Privacy Policy

Effective Date: Jan 1, 2022

This Privacy Policy (“Privacy Policy”) describes the data handling practices of Flow Healthcare, S.C. and  their respective affiliates (collectively, “Flow,” “we,” “our,” or “us”), including when you visit any Flow website or mobile device that links to this Privacy Policy and those that host the Flow platform or otherwise communicate with us or use our services, including services provided or hosted via third-party platforms (together referred to as our “Services”).

Please read this Privacy Policy carefully before using our Services and providing your personal information to us.



Personal information is information that identifies, relates to, or could reasonably be linked with you or your household.

Directly from You. When you use our Services, we collect the following categories of personal information directly from you:

Automatically Through Tracking Technologies. We may also collect the following categories of personal information automatically when you use our Services:

From Third Parties Partners. We work closely with third parties, including, for example, physicians, medical professionals, labs, and pharmacies with whom we partner to provide you with the Services and to help facilitate their provision of their healthcare-related services. These third parties may provide us with your personal information.

From Social Media and Other Content Platforms. When you “like” or “follow” us on Facebook, Instagram, Twitter, or other social media sites, we may collect some information from you including your name, email address, and any comments or content you post relevant to us. We also collect your information if you sign up for one of our promotions or submit information to us through social media sites.

In addition to how we use your personal information as described above in this section, we may also use your personal information for the following purposes:

Aggregate/De-Identified Data. We may aggregate and/or de-identify any information collected through the Services so that such information can no longer be linked to you, your household, or your device (“Aggregate/De-Identified Information”). We may use Aggregate/De-Identified Information for any purpose, including for research and marketing purposes, and may also share such data with any third parties, including advertisers, promotional partners, and sponsors.


We may share your personal information for our own business purposes in the following ways:


We may use “cookies” and other tracking technologies to keep and sometimes track, information about you when you use our Platform. Cookies are small data files that are sent to your browser or related software from a web server and stored on your computer’s hard drive. Cookies track where you travel on the Platform and what you look at. Most web browsers can be set to inform you when a cookie has been sent to you and provide you with the opportunity to refuse that cookie. We may use cookies and tracking technologies in the following ways.

Online Analytics. We may use third-party web analytics services, such as those of Google Analytics (including Google Signals, Google User-ID, and other Google Analytics features) and MixPanel on our Services to collect and analyze usage information through cookies and similar tools; engage in auditing, research, or reporting; assist with fraud prevention; try to locate the same unique users across multiple browsers or devices to better tailor services and features; and provide certain features to you. To learn more about Google Analytics, you can visit “How Google uses data when you use our partners’ sites or apps” (located here). If you have a Google account with personalized advertising enabled, through Google Signals, Google will also be able to gather for us analytics and engagement information from across the various devices you use to access the Services. To prevent Google from using your information for analytics (including cross-device tracking for personalization purposes), you may install the Google Analytics Opt-out Browser Add-on by clicking here. And to opt out of Google Signals, please open your “Settings” app, locate and tap “Google,” select “Ads,” and turn ON “Opt out of Ads Personalization.” You may also be able to disable cross-device tracking through your Android or Apple device-based settings.

Online Advertising. The Services may integrate third-party advertising technologies (e.g., ad networks and ad servers such as Facebook, Google Ad Words, Criteo and others) that use cookies and other technologies to deliver relevant content and advertising for Flow products on the Services, as well as on other websites you visit and other applications you use. The ads may be based on various factors such as the content of the page you are visiting, information you enter such as your searches, demographic data, and other information we collect from you. These ads may be based on your current activity or your activity over time and across other websites and online services.

We neither have access to, nor does this Privacy Policy govern, the use of cookies or other tracking technologies that may be placed on your device you use to access the services by non-affiliated third party advertising network services. If you are interested in more information about tailored browser advertising and how you can generally control cookies from being put on your computer to deliver tailored advertising, you may visit the Network Advertising Initiative’s Consumer Opt-Out link, the Digital Advertising Alliance’s Consumer Opt-Out link, or Your Online Choices to opt-out of receiving tailored advertising from companies that participate in those programs. If you are interested in more information about Criteo’s privacy practices or opting-out of Criteo’s advertising services, you may view their Privacy Policy. To opt out of Google Analytics for display advertising or customize Google display network ads, visit the Google Ads Settings page. We do not control these opt-out links or whether any particular company chooses to participate in these opt-out programs. We are not responsible for any choices you make using these mechanisms or the continued availability or accuracy of these mechanisms.

Please note that if you exercise the opt-out choices above, you will still see advertising when you use the Services, but it may not be tailored to you based on your online behavior over time. Notice Concerning Do Not Track. Do Not Track (“DNT”) is a privacy preference that users can set in certain web browsers. We are committed to providing you with meaningful choices about the information collected on our website for third party purposes, and that is why we provide the variety of opt-out mechanisms listed above. However, we do not currently recognize or respond to browser-initiated DNT signals. To learn more about Do Not Track, you can do so here.


