Flo class action: open cases and how to join

What the Flo cases allege

The core allegation across the Flo lawsuits is straightforward: users typed in some of the most sensitive information a person can share with an app — menstrual cycles, sexual activity, pregnancy attempts, symptoms — and that data was allegedly transmitted to third-party analytics and advertising SDKs, including tools from Facebook and Google, despite privacy promises to the contrary.

Plaintiffs argue this violated state privacy statutes (notably California's CIPA and the Confidentiality of Medical Information Act), consumer protection laws, and Flo's own privacy policy. Some complaints also name Facebook, Google, and analytics vendor Flurry as co-defendants for allegedly receiving the data.

The Federal Trade Commission reached a separate settlement with Flo in 2021 requiring notice to users and an independent review of its privacy practices, but that federal action didn't pay consumers directly. To understand how these private cases work alongside regulatory actions, see our primer on what a class action lawsuit is.

Current status of the litigation

As of mid-2026, the highest-profile private case is Frasco v. Flo Health, Inc., pending in the U.S. District Court for the Northern District of California. It has moved through class certification and pretrial motions, with reports that portions have proceeded toward trial while other claims and defendants have been narrowed, settled separately, or sent to arbitration.

Some named defendants have reportedly resolved claims individually. Flo itself has continued to contest liability publicly. Because status changes quickly — motions, appeals, and preliminary settlement approvals can flip the picture in weeks — treat any dollar figure or deadline you see on social media with skepticism unless it's on a court-approved administrator site.

If you want a working overview of how these stages fit together (certification, notice, opt-out window, final approval, distribution), our walkthrough on how a class action lawsuit works covers the sequence in plain English.

Who is in the class

Class definitions in the Flo litigation have generally covered U.S. residents who used the Flo app during a defined class period (roughly 2016 through 2019 in the main California case, though exact dates depend on the operative complaint and any certification order). Subclasses may exist for California residents under state-specific privacy laws.

You do not need to remember exactly when you first opened the app. If notice goes out, the administrator will usually match users through Flo's account records or app identifiers and email affected people directly. You can also self-identify at claim time.

How to join or file a claim

You don't have to hire a lawyer or sign up in advance. In U.S. class actions, if a class is certified you're automatically included unless you formally opt out. If a settlement is reached, you file a claim during the claims window — usually a simple online form on the administrator's site. Our guide on how to file a class action claim walks through the standard fields.

1. Watch for a legitimate notice email from the court-appointed administrator (not Flo directly, and never with a payment request).
2. Confirm you're in the class window using your Flo account email or install date if you have it.
3. Decide: file a claim (stay in and get paid), do nothing (stay in, no payment, keep future rights limited by the release), or opt out (preserve your right to sue individually).
4. File the claim form online before the deadline; keep your confirmation number.
5. Choose payout method — many privacy settlements offer PayPal, Venmo, ACH, or check.
6. Track the case; distribution usually happens 3–9 months after final approval, sometimes longer if there are appeals.

Realistic payout expectations

Nobody can promise a dollar figure before final approval — but you can set a reasonable range by looking at comparable privacy settlements. App and biometric privacy cases usually pay $10 to a few hundred dollars per claimant when the class is large and proof isn't required. Cases with smaller classes or unusually sensitive data can pay more; cases with tens of millions of class members often pay less.

For context, look at the mix on our settlements directory: Instagram's biometric case (no proof) sits at one end of the range, while data-breach cases with documented losses can pay $50 to several hundred. For more on the no-documentation tier specifically, see how much no-proof settlements pay.

Attorneys' fees (typically capped around 25–33% of the fund), administration costs, and service awards to named plaintiffs come out of the fund before per-person payments are calculated.

How to spot fake Flo settlement emails

Scammers follow the news. Any high-profile privacy case attracts phishing emails that look like settlement notices. Real notices from a court-appointed administrator will never ask for your Social Security number up front, a payment, gift cards, or your Flo password.

Legitimate signals: the sender domain matches a real administrator (Epiq, Kroll, Angeion, JND, Verita, Simpluris, Rust); the email references the specific case caption and court; there's a claim ID; and the claim site uses HTTPS with the administrator's branding, not Flo's. If you're unsure, don't click — search the case name on ClassAction.org or the administrator's own domain and navigate there directly.

If no Flo settlement is open when you check

Litigation is slow. A case can be active on the docket for years before any money moves. If you check today and no Flo claim form is live, that's normal — you have a few options.

First, use a class membership check to see whether you appear on notice lists. Second, browse open settlements you may already qualify for right now (privacy, hidden fees, biometric, data breach). Third, let Owed monitor for you: we track dockets and administrator sites, then email you the moment a Flo settlement opens with a claim form and deadline — no scrolling required. Our eligibility check on the onboarding page takes about 30 seconds.

This kind of quiet monitoring matters because notice programs miss people all the time — old email addresses, spam filters, deleted apps. You shouldn't have to hear about your own settlement from a stranger on TikTok.

Your legal rights and what you're giving up

Filing a claim in a certified settlement means you accept the release — a clause that gives up your right to sue the defendant separately for the claims covered by the case. For most people, this is a fair trade: individual privacy suits are expensive and slow, and the settlement gets you at least something.

If you believe your damages are much larger than the average payout (for example, you have unique proof of harm), you can opt out by the deadline and pursue your own case. If you disagree with the settlement's terms, you can file an objection with the court. Both options require action by specific dates in the notice.

This post isn't legal advice. For the plain-English version of federal class-action rules, see Rule 23 of the Federal Rules of Civil Procedure. If your situation is unusual, talk to a consumer-protection attorney before opting out or objecting.

Glossary

Class period

The date range during which someone must have used Flo to be included in the class.

Class certification

The court order deciding a case can proceed as a class action and defining who's in the class.

Opt out

Formally excluding yourself so you keep the right to sue individually.

Release

Language in a settlement giving up specified future claims against the defendant.

Administrator

The independent company (Epiq, Kroll, Angeion, etc.) that runs notice, claims, and payments.

CIPA

California's Invasion of Privacy Act, often cited in app data-sharing cases.

FAQ