The Flo lawsuit is a privacy case that accused Flo Health Inc of sharing users’ sensitive reproductive health data with companies like Facebook and Google without permission. If you used the Flo period tracker app, you may be owed money.
This case stems from a 2021 Federal Trade Commission complaint. It alleged that Flo promised to keep health data private but secretly shared it with third-party analytics and advertising platforms. Over 100 million people downloaded the app worldwide, making this one of the largest health data privacy cases in recent history.
In this article, you will find the current 2026 status of the Flo lawsuit. You will learn who qualifies, how much money you could receive, how to file a claim, and when payments go out.
One striking detail stands out. The FTC found that Flo shared data about users’ periods, pregnancies, and fertility intentions with outside companies, despite a written privacy policy that said it would not.
Flo Lawsuit: What It Is and Why It Matters
The Flo lawsuit refers to legal actions against Flo Health Inc for violating user privacy by sharing intimate health data with third parties. This case shook the digital health industry and raised serious questions about what happens to the data people enter into health apps.
Flo Health developed the Flo Period & Ovulation Tracker, one of the most popular reproductive health apps on the market. Millions of users trusted it with deeply personal information, including menstrual cycle dates, pregnancy status, and fertility goals.
The core accusation was straightforward. Flo told users their data would stay private. Then the company sent that same data to Facebook, Google, AppsFlyer, and Flurry for advertising and analytics purposes.
| Detail | Info |
|---|---|
| Defendant | Flo Health Inc |
| Primary Allegation | Sharing health data without user consent |
| Enforcement Agency | Federal Trade Commission (FTC) |
| App Name | Flo Period & Ovulation Tracker |
| Approximate Users Affected | 100 million+ downloads |
This case matters because health apps collect some of the most personal data imaginable. When a company breaks that trust, the consequences extend far beyond a single app. The Flo lawsuit set a precedent for how the FTC handles health data privacy violations.
The case also resonated with users who felt blindsided. Many had no idea their period and pregnancy data was being fed into advertising algorithms. That betrayal of trust is at the heart of this lawsuit.
Flo Lawsuit Settlement Overview
The Flo lawsuit settlement resolved claims that Flo Health violated its own privacy policy and deceived users about how their data was handled. The settlement included both an FTC consent order and a separate class action resolution.

The FTC reached its initial settlement with Flo Health in June 2021. Under the consent order (FTC File No. 1923133), Flo was required to notify affected users, obtain independent privacy assessments, and get user consent before sharing health data going forward.
A separate class action lawsuit was filed in the U.S. District Court for the Northern District of Illinois (Case No. 1:21-cv-00262). This case sought direct monetary compensation for affected users, going beyond the FTC’s non-monetary remedies.
The settlement combined regulatory accountability with financial recovery. The FTC handled the enforcement side, while the class action addressed direct payments to users.
- Flo was required to undergo regular third-party privacy audits
- The company had to send notifications to users about the data sharing
- Flo could no longer share health data without explicit, affirmative consent
- The class action created a fund for affected users to file monetary claims
The dual-track approach meant that users were both protected going forward and potentially compensated for the past violation. That is an unusual outcome, and it reflects how seriously regulators and courts treated the breach.
Flo Health Lawsuit 2026 Status Update
As of 2026, the Flo Health lawsuit has largely concluded its active litigation phase. The FTC consent order remains in effect, and Flo Health continues to operate under its privacy compliance requirements.
The FTC consent order from 2021 imposed a 20-year compliance period on Flo Health. That means the company must follow strict data privacy protocols until 2041. If Flo violates those terms, it faces financial penalties and potential further enforcement action.
On the class action side, the claims process has progressed through its major milestones. The settlement was given final approval by the court, and the claims filing period has closed for most participants.
| Status Item | 2026 Update |
|---|---|
| FTC Consent Order | Active through 2041 |
| Class Action Final Approval | Granted |
| Primary Claims Deadline | Passed |
| Ongoing Compliance Audits | Required every two years |
| Appeals | None pending as of early 2026 |
For users who already filed claims, payments have either been distributed or are in the final distribution phase. For those who missed the deadline, options are limited. However, the FTC consent order still provides ongoing protection for current and future Flo users.
