VerbatermBetaVerbaterm is in beta. You may encounter bugs, incomplete features, or unexpected results while we improve reliability.

Privacy policy

Flo

Review these first

Score104.0
Reviewed
Policy typePrivacy policy
Concern findings2
Protections7
Source supportStrong

Source provenance

Verified official source
Retrieved
Published

Snapshot hash 7acfad5083144beec3973628587a8dfdf2673766206835b5505f27d006704b11

Snapshot of the source text at fetch time, not a live mirror of the policy page.

Plain-English summary

The service states it does not sell or rent personal data for money. However, with user consent, specific personal data (excluding health data) may be shared with third-party marketing and analytics platforms to improve advertising campaigns. The service also reserves the right to receive personal data from other third parties to enhance user experience and gather analytics.

87% confidence

Ask Verbaterm

Follow up on findings with grounded answers from this review. Not legal advice.

Risk Flags

Critical issues that users should be aware of, such as the potential for account termination without cause, limitations on dispute resolution, or significant privacy intrusions.

Not clearly stated: There were no explicit risk flags identified related to material harm, broad one-sided terms for the company, or hard-to-reverse user impacts.

Data Use

How personal data is collected, processed, and shared with third parties. This section also highlights any broad permissions granted to the company for data utilization.

Not clearly stated: The policy states that it does not sell or rent personal data for money but also says personal data is shared as outlined in the policy, including with service providers. While it explicitly says it will not use Apple HealthKit or Google Health Connect data for advertising or sell it, the extent of data sharing beyond these specific platforms for purposes other than direct marketing, but still with 'service providers who help us operate our Services,' is not fully detailed in the provided excerpts for a complete assessment of potential broader data sharing.
medium90% confidence

Third-party sharing for marketing without health data

With user consent, Flo may share information such as technical identifiers (IP address, device IDs, advertising IDs), age group, subscription status, and app launch data with mobile app marketing and analytics platforms like AppsFlyer, Firebase, and TikTok Ad Manager to improve advertising campaigns and understand performance. Health data is not shared for marketing purposes.

Why it matters: Your technical identifiers, age group, subscription status, and information about launching the App may be shared with third-party marketing and analytics platforms for promotional purposes if you provide consent. Your health data is explicitly stated not to be shared for marketing.

With your consent, Flo may collect and share information with AppsFlyer and its partners, Firebase and TikTok Ad Manager. These are mobile app marketing and analytics platforms (not social media platforms) who help us improve our advertising campaigns, understand the performance of our campaigns and spread the word about Flo. They may also use information collected to remind you to revisit the App if you haven’t used it in a while.

Promoting our Services, paragraph 1 · Citation strength: strong

low85% confidence

Data from external sources may be received to enhance user data and personalize experience

The service may receive personal data from third parties to enhance existing data, personalize user experience, and support analytics and statistics.

Why it matters: Personal data about you may be received from external third-party sources to enhance your existing data, personalize your experience, and support analytics and statistics.

We may receive your personal data from third parties. For example, they may provide additional information to enhance your existing data, personalise your experience, and support analytics and statistics.

Personal data we collect automatically:, paragraph 4 · Citation strength: strong

Cancellation and Renewal

Terms related to subscription cancellations, automatic renewals, and the procedures for managing these.

Not clearly stated: The provided clauses do not contain information regarding cancellation or renewal policies, automatic renewals, or notification periods for renewal of services. Additionally, there are no details on how pricing may change upon renewal, or if the service can be cancelled at any time without penalty.

Gotchas

Potentially surprising or obscure clauses that could negatively impact users, such as hidden fees, strict liability clauses, or one-sided modification rights.

Not clearly stated: The provided clauses do not contain information about hidden fees, strict liability clauses against users, or one-sided modification rights. There is also no mention of automatic renewal, which is a common 'gotcha'.

Protections

Specific commitments or features that benefit the user, such as strong data privacy practices, clear cancellation policies, or transparent data handling.

