hosting, analytics, customer support). These providers are carefully selected to ensure they comply with our privacy and security standards. 

• Flo remains responsible for any acts or omissions of our service providers (processors)
• We execute formal data processing agreements with them and are contractually required to protect your data.
• They may not use your data for any purpose other than what we have contracted them for
• They’re not permitted to sell or share your data

2) AppsFlyer / Firebase (never your health data): With your explicit consent only, we may share some of your non-health personal data with AppsFlyer or Firebase for advertising purposes. If you provide your consent and later decide to opt out, you can do so at any time through your app settings or by contacting support@flohealth.com.

3) Cookies when you interact with our website: Depending on your consent preferences, we may share your non-health information to promote our services. You can disable cookies at any time in your browser settings or by visiting our cookie preference center on our website.

4) Legal requirements: While extremely rare, we may be required to share your data in response to valid legal processes (subpoenas, court orders, search warrants), as required by applicable law. Even in instances like these, Flo will always advocate for the protection of individuals’ privacy rights and challenge the legal validity of any disclosure request. We will contact you via your registered email address, where legally possible, to tell you about the demand.

We never:

• Sell data to data brokers or advertisers
• Share health data for marketing or advertising purposes
• Share data with employers
• Share menstrual or reproductive health data with any government

See our Privacy Policy for complete details 

We use your data to:

1. Provide predictions like cycle forecasts, ovulation estimates, and symptom predictions
2. Personalize insights, including health tips tailored to your cycle phase
3. Improve your experience by addressing software bugs, developing new features, and improving performance
4. Communicate with you about service updates and educational resources

Importantly, we do not share your health data for marketing or advertising purposes. 

Learn more about how we use data 

Flo protects your data through multiple layers of security:

Encryption:

• AES-256 encryption for data storage
• TLS 1.3 encryption for data transmission

Access controls:

• Strict limits on who can access user data
• All access is logged and monitored

Security monitoring:

• 24/7 threat detection
• Regular penetration testing
• Vulnerability assessments

Independent verification:

• ISO 27001 (Security) certification
• ISO 27701 (Privacy) certification

Learn more about our security practices 
See our certifications 

Yes. Flo is GDPR compliant, verified through our ISO 27701 certification. Flo is a registered data controller in the United Kingdom and is subject to the UK GDPR. 

ISO 27701 specifically maps to GDPR articles and requirements, including:

• Lawful processing of personal data
• User consent management
• Data subject rights (access, deletion, portability)
• Privacy by design
• Data protection impact assessments
• Cross-border data transfers

Learn about ISO 27701

We will never proactively share data with law enforcement.

We know many women are worried about how their personal health data could be used in today’s political climate. Let’s be clear: there is no legitimate medical or public health reason for a state government or law enforcement to demand someone’s menstrual cycle data. The only context we are aware of where this could be requested is in connection to prosecuting or intimidating women over their reproductive choices.

We have never received a request from law enforcement or state authorities to investigate our users. If that ever changed, protecting you would be our priority.

• We would carefully review and challenge the request if it were overly broad, unlawful, or tried to police women’s health decisions.
• We would use every legal option available to avoid sharing data or to limit what could be disclosed.
• Your privacy is built into the app. Features like our award-winning Anonymous Mode mean your cycle data isn’t linked to your identity. In practical terms, that means we can’t identify you from that information—even if someone asked us to.

Your reproductive health information belongs to you. Flo will never be complicit in efforts to use it against women.

Learn more about how Flo responds to data requests

We have not received any requests from law enforcement to investigate our users. 

In rare circumstances, we may receive requests to assist a Flo user. In such cases, we disclose information only with the user’s direction and explicit consent. 

Learn more about how Flo responds to data requests

Flo has never shared menstrual, fertility, or pregnancy-related data with any government entity.

Your reproductive health information belongs to you. Flo will never be complicit in efforts to use it against women.

Flo has never disclosed reproductive health data to any government. If a state ever tried, we would review the request carefully and challenge the request if it was overly broad or unlawful and exhaust every legal avenue to avoid disclosure.