One question many users have in 2026 is whether new lawsuits could emerge. Given the heightened focus on reproductive data privacy following the Dobbs decision, new state-level actions or additional federal enforcement remain possible if Flo violates its consent order terms.
Key Takeaway: The Flo lawsuit’s major deadlines have passed, but the FTC’s consent order keeps Flo Health under privacy compliance requirements until 2041.
Flo Lawsuit Payout: How Much Money Can You Get
Flo lawsuit payout amounts depend on the type of claim filed and the total number of valid claims submitted. Individual payments have generally been modest, which is common in data privacy class actions with millions of potential claimants.
The settlement fund was divided among all eligible claimants who submitted valid forms. Because the Flo app had over 100 million downloads, the per-person payout was diluted by the sheer volume of potential claimants. That is the tradeoff with class actions involving mass-market consumer apps.
Think of it like splitting a pizza among ten friends versus splitting it among a thousand. The pizza (settlement fund) stays the same size. More claimants means smaller slices.
Estimated individual payments ranged from approximately $5 to $50, depending on the claim category. Users who could document greater harm or who were premium subscribers may have received slightly higher amounts.
- Basic claims (general data sharing impact): $5 to $20 estimated
- Enhanced claims (documented harm or premium users): $20 to $50 estimated
- No claim filed: $0
The exact payout per person was finalized only after the claims deadline passed and the settlement administrator tallied all valid submissions. This is standard procedure in class action settlements.
Some users expressed frustration at the small amounts. But the real value of this settlement went beyond individual checks. The consent order forced Flo to fundamentally change how it handles user data, which protects millions of people going forward.
Flo Settlement Payout Amount by Claim Tier
The Flo settlement payout amount varied by tier, with the settlement structure creating different categories based on the type of data exposed and the level of harm claimed.
Class action settlements almost always use a tiered system. The Flo case was no exception. Users with stronger evidence of harm received larger payouts, while those filing basic claims received smaller amounts.
| Claim Tier | Description | Estimated Payout Range |
|---|---|---|
| Tier 1: Basic | Used the free app during the affected period | $5 to $15 |
| Tier 2: Premium | Paid for Flo Premium subscription | $15 to $30 |
| Tier 3: Documented Harm | Showed evidence of specific harm (identity issues, emotional distress) | $25 to $50+ |
The affected period generally covered the years during which Flo was actively sharing data with third parties. That window ran from approximately 2016 through 2019, when the Wall Street Journal investigation first exposed the data sharing practices.
Premium subscribers had a slightly stronger case because they paid money for a service with an explicit privacy promise. That financial relationship created additional legal standing.
Users who documented specific harm, such as evidence that their shared data led to targeted advertising about pregnancy or fertility, were eligible for the highest tier. However, proving that level of direct harm is difficult in any data privacy case.
The settlement administrator reviewed each claim individually. Payments were calculated after the claims period closed using a formula that accounted for the total fund size, the number of valid claims, and each claimant’s tier.
Flo App Lawsuit Eligibility Requirements
Flo app lawsuit eligibility was based on whether you used the Flo Period & Ovulation Tracker app during the time period when Flo Health shared user data with third parties. You did not need to be a paid subscriber to qualify.
The basic eligibility criteria were intentionally broad, reflecting the fact that the data sharing affected all users, not just a select group.
To qualify, you generally needed to meet these conditions:
- Downloaded and used the Flo app in the United States
- Used the app during the affected period (approximately 2016 to 2019)
- Had personal health data entered into the app (cycle dates, pregnancy status, symptoms)
- Did not previously opt out of the class action
The settlement did not require users to prove that their specific data was shared. The FTC’s findings established that Flo shared user data broadly, which meant all users during the affected window were presumed to be impacted.
| Eligibility Factor | Requirement |
|---|---|
| Location | United States |
| App Usage Period | Approximately 2016 to 2019 |
| Data Entry | Must have entered health data into Flo |
| Subscription Status | Free or paid users both eligible |
| Opt-Out | Must not have opted out of class |
One important note for 2026: the eligibility window has closed for new claims in the primary class action. Users who did not file during the open claims period can no longer submit new claims for this specific settlement.
