🌸 Flow Ai - Privacy Policy

Last Updated: November 1, 2024

Introduction

Flow Ai ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, store, and protect your personal information when you use our menstrual cycle tracking application.

Information We Collect

Health and Personal Data

• Menstrual Cycle Information: Period start/end dates, cycle length, flow intensity
• Symptoms and Mood: Physical symptoms, emotional state, energy levels
• Biometric Data (optional, with your consent): Heart rate, body temperature, sleep patterns accessed via Apple HealthKit on iOS
• Lifestyle Data: Exercise, water intake, medications, notes

Account Information

• Email Address: For account creation and authentication
• Display Name: For personalization within the app
• Profile Settings: App preferences, notification settings

Technical Data

• Device Information: Device type, operating system version
• Optional Local Analytics: Limited app-usage events stored locally and disabled by default
• Crash Reports: Technical logs for debugging (no personal health data included)

How We Use Your Information

Primary Uses

• Cycle Predictions: AI-powered algorithms analyze your data to predict periods, ovulation, and fertility windows
• Health Insights: Generate personalized insights and recommendations
• Symptom Tracking: Help you identify patterns and correlations
• Reminders: Send notifications for period predictions, medication, or custom reminders

Data Storage and Security

Local Storage

• Your health data is stored locally on your device by default
• Local data relies on application and operating-system storage protections
• You control access via device biometric authentication (Face ID, Touch ID, Fingerprint)

Cloud Backup (Optional)

• If enabled, cloud data location depends on the configured Firebase project resources
• Firebase services may process data in configured service locations
• All cloud data is encrypted both in transit (TLS) and at rest
• Access to service data is restricted to authorized operational purposes

HealthKit Integration

• Apple HealthKit access is optional and controlled through iOS settings. The current production release does not use HealthKit data for advertising.
• We request only the minimum necessary permissions
• You can revoke HealthKit access at any time in iOS Settings

Data Sharing

We Do NOT:

• ❌ Sell your personal or health data to third parties
• ❌ Share your data with advertisers
• ❌ Use your health data for marketing purposes
• ❌ Share identifiable health information with partners

Limited Service-Provider Processing:

• Optional analytics are disabled by default and are not used for health-data advertising or profiling
• ✅ Crash reports with no personal information
• ✅ App performance metrics to improve user experience

Legal Requirements:

We may disclose information if required by law, court order, or government request.

Your Rights (GDPR & CCPA Compliance)

You Have the Right To:

• Access: Request a copy of all data we have about you
• Export: Download your data in JSON, CSV, or PDF format (available in Settings)
• Delete: Permanently delete your account and all associated data
• Rectify: Correct any inaccurate information
• Portability: Transfer your data to another service
• Withdraw Consent: Disable cloud sync, HealthKit access, or analytics at any time

How to Exercise Your Rights:

• In-App: Settings → Data & Privacy → Export Data / Delete Account
• Email: privacy@flowai.app (response within 30 days)

Data Retention

• Active Accounts: Data retained as long as your account is active
• Account Deletion: Deletion begins after verification. See account deletion instructions.
• Inactive Accounts: Accounts inactive for 3+ years may be archived (you'll be notified)

Children's Privacy

Flow Ai is intended for users 13 years and older. We do not knowingly collect data from children under 13. If you believe we have collected information from a child under 13, contact us immediately at privacy@flowai.app.

Third-Party Services

Services We Use:

• Firebase (Google): Authentication, cloud storage (EU servers) - Privacy Policy
• Apple HealthKit: Biometric data integration (iOS only) - Privacy Policy
• Google AdMob: Non-personalized ads (no health data shared) - Privacy Policy

AI and Machine Learning:

• External AI processing of health values is not enabled in the current production release
• External AI processing is disabled in the current production release
• Health data is not used to train external AI models in the current production release

International Data Transfers

• Cloud processing locations depend on the configured service resources
• US users: Data may be stored on US servers (with your consent)
• We comply with EU-US Data Privacy Framework and Standard Contractual Clauses (SCCs)

Changes to This Policy

We may update this Privacy Policy to reflect changes in our practices or legal requirements. We will:

• Notify you via email or in-app notification for significant changes
• Post the updated policy with a revised "Last Updated" date
• Allow you to review and accept changes before continued use

Regulatory Compliance

Flow Ai complies with:

• Privacy requests are handled according to applicable data-protection laws
• ✅ CCPA (California Consumer Privacy Act)
• Flow AI is a consumer wellness application and does not claim HIPAA-covered-entity status
• ✅ Apple App Store Review Guidelines (Section 5.1 Privacy)
• ✅ Google Play Developer Policy (User Data)

Your Consent

By using Flow Ai, you consent to this Privacy Policy. You can withdraw consent at any time by:

1. Disabling cloud sync in Settings
2. Revoking HealthKit permissions in iOS Settings → Privacy → Health
3. Deleting your account in Settings → Account & Security → Delete Account

---