Not clearly stated: The provided clauses do not explicitly mention protections regarding under-18 non-collection or deletion, clear refund windows, advance notice before material changes beyond privacy policy updates, or comprehensive user deletion/export controls beyond the .json file format and specific report download for iOS premium members.
Protection95% confidence

Commitment to GDPR-level privacy rights globally

Regardless of residence, all users are provided with privacy rights equivalent to those afforded under the GDPR, which is stated to be the highest standard for data protection globally.

Why it helps: Users are guaranteed a high standard of data protection, as the company commits to providing GDPR-level privacy rights to all users, regardless of where they live.

Regardless of where you live, we’re committed to providing you the same privacy rights afforded under the GDPR, which is generally regarded as the highest standard for data protection globally.

Your privacy rights, paragraph 1 · Citation strength: strong

Protection95% confidence

Right to correct personal data

Users can contact the company to request corrections if they believe their personal data held by the service is incorrect.

Why it helps: You can ensure the accuracy of your personal data by requesting corrections if you find it incorrect.

If you think your personal data that we hold is incorrect, you can contact us to request a correction.

Correction of your personal data, paragraph 1 · Citation strength: strong

Protection95% confidence

Right to restrict processing of personal data

Users have the right to request a limitation on the processing of their personal data in certain situations, for example, if they believe the data is inaccurate, while it is being verified.

Why it helps: You have control over how your personal data is processed, allowing you to limit processing under specific circumstances, such as when data accuracy is in question.

You can request that we limit the processing of your personal data in certain circumstances. For example, if you believe your personal data is inaccurate, you can ask us to restrict the processing while we verify it.

Restriction of processing, paragraph 1 · Citation strength: strong

Protection95% confidence

Right to access and portability of personal data

Users have the right to know what personal data is processed about them, request access to all of it, and receive a copy in a structured and portable format (.json files). iOS Flo Premium members can also download a report directly from the App.

Why it helps: You can easily obtain a copy of your personal data in a usable format and understand what data the service holds about you, which supports data control and migration.

You have the right to know what personal data we process about you. You can request access to all your personal data and to receive a copy of it, including in a structured and portable form (we use .json files). For iOS Flo Premium members, the App also allows you to download a report with some of your personal data directly.

Access to your personal data, paragraph 1 · Citation strength: strong

Protection90% confidence

Right to erase personal data

Users can request to delete their personal data at any time. While deletion may affect some features, the process involves unlinking personal identifiers immediately, even if some data temporarily remains in backup systems for up to 90 days.

Why it helps: You can request that your personal data be deleted at any time, giving you control over your information, with clear communication about what happens during the deletion process.

You can ask us to delete your personal data at any time. Keep in mind that deleting some personal data might affect your experience with certain features that depend on historic information.

Erasure of your personal data, paragraph 1 · Citation strength: strong

Protection95% confidence

Right to object to personal data processing

Users can object to the processing of their personal data, for instance, if it is used for direct marketing purposes.

Why it helps: You can object to your personal data being used for specific purposes, such as direct marketing, enhancing your control over how your information is utilized.

You can object to the processing of your personal data, such as if we use it for direct marketing purposes.

Objection to the processing of your personal data, paragraph 1 · Citation strength: strong

Protection95% confidence

Explicit commitment against selling personal data for money

The service explicitly states that it does not sell or rent personal data for money and will only share it as outlined in the privacy policy, including with service providers. It also specifically commits not to use information from Apple HealthKit or Google Health Connect for advertising or sell it to advertising platforms, data brokers, or resellers.

Why it helps: This commitment provides assurance that your personal data, especially sensitive health data from third-party integrations, will not be sold or rented for monetary gain, providing a higher level of privacy protection.

**No sale of personal data:**we do not sell or rent your personal data for money. We will only share your personal data as outlined in this Privacy Policy. This includes sharing your personal data with our service providers who help us operate our Services. We will not use information from Apple HealthKit or Google Health Connect for advertising or sell it to advertising platforms, data brokers or resellers.

Principles of processing, paragraph 2 · Citation strength: strong

Report an issue

Flag a citation problem, stale policy text, or incorrect company match.

Verbaterm boundaries

This public review is informational only and is not legal advice. Verbaterm shows only findings tied to the cited source snapshot above.