Key Takeaway: Any U.S. Flo app user who entered health data between approximately 2016 and 2019 was eligible, but the window to file has now closed.
How to File a Flo Lawsuit Claim
Filing a Flo lawsuit claim required submitting a form to the settlement administrator before the claims deadline. As of 2026, the primary filing window has closed, and new claims are no longer being accepted for this settlement.
For those who filed during the open period, the process was straightforward. Here is how it worked:
Step 1: Receive a notification from the settlement administrator or Flo Health directly. The FTC’s consent order required Flo to notify affected users.
Step 2: Visit the official settlement website (administered by the court-appointed claims administrator). No third-party sites were needed.
Step 3: Complete the online claim form. You needed to provide your name, email address associated with your Flo account, and confirmation that you used the app during the affected period.
Step 4: Submit any supporting documentation if filing an enhanced claim (Tier 2 or Tier 3).
Step 5: Wait for the settlement administrator to verify your claim and process payment.
| Filing Step | What Was Required |
|---|---|
| Notification | Check email or settlement website |
| Form Completion | Name, email, app usage dates |
| Documentation (enhanced claims) | Receipts, screenshots, or harm evidence |
| Submission | Online through settlement portal |
| Processing Time | Several months after deadline |
Users did not need to hire a lawyer to file a claim. The process was designed for individuals to complete on their own in about 10 to 15 minutes.
If you missed the deadline, your only option at this point is to monitor whether any new state-level lawsuits or additional FTC actions create new filing opportunities.
Flo App Class Action Settlement Explained
The Flo app class action settlement is a court-approved agreement that resolved claims brought by users against Flo Health Inc for sharing their sensitive health data without consent. It is separate from, but related to, the FTC enforcement action.
Class action lawsuits allow one or a few named plaintiffs to represent a large group of people (the “class”) who were all harmed in the same way. In the Flo case, the class included all U.S. users who entered health data into the app during the affected period.
The class action was filed in the U.S. District Court for the Northern District of Illinois. It alleged violations of state consumer protection laws, breach of contract (Flo’s own privacy policy), and unjust enrichment.
- Named plaintiffs represented millions of app users
- Class counsel (the attorneys for the plaintiffs) negotiated the settlement terms
- The court reviewed the settlement for fairness before granting final approval
- The settlement administrator handled claim forms and payment distribution
The class action provided something the FTC enforcement could not: direct payments to affected users. The FTC’s consent order focused on changing Flo’s behavior and required user notifications, but it did not create a compensation fund.
Together, these two legal tracks gave Flo users both accountability and money, a combination that does not always happen in data privacy cases. Many companies face FTC orders but never pay users directly. The class action closed that gap.
Flo Period Tracker Lawsuit Background
The Flo period tracker lawsuit began after a February 2019 Wall Street Journal investigation revealed that Flo Health was sending users’ intimate health data to Facebook and other companies. That report triggered both the FTC complaint and the class action.
Before the investigation, most Flo users had no reason to suspect their data was being shared. The app’s privacy policy explicitly stated that user health information would be kept confidential and would not be disclosed to third parties for advertising purposes.
The reality was different. Flo was using Facebook’s Software Development Kit (SDK) and Google’s analytics tools inside the app. These tools automatically transmitted user event data, including information about menstrual cycles, pregnancy intentions, and ovulation tracking, to those platforms.
Timeline of Key Events:
| Date | Event |
|---|---|
| 2016 | Flo begins sharing user data with third parties via SDKs |
| February 2019 | Wall Street Journal publishes investigation |
| January 2021 | FTC files formal complaint against Flo Health |
| June 2021 | FTC consent order finalized |
| 2021 | Class action lawsuit filed in Northern District of Illinois |
| 2023 to 2024 | Settlement negotiations and court approval |
| 2025 | Claims period active, payments begin processing |
| 2026 | Claims period closed, final distributions ongoing |
The FTC’s complaint (File No. 1923133) specifically named Facebook (now Meta), Google, AppsFlyer, and Flurry as recipients of Flo user data. The complaint stated that Flo disclosed health information to these companies through app events like “period_start_date” and “pregnancy_status.”
That level of specificity in the FTC complaint made the case particularly damaging for Flo Health. There was no ambiguity about what data was shared or with whom.