Anonymous Mode is Flo's most powerful privacy feature. When enabled, you can track your health without your name, email, or IP address, or any other identifier being linked to your health data.

Anonymous Mode uses:

• Oblivious HTTP (OHTTP) - Hides your IP address from Flo
• Post-quantum cryptography - Future-proof encryption
• Architectural separation - Your identity and health data never exist together

No one, not even Flo, can identify you in Anonymous Mode.

Learn how Anonymous Mode works

To enable Anonymous Mode:

1. Open the Flo app
2. Tap your avatar in the top left corner of your screen
3. Tap “View profile”
4. Select "Anonymous Mode" and read the information about how it works
5. Tap "Use Anonymous Mode"

Important: Once you enable Anonymous Mode, you will no longer be able to recover data if your device is lost, changed, or stolen, and there may be limitations to using the app’s full features. This is why Flo is offering Anonymous Mode as an option rather than the default. 

Read more about enabling Anonymous Mode

Most Flo features work in Anonymous Mode. Features that don't work:

❌ Secret Chats - requires account identity for community features
❌ Flo for Partners - requires linked accounts
❌ Cross-device sync - no account to sync across devices
❌ Email notifications - no email on file

❌ Flo for Family Subscriptions - requires linked accounts

❌ Web subscriptions (where you have signed up to Flo via our website) - requires manual cancellation to remove identifiable payment information

❌ Wearable devices - requires device information to pair devices

✅ All tracking, predictions, and health insights continue to work normally.

Note: The Flo support team will always be here to help. However, when using Anonymous Mode, they will only be able to support with generic advice and will not be able to assist with requests that require your identity (such as exporting a copy of your data). 

Learn how Anonymous Mode works 

Yes. 

Flo cannot identify users because:

• The OHTTP protocol hides IP addresses
• No email or name is collected
• Device identifiers are separated from health data
• Even with a court order, Flo cannot identify Anonymous Mode users

This architectural separation is permanent and verifiable. We open-sourced the technology on GitHub.

See the technical details 

No. Anonymous Mode is available to all Flo users at no cost. Privacy is a fundamental right, not a premium feature.

You can request your data at any time. To access a copy of your data:

1. Open Flo and go to Settings
2. Tap "Privacy Settings"
3. Select "Request Information"
4. You'll receive two separate emails: one with your data and another with the password to access it. In almost all cases, these will be sent within one month of your request. If the timeline changes, we’ll keep you informed via email.

You can request your data at any time. 

Learn more about your rights

To delete your account and all data:

1. Open Flo and go to Settings
2. Tap "Privacy Settings"
3. Select "Delete my Account"
4. Confirm your decision

When you submit the request, your personal identifiers are immediately unlinked from your app information, so we can no longer identify you. Complete deletion across all our systems may then take up to 90 days. This action cannot be undone.

Learn more about deletion

Yes, you can use Flo without creating an account—this is called an “unregistered account,” meaning you use the app without signing up with an email and password, so your data is stored only on your device. However, this option has limitations—for example, you won’t be able to restore your data if you reinstall the app or switch devices.

You can also enable Anonymous Mode, which lets you use Flo without linking identifiable information to your health data. This mode also has some feature limitations to help protect your identity.

Consider what matters most to you, including any limitations, and choose the option that best fits how you prefer to use Flo.

To opt out of marketing emails:

1. Open any marketing email from Flo
2. Click "Unsubscribe" at the bottom
3. Confirm your choice

Or update your preferences in the app:

1. Go to Settings
2. Tap "Privacy settings"
3. Tap “Manage your consents”
4. Toggle off "Send marketing communications"

Note: You'll still receive essential service emails (e.g., account security and important updates).

Flo for Partners allows you to share certain cycle information with a partner. Your partner will have access to a view-only version of your calendar and will receive tailored daily insights during key phases of your cycle. You can take our couples quizzes and choose whether to share your answers with each other. You’re always free to skip any questions you’d rather not answer.

All data that is shared is encrypted, and you can stop sharing at any time by tapping the “Stop sharing” option. 

Privacy protections:

• You can stop sharing at any time
• Partners can only see a view-only version of your current stage–they cannot see previous stages or symptoms you have logged
• Data shared with partners is encrypted

Note: Flo for Partners requires account linking and is not available in Anonymous Mode.

