Unlike a typical data breach, where criminals break in and steal records, the $59.5 million Flo settlement stems from information the company allegedly shared on purpose. Flo Health, maker of a widely used period- and pregnancy-tracking app, together with Google and the analytics firm Flurry, agreed to resolve claims that intimate health data was passed to outside companies without users’ consent. The deal covers people who used the app during a specific stretch several years ago. Filing a valid claim by October 15, 2026 is the only route to a share of the money.
What the Lawsuit Says Flo Shared, and With Whom
The complaint, captioned Frasco v. Flo Health and filed in the U.S. District Court for the Northern District of California, alleged that the app funneled sensitive entries to third parties as users logged their cycles and pregnancies. Plaintiffs contended that data describing menstruation and pregnancy was handed to Google, Meta, Flurry, and other companies, in violation of federal and California privacy laws. The claims struck at the core promise of a health app: that deeply personal information stays private and is not quietly monetized in the background while a person simply tracks a cycle or a pregnancy.
Flo Health, Google, and Flurry have not admitted any wrongdoing, and they agreed to the combined $59.5 million payment to resolve the allegations rather than continue litigating. Details of the class definition and the claims process appear in a rundown of the settlement that outlines who qualifies and what documentation each group must provide.
The case matters beyond the app’s core users. Health apps quietly collect some of the most revealing data a person can generate, and the allegation here is not that a thief slipped past security but that the information was routed to advertising and analytics firms as a matter of business. That distinction reframes the risk for anyone who has entrusted personal details to a free app.
Free retirement updates: Enrollment and claim windows come and go, and missing one can cost you real money. The free Retirement Shield newsletter keeps you ahead of the deadlines that matter. Sign up free.
The 2016-to-2019 Window That Defines the Class
Eligibility rests on a precise timeframe. The nationwide class covers people in the United States who used the Flo app between November 1, 2016 and February 28, 2019 and who entered menstruation or pregnancy information during that period. Anyone who used the app outside those dates, or who never logged that specific data, falls outside the class regardless of how long they had the app installed.
A California subclass sits inside the larger group. Residents who used the app in California during the same window, and who entered the qualifying information, can receive twice the standard shared payment if they supply qualifying documentation of their residency. To claim, members generally provide the email address tied to their Flo account, and California subclass members add proof that they lived in the state at the time.
Class members who are unsure whether they qualify can review the eligibility rules and file through the official settlement website, operated by the court-appointed administrator. The site is the authoritative source for the claim form, the deadlines, and the documentation standards that determine whether a submission counts.
Pro-Rata Payments and a Closed Exclusion Door
No fixed dollar figure is attached to an individual claim. Payments are distributed on a shared basis, meaning the amount each qualifying member receives depends on the total number of valid claims filed against the settlement fund. A heavy volume of claims shrinks each check, while fewer claims lift the individual share, so the final number will not be known until the filing period closes.
The deadlines split into separate tracks. The claim form is due October 15, 2026, and the deadline to object to the terms is October 8, 2026. The option to exclude oneself has already passed, tied to a class notice issued back in June 2025, which means members who did not opt out then can no longer remove themselves now and remain bound by the settlement whether or not they file. A final approval hearing is scheduled for October 29, 2026, and payments would follow only if the court signs off and any appeals conclude.
The years-old timeframe means many potential claimants have long since deleted the app or forgotten they used it, so the qualifying email address may take some digging to confirm. The settlement rewards the people who kept records or can recall the account they created, while others who technically belong to the class may never realize it. That mismatch between a broad class definition and the practical difficulty of documenting old app use tends to hold down the number of claims, which in turn shapes how large each individual payment can be.
The Flo settlement lands as one of a growing number of privacy cases built on intentional data-sharing rather than outside intrusion, a category tracked among other open class-action settlements. That is the lasting takeaway for app users of any age: the sharpest threat to sensitive information is not always a hacker, but the ordinary flow of data between an app and the companies that profit from it, and a shared settlement payout only partly answers for it.
This article was produced with AI assistance and reviewed against primary sources by The Money Overview editorial team.
More Financial Reading