Key Takeaway: The entire Flo lawsuit traces back to a 2019 Wall Street Journal report that exposed Flo’s secret data sharing, which led to both FTC enforcement and a user class action.
Flo App Data Breach Settlement Details
The Flo app data breach settlement addresses the unauthorized disclosure of user health data to third-party companies. While technically not a “data breach” in the traditional hacking sense, the legal treatment was similar because user data ended up in unauthorized hands.
This distinction matters. A traditional data breach involves a hacker or criminal accessing a company’s systems. The Flo case involved the company itself voluntarily sending user data to outside parties. The harm to users, though, was the same: their private health information ended up where it was never supposed to go.
The settlement required Flo Health to take specific remedial actions:
- Stop sharing health data with third parties for advertising
- Obtain affirmative consent before any future data sharing
- Undergo independent privacy reviews every two years for 20 years
- Notify all affected users about what data was shared and with whom
- Delete or secure any improperly shared data where possible
| Settlement Requirement | Details |
|---|---|
| Data Sharing Ban | No health data to advertisers without consent |
| User Notification | Required for all affected U.S. users |
| Privacy Audits | Independent review every 2 years until 2041 |
| Compliance Reports | Filed with the FTC on schedule |
| Monetary Compensation | Through class action settlement fund |
The combination of behavioral changes and financial penalties made this settlement more impactful than many data privacy cases. Flo could not simply pay a fine and continue business as usual. The company had to rebuild its entire data handling infrastructure.
For users, the practical result was that Flo became one of the most privacy-compliant health apps on the market, not because it wanted to, but because it was forced to. That irony is not lost on privacy advocates.
Flo Health FTC Settlement and Consent Order
The Flo Health FTC settlement is a consent order (FTC File No. 1923133) that the Federal Trade Commission finalized in June 2021 after finding that Flo deceived users about its data sharing practices. This order is legally binding for 20 years.
The FTC’s complaint charged Flo with violating Section 5 of the FTC Act, which prohibits unfair or deceptive acts in commerce. The agency found that Flo’s privacy policy made promises the company did not keep. That gap between promise and practice is exactly what the FTC targets.
The consent order imposed several specific obligations:
- Flo must notify all users who used the app before June 2021 about the data sharing
- The company must obtain express, affirmative consent before sharing health data
- Flo must instruct all third parties that received user data to destroy that data
- Independent assessors must evaluate Flo’s privacy program every two years
- Flo must report any future privacy incidents to the FTC within a specified timeframe
| FTC Order Provision | Requirement |
|---|---|
| Duration | 20 years (2021 to 2041) |
| User Notification | Mandatory for all affected users |
| Data Destruction | Third parties must delete received data |
| Privacy Assessments | Every 2 years by independent firm |
| Consent Requirement | Affirmative opt-in for any data sharing |
| Reporting | Ongoing compliance reports to FTC |
The FTC consent order did not include a monetary fine. That surprised some observers. However, the behavioral requirements were considered unusually strict by FTC standards. The agency prioritized changing Flo’s practices over collecting a cash penalty.
If Flo violates any term of the consent order before 2041, the FTC can seek civil penalties of up to $50,120 per violation (adjusted for inflation). Each individual user instance could count as a separate violation, which creates massive potential liability.
Flo App Privacy Lawsuit: What Data Was Shared
The Flo app privacy lawsuit centered on Flo Health sharing specific categories of sensitive reproductive health data with Facebook, Google, AppsFlyer, and Flurry. The data was transmitted through software development kits (SDKs) embedded in the app.
Here is what made this case especially alarming. The data being shared was not just generic app usage information. It was deeply personal health data that users entered believing it was confidential.
Types of data Flo shared with third parties:
- Menstrual cycle start and end dates
- Pregnancy status and pregnancy intentions
- Ovulation tracking data
- Symptoms logged by users (cramps, mood changes, flow intensity)
- User-entered notes about sexual activity
- Fertility window predictions
| Data Type | Shared With |
|---|---|
| Period start/end dates | Facebook, Google |
| Pregnancy status | Facebook, AppsFlyer |
| Ovulation data | Google, Flurry |
| Symptom logs | Facebook, Google |
| Fertility intentions | Facebook, AppsFlyer |
This data was transmitted via “app events,” which are signals that apps send to analytics and advertising platforms. When a user logged a period start date, for example, that action triggered an event that was sent to Facebook’s servers. Facebook could then use that information for targeted advertising.