You may instruct us not to use your contact information to contact you by email, postal mail, or phone regarding products, services, promotions and special events that might appeal to your interests by contacting us using the information below. In commercial email messages, you can also opt out by following the instructions located at the bottom of such emails. Please note that, regardless of your request, we may still use and share certain information as permitted by this Privacy Policy or as required by applicable law. For example, you may not opt out of certain operational or administrative emails, such as those reflecting our relationship or transactions with you.


If you are a California residents, you may be entitled to additional disclosures and rights provided under the California Consumer Privacy Act (“CCPA”) and the Shine the Light law.

CCPA Disclosures:

CCPA Privacy Rights: If you are a California resident, you may have the following privacy rights available to you:

You may exercise your right to know and right to deletion twice a year, free of charge. To exercise your right to know or right to deletion, please contact us at [e-mail address]. Please include your full name, email address and residential address associated with your use of our Services, along with the rights you would like to exercise.

We will take steps to verify your identity before processing your request to know or request to delete. We will not fulfill your request unless you have provided sufficient information for us to reasonably verify you are the individual about whom we collected personal information. If you have an account with us, we may use our existing account authentication practices to verify your identity. We may alternatively request additional information about your to verify your identity. We will only use the personal information provided in the verification process to verify your identity or authority to make a request and to track and document request responses, unless you initially provided the information for another purpose.

You may use an authorized agent to submit a request to know or a request to delete. When we verify you agent’s request, we may verify both your and your agent’s identity and request a signed document from you that authorizes your agent to make the request on your behalf. To protect your personal information, we reserve the right to deny a request from an agent that does not submit proof that they have been authorized by you to act on their behalf.

Shine the Light. The California “Shine the Light” law gives residents of California the right under certain circumstances to request information from us regarding the manner in which we share certain categories of personal information (as defined in the Shine the Light law) with third parties for their direct marketing purposes. We do not share your personal information with third parties for their own direct marketing purposes.


Flow takes a variety of reasonable technical and organizational security measures designed to protect your information against accidental or unlawful destruction or accidental loss, alteration, unauthorized disclosure or access. However, no method of transmission over the Internet, and no means of electronic or physical storage, is absolutely secure. As such, you acknowledge and accept that we cannot guarantee the security of your information transmitted to, through, or on our Services or via the Internet, and that any such transmission is at your own risk.

Where we have given you (or where you have chosen) a password that enables you to access the Services, you are responsible for keeping this password confidential. We ask you not to share your password with anyone. The information you share in public areas may be viewed by any user of the Services.


We keep your personal information for no longer than necessary for the purposes for which it is processed. The length of time for which we retain information depends on the purposes for which we collected and use it and/or as required to comply with applicable laws.


Our Services may contain references or links to third-party websites and services. Except as described above regarding Service Providers, we do not control what information third parties track or collect. Any access to and use of such third-party websites and services is not governed by this Privacy Policy but instead is governed by the privacy policies of those third parties. We are not responsible for the information practices of such third parties.


If you use our Services or provide us your personal information from outside the United States, your information will be transferred to, stored and processed in the United States and other countries where Flow or its vendors operate in accordance with this Privacy Policy and applicable laws. Please note that data protection and consumer protection laws of the United States and such other countries may differ from the data protection or consumer protection laws in your country. By using our Services or providing us with your personal information, you understand that your personal information will be collected from and processed in the United States and other countries where Flow or its vendors operate, and acknowledge that your information may be subject to access by law enforcement and other government entities, including courts and tribunals, in accordance with laws applicable in those jurisdictions.


Our Services are not intended for and we do not knowingly collect any personal information from children under 16. If we learn that a child under the age of 16 has submitted personal information, we will take all reasonable measures to delete the information as soon as possible and to not use such information for any purpose, except where necessary to protect the safety of the child or others as required or allowed by law. If you believe a child under 16 has provided us with Personal Information, please contact us at or at our mailing address identified below in Section 11 “Contact Us.”


If you have any questions about this Privacy Policy or Flow’s privacy practices, please contact us at:

Flow Healthcare, S.C.
25 W Main St, FL5, Madison, WI 53703.


We reserve the right to change this Privacy Policy at any time to reflect changes in the law, our data collection and use practices, the features of our Services, or advances in technology. We will make the revised Privacy Policy accessible through the Services, and we suggest you review it periodically. The date this Privacy Policy was last revised is identified at the top of the document. You are responsible for periodically monitoring and reviewing any updates to the Privacy Policy. If we make a material change to the Privacy Policy, we will endeavor to provide you with appropriate notice in accordance with legal requirements. Your continued use of our Services after such amendments (and notice, where applicable) will be deemed your acknowledgment of these changes to this Privacy Policy.