# Flo privacy rating

Period, ovulation and pregnancy tracking app with cycle predictions, symptom logging and health content, funded by Flo Premium subscriptions. An Anonymous Mode removes name and email from the account.

## Summary

Flo scores 20 out of 100 (grade F) on the period trackers criteria. It partly meets no ads or data sales, independent audit and no account needed. It does not meet open source, no trackers or telemetry and data stays on device. It is based in the United Kingdom: Five Eyes member; GDPR-style data protection law; CLOUD Act data access agreement with the US.

- Website: https://flo.health
- Jurisdiction: United Kingdom. Five Eyes member. GDPR-style data protection law. CLOUD Act data access agreement with the US.
- Platforms: Android, iOS
- Home page trackers: Google Tag Manager, Trustpilot (not scored)
- Category: [Period trackers](https://privacyratings.com/period-trackers/)
- Grade: F (20/100)

## Criteria

| Criterion | Answer | Note | Evidence |
| --- | --- | --- | --- |
| Open source | No | Closed source. |  |
| No trackers or telemetry | No | The Exodus report finds AppsFlyer, Google Firebase Analytics and Sentry in the Android app. | https://reports.exodus-privacy.eu.org/en/reports/org.iggymedia.periodtracker/latest/ |
| No ads or data sales | Partial | Funded by subscriptions with no in-app ads or data sales, but with consent device identifiers are shared with AppsFlyer and ad partners such as Meta and Google Ads to target Flo's own ads. | https://flo.health/privacy-policy |
| Independent audit | Partial | Flo holds ISO 27001 and ISO 27701 certifications and cites a third-party privacy audit, but no full audit report is public. | https://flo.health/privacy-portal/certification |
| Data stays on device | No | Cycle data is stored on Flo's servers, encrypted at rest but not end-to-end encrypted. | https://flo.health/privacy-portal |
| No account needed | Partial | An account is created on Flo's servers, but Anonymous Mode lets it be used without a name, email or other identifiers. | https://flo.health/product-tour/anonymous-mode |

The FTC settled allegations that Flo shared users' health information with outside data analytics providers after promising to keep it private. The order requires Flo to get users' consent before sharing health information and to obtain an independent review of its privacy practices. See the [FTC press release](https://www.ftc.gov/news-events/news/press-releases/2021/01/developer-popular-womens-fertility-tracking-app-settles-ftc-allegations-it-misled-consumers-about) and [case page](https://www.ftc.gov/legal-library/browse/cases-proceedings/192-3133-flo-health-inc).

Source: https://privacyratings.com/period-trackers/flo/
Edit: https://github.com/privacyratings/privacyratings.com/edit/main/ratings/period-trackers/flo.md