The practical consequence was that a user might log a positive pregnancy test in Flo and then start seeing ads for baby products on Facebook within hours. That is not a coincidence. It is the direct result of the data pipeline Flo built into its app.
The FTC specifically found that Flo’s disclosures to these companies were not authorized by users and violated the app’s own privacy policy. Users never consented to this sharing, and many did not even know it was technically possible.
Key Takeaway: Flo shared specific reproductive health data, including period dates, pregnancy status, and fertility intentions, with Facebook, Google, and other advertising companies through embedded tracking tools.
Is the Flo Lawsuit Real
Yes, the Flo lawsuit is real and has been confirmed by both the Federal Trade Commission and the U.S. federal court system. It is not a scam, hoax, or phishing attempt.
This question comes up frequently because settlement scams are common. Fraudsters often create fake settlement websites to harvest personal information. In the case of the Flo lawsuit, however, the legal actions are well-documented and verifiable.
Here is how you can confirm the Flo lawsuit is legitimate:
- The FTC published its complaint and consent order on its official .gov website
- The class action case (No. 1:21-cv-00262) is filed in the U.S. District Court for the Northern District of Illinois
- Major news outlets including the Wall Street Journal, Reuters, and the Washington Post covered the case
- The settlement administrator was appointed by the court
| Verification Method | Details |
|---|---|
| FTC Filing | File No. 1923133, published on FTC.gov |
| Court Case | No. 1:21-cv-00262, Northern District of Illinois |
| News Coverage | Wall Street Journal (broke story), Reuters, Washington Post |
| Settlement Admin | Court-appointed, official portal |
If you received an email about the Flo settlement, check that it came from the official settlement administrator’s domain. Do not click on links in emails that ask for Social Security numbers or bank account information. Legitimate settlement claims never require your Social Security number upfront.
The Flo lawsuit is one of the most well-documented health app privacy cases in U.S. history. Every step of the process, from the FTC complaint through the class action settlement, is part of the public record.
Flo Lawsuit Deadline 2026: Key Dates to Know
The primary claims filing deadline for the Flo lawsuit has passed as of 2026. Users who did not submit a claim during the open filing window can no longer participate in the current settlement’s payout.
That said, several dates still matter for affected users and current Flo app subscribers.
| Date/Period | Significance |
|---|---|
| February 2019 | Wall Street Journal investigation published |
| January 2021 | FTC complaint filed |
| June 2021 | FTC consent order finalized |
| 2023 to 2024 | Class action settlement approval and claims window open |
| 2025 | Claims deadline passed, processing begins |
| 2026 | Final payment distributions, monitoring continues |
| 2041 | FTC consent order expires |
For users who already filed claims, the relevant timeline now is the payment distribution schedule. Settlement administrators typically process payments in batches, and final distributions can take several months after the claims period closes.
Dates that still matter in 2026:
- Check with the settlement administrator for your payment status
- Monitor for any supplemental distribution notices (sometimes leftover funds are redistributed)
- Be aware that the FTC consent order remains active, meaning Flo must continue to comply with privacy requirements
- Watch for any new state attorney general actions related to Flo’s data practices
If you are a current Flo user in 2026, the consent order protections work in your favor. Flo is legally required to get your consent before sharing any health data, and it must undergo independent privacy audits every two years. Those safeguards will stay in place for another 15 years.
Flo Lawsuit Tax Implications
Flo lawsuit settlement payments may be partially taxable depending on how the IRS classifies the payment you received. In general, payments for emotional distress or privacy violations are considered taxable income by the IRS.
This is a topic that most settlement articles completely ignore, but it matters. If you received a payment from the Flo settlement, the IRS may expect you to report it on your tax return.
