Privacy Policy

Last updated: 29 August 2026

Who we are

FlowSeit Ltd, a company registered in England & Wales, is the data controller for personal data processed through the FlowSeit app and website. Privacy questions and rights requests can be sent to flowseitapp@gmail.com.

Information we process

Depending on the features you choose to use, FlowSeit processes:

• Account and profile information: your Supabase account identifier, email address, authentication methods, username, profile settings, and account timestamps.
• Meditation and wellness information: sessions, durations, goals, before-and-after check-ins, streaks, progress, and insights produced from those records.
• Optional wearable information: Garmin or Android Health Connect information you expressly authorise, such as sleep, heart rate, heart-rate variability, respiration, oxygen saturation, stress, and recovery context. Health Connect access can be withdrawn in Android settings.
• Billing information: product, entitlement, renewal, purchase, expiry, and restoration status supplied by Google Play and RevenueCat. FlowSeit does not receive your full card or payment details.
• Technical and security information: app version, platform, release track, crash or diagnostic data, and a randomly generated app installation identifier used for access control and Premium Preview abuse prevention.
• Community and moderation information: username, display name, biography, avatar, friendships, fixed-template nudges, block relationships, current Terms acceptance version and time, and reports submitted about profiles. Reports include the reporting and reported account identifiers while those accounts exist, a reason, status, and timestamps.
• Website and early access information: email address, consent, selected platform, submission timestamp, basic referral parameters, and privacy-conscious aggregate Vercel Web Analytics.

We do not sell personal data, use health information for advertising, or use third-party advertising trackers.

How and why we use information

• To create and secure your account, provide sessions, synchronise your progress, and generate requested insights.
• To connect optional Garmin or Health Connect features after you grant permission.
• To provide, verify, restore, and support Premium purchases and the no-card Premium Preview.
• To prevent repeated Preview redemption, automated account creation, tampered requests, fraud, and unauthorised access.
• To operate notifications, diagnose faults, protect the service, and answer support requests.
• To provide social features, enforce blocks, receive and review reports, protect users, and apply our Community Guidelines.
• To manage early access requests and send product email where you have consented.

Premium Preview abuse prevention

The seven-day Premium Preview is limited to one redemption per FlowSeit account and app installation during the anti-abuse retention period. The app sends a random installation identifier to the authenticated FlowSeit backend. Before placing it in the separate Preview ledger, Railway converts it into a one-way keyed pseudonymous value; the raw identifier is not stored in that ledger.

The ledger contains the pseudonymous installation value, Preview start and expiry times, claim status, and your FlowSeit account UUID while the account exists. If you delete your account, we remove the UUID link but retain the pseudonymous redemption marker for up to three years from redemption. This prevents delete-and-register or multiple-email abuse. It is not used for advertising, location tracking, or cross-company profiling.

Where Google enables the feature for FlowSeit, we may also use the Google Play Integrity API and its privacy-preserving Device Recall feature. FlowSeit will use one limited device recall value to indicate that a Preview was redeemed. Google states that Device Recall values may remain for up to three years after their last read or write. FlowSeit does not receive a hardware identifier from Device Recall. Device Recall is used only for security, fraud, abuse, and unauthorised-access prevention.

Preview eligibility is an automated service decision, but it does not produce legal or similarly significant effects: an ineligible user can continue using FlowSeit Free or purchase Premium. If you believe a refurbished, shared, or transferred device was classified incorrectly, contact us for human review.

Community safety and moderation

Profiles can be visible to other authenticated users according to your privacy settings. FlowSeit nudges use fixed templates; users cannot send free-text nudge messages. When you block someone, the service stores the block relationship and removes the FlowSeit friendship, pending requests, and prior nudges between the two accounts. The blocked accounts are then hidden from one another in supported social discovery and interaction paths.

Profile reports are visible only to authorised moderation or service personnel, not to the reported user or other app users. We use them to investigate safety and Terms violations, apply proportionate restrictions, respond to appeals, and meet legal duties.

Legal basis

• Contract: providing the account, sessions, synchronisation, purchases, and features you request.
• Consent: optional marketing email and optional wearable/health permissions. Where health information is special-category data, we rely on your explicit consent. You can withdraw permissions without deleting your account.
• Legitimate interests: service security, fraud and repeated-trial prevention, diagnostics, support, and protecting users and FlowSeit. We limit the information and retention used for these purposes.
• Legal obligations: records we must keep for tax, accounting, dispute, or regulatory purposes.

Service providers and international transfers

We use service providers only where needed to operate FlowSeit. These include Supabase for authentication and application data, Railway for backend hosting, RevenueCat and Google Play for billing and entitlements, Google for optional Google sign-in, Play services and app integrity, Garmin for an optional wearable connection, Expo for app updates and notifications, Sentry for configured diagnostics, Vercel for website hosting and aggregate analytics, and Brevo for consented email delivery.

Some providers process information outside the UK or EEA. Where required, we rely on adequacy regulations, approved contractual safeguards, and provider security commitments.

Retention and account deletion

• Account and app data is kept while your account is active and is deleted or anonymised when you use Delete Account, subject to limited legal or security exceptions.
• The pseudonymous Premium Preview redemption marker is retained for up to three years from redemption, even after account deletion, solely for abuse prevention.
• Billing transaction records may be retained as required for accounting, disputes, and purchase restoration.
• Block records remain while needed to enforce the block or until the blocking user removes it. Safety reports are normally retained for up to 24 months and may be de-identified when an account is deleted. We may retain them longer where required for an active safety investigation, legal claim, or legal reporting duty.
• Terms and Community Guidelines acceptance records are kept while the account is active and where reasonably needed to establish the version accepted.
• Early access email is kept until you unsubscribe, request deletion, or one year after public launch, whichever comes first.
• Operational logs and diagnostics are retained only for the period needed for security and fault investigation.

Your rights

Under UK and EU data-protection law, where applicable, you may ask to access, correct, delete, or export your personal data, or object to or restrict processing. You may withdraw consent at any time. Some requests can be limited where a short, proportionate record is necessary to prevent fraud or comply with law; we will explain any such decision. Contact flowseitapp@gmail.com. You may also complain to the UK Information Commissioner’s Office at ico.org.uk.

Security

We use access controls, encrypted transport, server-side authorisation, pseudonymisation, and restricted service credentials. No system can guarantee absolute security, but we design FlowSeit to minimise both the amount of information collected and who can access it.

Cookies

This site does not set advertising cookies. Vercel may set strictly necessary security cookies and operate privacy-conscious web analytics for aggregate site measurement.

Children

FlowSeit is not directed to children. If you believe a child has provided personal information without appropriate permission, contact us so we can investigate and remove it.

Changes to this notice

If we change this policy, we will update the "Last updated" date above. We will provide additional notice where a material change requires it.

Contact

Privacy questions: flowseitapp@gmail.com