Sharing your personal data and sensitive information should always be carefully considered. Share data only with a trusted partner who’ll treat it responsibly and keep it private. If you ever experience abuse or feel unsafe, please don't hesitate to visit our Crisis Support page to find out how to reach out for help.

For further information, please visit our Support Page

No. 

If you‘re trying to conceive or tracking your menstrual cycles: Your partner will have access to a view-only version of your cycle calendar. They will also receive tailored daily insights during significant phases of your cycle. They won’t see any symptoms that you have logged in Flo.

If you‘re pregnant: Your partner will receive regular updates about your pregnancy, including tailored daily insights. They‘ll also be made aware of any changes happening to your body, symptoms that are commonly experienced, and important milestones in your baby‘s development. They won’t see any symptoms that you have personally logged in Flo.

Important note: If you switch modes (such as from “Track” to “Pregnancy”), your partner will be updated of these changes. 

Your partner can only see information you explicitly choose to share. They can’t see:

• Your private notes
• Your past or future calendar information 
• Symptoms or events you have logged in the app
• The Secret Chats community — this will remain a private space for your personal engagement with other Flo users
• Individual symptoms
• Your entire history
• Data from before you started sharing

You remain in control: As the main user, you decide which data is shared with your partner. If you wish to stop sharing, go to the Partner tab and tap “Stop sharing.” You’ll then need to generate a unique code if you wish to share it with a partner. The code expires after 48 hours, so if you want to share it later, you’ll need to generate a new one.

Sharing your personal data and sensitive information should always be carefully considered. Only share data with a trusted partner who’ll treat your data responsibly and keep it private. If you ever experience abuse or feel unsafe, please don't hesitate to visit our Crisis Support page to find out how to reach out for help.

For further information, please visit our Support Page

No. Even if your employer provides Flo as a benefit, they cannot see your health data. They only know that you activated the benefit, not what you track or how you use the app.

Flo retains your data for as long as your account is active. 

If you:

• Delete your account: We will process your request within one-month. When you submit the request, your personal identifiers are immediately unlinked from your app information, so we can no longer identify you. Complete deletion across all our systems may then take up to 90 days. This action cannot be undone.
• Inactivity: If you delete the App from your device or your account becomes inactive, we will retain your personal data for three years in case you decide to reactivate the Services or reinstall the App. After three years of inactivity, your personal data will be deleted. 

Exceptions:
Even if you would like to delete your account, there may be rare circumstances where we are required or permitted to retain it under applicable law. Some data may be retained longer to:

• Comply with a legal obligation, such as financial accounting
• Manage legal claims or defences 
• Archive for public interest, scientific or historical research, or statistical purposes
• Support legitimate business purposes like fraud prevention
• Conduct research with aggregated and anonymized data so that it can’t be traced back to you

See retention details in Privacy Policy

Yes, Flo's website uses cookies:

• Necessary - To ensure our website functions properly and provides you with the features you have requested, such as logging in to your account. Because these cookies are essential for the website to function, they can’t be disabled.
• Statistics - To understand how people use our website.
• Marketing - To help us spread the word about Flo, as well as determine whether we do that effectively.

You can disable non-necessary cookies at any time in your browser settings or by visiting our cookie preference center on our website. 

For more information, see our Cookie Policy

You can contact our Data Protection Officer (DPO) at: dpo@flo.health 

Or by writing to us at: 

Flo Health UK Limited: 

Fourth Floor South, International House, 

1 St Katharine’s Way, London,

E1W 1UN, 

United Kingdom

Email: dpo@flo.health

Learn more about our privacy team 

Privacy Portal sections:

• Your Data & Privacy - What we collect and how we protect it
• Anonymous Mode - Our most powerful privacy feature
• Certifications & Audits - Independent verification
• Meet Our Privacy Team - The experts protecting your data
• Our Privacy Journey - How we got here
• Privacy Blog - Insights from our team

Legal documents:

• Privacy Policy - Complete legal details
• Cookie Policy - How we use cookies
• Terms of Use - Rules for using Flo