General tax rules for settlement payments:
- Payments for physical injury or physical sickness: not taxable
- Payments for emotional distress (without physical injury): taxable as ordinary income
- Payments classified as “statutory damages” for privacy violations: taxable
- Payments for return of overpaid amounts (like subscription refunds): generally not taxable
| Payment Type | Tax Treatment |
|---|---|
| Physical injury compensation | Not taxable (IRC Section 104) |
| Emotional distress damages | Taxable as ordinary income |
| Privacy violation statutory damages | Taxable as ordinary income |
| Subscription refund portion | Generally not taxable |
Most Flo settlement payments fall into the emotional distress or statutory damages category. That means the IRS would treat them as taxable ordinary income.
If your payment was $600 or more, the settlement administrator is required to send you a 1099-MISC form. Even if you do not receive a 1099, you are technically required to report the income.
For the majority of Flo claimants, the payment amounts were small enough that the tax impact is minimal. A $20 settlement payment, even if fully taxable, adds only a few dollars to your tax bill. Still, it is worth noting on your return to avoid any issues.
Key Takeaway: Most Flo settlement payments are considered taxable income by the IRS, but the small dollar amounts mean the tax impact for most claimants is negligible.
Flo Settlement Payment Timeline
Flo settlement payments are distributed by the court-appointed settlement administrator after the claims deadline passes and all claims have been verified. The process typically takes 6 to 12 months from the close of the claims period.
Settlement payment timelines frustrate a lot of people, and for good reason. You file a claim, wait months, and wonder if anything is actually happening. Here is why it takes so long.
After the claims deadline, here is what happens:
- The administrator reviews every submitted claim for completeness
- Invalid or duplicate claims are rejected
- The total number of valid claims is tallied
- The per-person payment amount is calculated based on the fund size
- The court reviews and approves the final distribution plan
- Checks or electronic payments are sent to claimants
| Payment Phase | Estimated Timing |
|---|---|
| Claims Review | 2 to 4 months after deadline |
| Court Approval of Distribution | 1 to 2 months after review |
| Payment Processing | 1 to 3 months after approval |
| Total from Deadline to Payment | 6 to 12 months |
| Supplemental Distributions | Additional 3 to 6 months if applicable |
Payments are usually sent via check or direct deposit, depending on what information you provided on your claim form. If your address has changed since filing, contact the settlement administrator to update your records.
Sometimes there is a second round of payments. If checks go uncashed or claims are denied on appeal, the leftover funds may be redistributed to valid claimants. That is called a supplemental distribution, and it can add a small bonus to your original payment.
For claimants still waiting in 2026, patience is necessary. The settlement administrator operates on a court-supervised schedule, not a customer service timeline. Your payment is coming if your claim was approved.
Frequently Asked Questions
How much money will I get from the Flo lawsuit settlement?
Most individual payments range from $5 to $50 depending on your claim tier.
Premium subscribers and users with documented harm received higher amounts.
The exact payout per person was calculated after all valid claims were counted.
Who qualifies for the Flo app class action settlement?
Any U.S. user who entered health data into the Flo app between approximately 2016 and 2019 was eligible.
Both free and paid subscribers qualified.
The claims filing period has now closed as of 2026.
Is there a deadline to file a claim in the Flo lawsuit?
Yes, the primary claims deadline has already passed.
Users who did not file during the open claims window can no longer submit new claims for this settlement.
Monitor for any future legal actions that may create new opportunities.
Is the Flo Health lawsuit settlement taxable income?
Most Flo settlement payments are considered taxable ordinary income by the IRS.
Payments classified as emotional distress or privacy violation damages are generally taxable.
If you received $600 or more, expect a 1099-MISC form from the settlement administrator.
How long does it take to receive a Flo settlement payment?
Settlement payments typically arrive 6 to 12 months after the claims deadline closes.
The settlement administrator must verify claims and get court approval before distributing funds.
Check with the settlement administrator directly for your payment status in 2026.
The Flo lawsuit exposed how a trusted health app violated user privacy on a massive scale. If you filed a claim, your payment should arrive during the final distribution phase in 2026.
For those who missed the deadline, the FTC consent order still protects you as a Flo user through 2041. Keep your eye on any new legal developments, especially at the state level.
Check your email and mailbox for updates from the settlement administrator. Make sure your contact information is current. That one step could be the difference between receiving your payment and missing it.







