Legal

Privacy Policy

Last updated: August 11, 2026

Introduction

DROPFLO, Inc. ("we", "us", "our") operates the DROPFLO mobile application and website. This Privacy Policy explains how we collect, use, store, and protect your information when you use our services. By using DROPFLO, you agree to the practices described in this policy.

Information We Collect

We collect the following categories of information to provide and improve the DROPFLO service:

• Account data — your name and email address, provided via Apple Sign-In, Google Sign-In, or direct registration.
• Body composition data — weight, skeletal muscle mass, and body fat percentage, entered manually or synced from a compatible smart scale.
• Health and fitness data from Apple Health — resting heart rate, heart rate variability (HRV), sleep analysis, and step count. This data is accessed read-only and only when you explicitly grant permission through Apple HealthKit.
• Workout session logs — the workouts you complete, including exercise type, duration, and date.
• Device identifiers — used solely to deliver push notifications to your device.

Apple Health / HealthKit Disclosure

How We Use Your Data

• Generate personalized daily training prescriptions and readiness scores.
• Track your streak, adherence, and progress over time.
• Send push notifications relevant to your training schedule when you opt in.
• Improve the DROPFLO service through anonymized, aggregated usage analytics.

We do not sell your data to third parties. We do not use your health data for advertising.

Studio and Employer Challenges

DROPFLO may allow you to participate in a challenge organized by a studio or employer. Participation does not provide that organization with access to your HealthKit data, body composition data, individual workout data, or other personal health metrics. DROPFLO does not provide studio partners with a member analytics dashboard or individual member data through challenge participation.

Data Storage and Security

Your data is stored on encrypted systems and transmitted over HTTPS/TLS. We implement industry-standard security measures to protect your information from unauthorized access, disclosure, or loss.

Data Retention and Deletion

We retain your data for as long as your account is active. You may request deletion of your account and all associated personal data at any time by emailing support@getyourflo.app. Upon confirmed deletion, all personal data is permanently removed from our systems within 30 days.

Third-Party Services

DROPFLO integrates with the following third-party services to deliver core functionality:

• Apple Sign-In and Google Sign-In — used for authentication only. We receive only your name and email.
• Apple HealthKit — health and fitness data is accessed exclusively through Apple HealthKit. No third-party wearable aggregation service is used. HealthKit data is never shared with advertisers or used for any purpose other than delivering your personalized DROPFLO experience.

These services operate under their own privacy policies. We encourage you to review them.

Children's Privacy

DROPFLO is not intended for users under the age of 13. We do not knowingly collect personal information from children under 13. If we become aware that a child under 13 has provided us with personal data, we will delete it promptly.

Changes to This Policy

We may update this Privacy Policy from time to time. The latest version will always be available at getyourflo.app/privacy. Continued use of DROPFLO after changes constitutes your acceptance of the updated policy.

Contact

Questions about this Privacy Policy? Contact us at support@getyourflo.app.