Flo Ovulation & Period Tracker

"Location information: IP address for an approximate location; country; time zone or information about your mobile service provider. We do not collect your exact location. We only use location details for the reasons listed below."

Flo automatically collects IP-based approximate location, country, time zone, and mobile service provider information, and shares IP addresses with third parties like AppsFlyer and Firebase which may reveal general location.

"Device information: device model; information about the operating system and its version; unique device identifiers; enabled device accessibility features (e.g., display features, hearing features, and physical and motor features); mobile operator and network information; device storage information or version of your device system."

Flo collects detailed device data including accessibility features (hearing, physical/motor features), device storage information, and unique device identifiers — some of which go beyond what a period tracking app's core functionality requires.

"We may update this Privacy Policy and any addendums from time to time. We review them at least once a year and make updates if needed to ensure they remain accurate. If there are material changes to this policy that we need to tell you about, we will let you know by email or through the App."

Flo reserves the right to update the privacy policy at any time, with notification only for "material" changes — leaving Flo to decide what qualifies as material, and continued use implies acceptance of updated terms.

"When you become a Flo member and give your consent, we share the following personal data with Firebase and connected Google services partners to promote the Services: technical identifiers: IP address, Android ID or Google advertising ID, IDFA, and other similar unique technical identifiers; your subscription status; information about App usage. At the same time, your personal data is shared with linked services (e.g. Google Ads, Google Analytics, and Google Play)."

Flo shares user data with a large ecosystem of third parties including AppsFlyer and its ad partners (Pinterest, Meta, Google Ads, Apple Search Ads), Firebase, Google Analytics, and numerous processors — creating broad exposure of user data across advertising and analytics networks.

"If you delete the App from your device or your account becomes inactive, we will retain your personal data for three years in case you decide to reactivate the Services or reinstall the App. After three years of inactivity, your personal data will be deleted. Flo will apply this standard retention policy."

Flo retains all personal data — including sensitive health and menstrual cycle data — for three years after a user simply deletes the app or goes inactive, which is a lengthy default retention period for highly sensitive health information.

"AppsFlyer may also share your personal data with its partners (e.g., Pinterest, Google Ads, Apple Search Ads, Meta Audience and others) to find you or people like you on various platforms, including social media. These partners use the information shared to help us achieve the purposes described above."

Flo enables cross-platform tracking by sharing advertising IDs, IP addresses, and device identifiers with AppsFlyer and Firebase, which in turn share with ad networks like Meta and Google to identify and target users across social media and other platforms.

"We will process your request within one-month. In some cases, it will take up to 90 days to completely erase your personal data from our backup systems. Please be aware that once the deletion process begins, it can't be undone. This is because your personal identifiers are immediately unlinked from your App information, which means we can no longer identify you, even if some data temporarily remains in our backup systems."

Account deletion can take up to 90 days to fully complete, and data may persist in backup systems during that period. Additionally, certain data may be retained even after deletion for legal obligations, claims management, and archival purposes.