Consumer Health Data Privacy Policy

Effective date: October 9, 2026

This Consumer Health Data Privacy Policy explains how Flore Inc. ("Flore," "we," "us") collects, uses, shares and protects consumer health data. It applies to flore.com, quiz.flore.com, our quizzes, our online store, the Flore customer portal and app, and our emails. It adds to our main Privacy Policy. Where the two differ about consumer health data, this policy controls.

It is written to meet the consumer health data laws of Washington (My Health My Data Act), Nevada and Connecticut. We offer the rights below to everyone in the U.S.

What consumer health data means here

Consumer health data is personal information linked or reasonably linkable to you that identifies your past, present or future physical or mental health. At Flore that includes:

Quiz answers: gut symptoms and digestion, mood, stress, sleep, energy and focus, your age range, and who the quiz is for (you, your child or another adult). On our peptides quiz, it also includes whether and how long you have used GLP-1 or other weight-loss medications or peptides.
Results we create from your answers, such as your gut-brain Type or a program match.
Microbiome and lab tests: that you ordered or registered a test, your kit information and your results.
Personalized products: that you bought a test, a personalized probiotic or a program, and the details of your personalized formula.
Portal and app data: health information you, or a family member who manages your profile, enter, such as daily check-ins and notes.
Conversations: what you tell a Flore specialist or our online concierge about your health.
Quiz activity: the fact that you visited one of our health quizzes and how far you got, when it is linked to your browser or device.

We do not collect precise location data through our quizzes or website.

Where we get it

From you, when you take a quiz, buy something, register a test kit, use the portal or app, or contact us.
From a family member who manages your profile in the Flore app or portal.
From the partner laboratories that process the tests you order.
From a health care provider who orders a Flore test or formula for you.

Why we collect and use it

To score your quiz, show your results and email them to you.
To have a Flore specialist contact you, when you ask us to.
To provide, ship and support the tests, formulas and programs you buy, including formulating a personalized probiotic from your results.
To run the portal and app, including family profiles.
To keep our services secure, prevent fraud and meet legal obligations.
To improve our quizzes and products.
For research, only if you opt in separately.
To measure our advertising, using quiz activity only, and only as described under "Who we share it with".

Your consent

We collect consumer health data only with your consent, or when it is needed to provide a product or service you asked for. On our quizzes, we ask for your consent to collect your answers before the first question. Agreeing to our Terms of Service is never treated as consent to collect or share health data.

We ask separately before we share quiz activity with advertising companies, and that choice is optional. On the gut-brain quiz it is the second box above the first question. On the peptides quiz it is the "Share" or "No thanks" choice at the bottom of the page. You can withdraw any consent at any time (see "Your rights"). Withdrawing stops future collection and sharing, but it does not undo what already happened.

Who we share it with

Service providers. Companies that handle data on our instructions and under contract, such as our store platform (Shopify), email delivery (Twilio SendGrid), payment processors, customer support tools and our hosting providers. They may not use your consumer health data for their own purposes.

Partner laboratories. When you order a test, the lab that runs it receives your sample, kit ID and what it needs to process the test and return results.

People you choose. Your health care provider or family members, when you ask us to share with them or when they manage your profile.

Legal and business transfers. When the law requires it, to protect someone's safety, or to a buyer of our business, who must follow this policy.

Advertising and analytics companies. We never send them your answers, your results, your test results, your formula, your age, or who a quiz is for. What they can receive from our quiz pages:

Gut-brain quiz (flore.com/pages/gut-brain-quiz). Like every page on our site, opening the quiz page sends a page view, including the page address, to Microsoft Advertising and Google (Google Analytics, Google Tag Manager and Google Ads), along with your browser's cookie or advertising identifiers and IP address. If you tick the optional sharing box, we also send them the names of the quiz steps you reach (such as "q3") and an event when you sign up.
Peptides quiz (quiz.flore.com/peptides). Nothing is sent to any advertising company unless you choose "Share". If you do, Microsoft Advertising receives a page view (the page address includes the word "peptides"), the names of the quiz steps you reach, and an event when you sign up.

Microsoft and Google may also use this data under their own terms: Microsoft at privacy.microsoft.com and Google at policies.google.com/privacy. Because this activity shows that you visited a health quiz, we treat it as consumer health data.

Sale

We do not sell consumer health data for money. Some state laws define a "sale" broadly enough to include sending quiz activity to advertising companies that may also use it for their own purposes. Where that applies, we send it only as described above, and you can withdraw your choice at any time.

No geofencing

We do not set up virtual boundaries around places that provide in-person health care in order to identify, track, collect data from, or send ads or messages to people there.

Your rights

Access: confirm whether we collect, share or sell your consumer health data, get a copy of it, and get a list of every third party and affiliate we have shared it with, with contact information for each.
Withdraw consent to our collection or sharing of your consumer health data.
Delete: we will delete your consumer health data, tell our service providers and any third party we shared it with to delete it, and delete it from backups within six months.
Correct inaccurate data.
We will not treat you differently for using these rights.

How to use your rights

Email [email protected] with the subject "Health Data Request" and tell us which right you want to use. You can also write to Flore Inc., Attn: Privacy, 51 W. Jackson St., Ste. 105, Joliet, IL 60432, USA. To protect your data, we confirm your identity by sending a code to the email address or phone number we have for you. An authorized agent may make a request for you with proof of authority, and a parent or guardian may make requests for a child's profile.

We respond within 45 days. If we need more time, we will tell you within those 45 days, and we may extend once by another 45 days. Requests are free up to twice a year.

Appeals

If we decline your request, we will tell you why. You can appeal by replying with the subject "Appeal", and we will answer within 45 days. If you disagree with the result, you may contact your state attorney general: in Washington, atg.wa.gov; in Connecticut, portal.ct.gov/ag; in Nevada, ag.nv.gov.

How we protect it

Only Flore staff and service providers who need consumer health data to do their work can access it. We use encrypted connections and access controls.

How long we keep it

We keep consumer health data only as long as we need it for the purposes above, or as the law requires. Then we delete it or remove what identifies you.

Children

Our quizzes and store are for adults. A parent or guardian may answer the gut-brain quiz about their child, or manage a child's profile in the app. If someone says they are under 18 and taking the quiz for themselves, the quiz stops and does not ask for contact details. We do not knowingly collect personal information directly from children under 13. If you think a child has given us information, contact us and we will delete it.

Changes

If we change this policy in a way that affects consumer health data we already hold, we will ask for your consent before using that data in the new way.

Contact

Flore Inc. · 51 W. Jackson St., Ste. 105, Joliet, IL 60432, USA · [email protected] · +1 (415) 326-4743