EN
FlowParent

PRIVACY POLICY — FlowParent

Version 1.1 — Last updated: 4 May 2026

Note: This policy applies to the closed beta phase. Before any public launch, it will be submitted to a data protection lawyer for final review and may be extended. You will be notified in the app of any material changes.

1. DATA CONTROLLER

Fabian Sponsel
Hagenholzstr. 84, 8050 Zurich, Switzerland
Email: fabian.sponsel@hotmail.de

Sole point of contact for all data protection matters (access, rectification, erasure, data export, complaints). No separate Data Protection Officer is designated, as the processing does not constitute systematic large-scale monitoring.

2. DATA WE PROCESS

a) Account data (server)

Email address, hashed password (bcrypt via Supabase Auth, never visible in plaintext), language preference (de, en, es, fr, it, pl, pt, ru, tr). In our application databases you are not stored under your email but under a pseudonymous identifier (HMAC-SHA256-derived pseudo_id) — see Section 7 (Data Security).

b) Profile data (server)

Display name (alias permitted), gender, number and age groups of children, resource and flow activities, number of support persons.

c) Health and sensitive data — special category under Art. 9 GDPR (server)

Emotional exhaustion state (energy level: Green/Yellow/Red), journal entries on emotional state (free text). Processing exclusively on the basis of your explicit consent during onboarding. (Cycle and breastfeeding data: see d.)

d) Health data — local storage, derived use for AI

Menstrual cycle data (cycle length, period start markers) and breastfeeding status are stored exclusively in encrypted form in local app storage (Hive) on your device — this raw data is not kept in our database. For the AI-powered suggestions and analyses, a derived value is computed on your device (e.g. your current cycle phase or a cycle day) and — only with your explicit consent — transmitted via our server to Anthropic (USA) to tailor the suggestions to your situation. This derived value is stored neither in our database nor at Anthropic; Anthropic does not use it for model training.

e) Energy history (server)

Daily entries with energy level, drain tags (e.g. sleep deprivation, stress), notes, timestamps.

f) AI feedback (server)

Ratings of suggestions (thumbs up/down), communication style preferences, saved favourites and analyses.

g) Family data (server)

Membership in a family group (8-character invite code), current energy status (visible to family members with your consent), personal messages in family banners. Your display name (see b) is shown to the other members of your family group so they can tell whose status they are seeing.

h) Device data (server, optional)

Push token (FCM) for notifications — only if you enabled push notifications. Platform (Android/iOS/Web).

i) Server logs

IP address, User-Agent, timestamps, and HTTP status codes of API calls. Maximum retention: 30 days. Purpose: IT security and abuse detection.

j) Error telemetry

Stack traces and technical context data on app crashes or backend errors are sent to Sentry (see Section 4) — without any personal content from your journal entries.

3. PURPOSES AND LEGAL BASIS

a) Contract performance (Art. 6(1)(b) GDPR)

Providing core app functions: user account, energy history, family feature, push notifications.

b) Explicit consent (Art. 6(1)(a), Art. 9(2)(a) GDPR / Art. 31(1) Swiss DPA)

Processing of health data (exhaustion state, cycle, breastfeeding status) and transmission of profile data to the Claude API (Anthropic) for personalised suggestions. You may withdraw these consents at any time (Settings → Privacy → Manage consents).

c) Legitimate interest (Art. 6(1)(f) GDPR)

Technical security measures, error logging without personal content, abuse prevention.

4. PROCESSORS AND THIRD-PARTY RECIPIENTS

We use the following service providers as data processors. With each provider a Data Processing Agreement (DPA) under Art. 28 GDPR is in place or the respective standard data protection terms have been activated.

Note: Google Analytics / Google Tag Manager / Firebase Analytics are explicitly NOT used. The app uses no tracking cookies or third-party advertising IDs.

5. INTERNATIONAL DATA TRANSFERS

Anthropic (USA), Render (USA), Resend (USA — though physical mail sending is from EU region Ireland), and Sentry (USA) each process portions of your data outside the European Economic Area. In all cases the transfer is secured by EU Standard Contractual Clauses (SCC) pursuant to Art. 46(2)(c) GDPR / Art. 16 Swiss DPA. A copy of the applicable clauses is available upon request.

Supabase (database) and Firebase Hosting process your data within the EU / Switzerland — no third-country transfer.

6. RETENTION PERIODS

Your data is stored as long as your account is active. Upon account deletion (Settings → Delete all data), all personal data is immediately and irrevocably erased. No archiving takes place. Local data on your device is fully removed as well.

7. DATA SECURITY

We implement the following technical and organisational measures (Art. 32 GDPR / Art. 8 Swiss DPA):

8. YOUR RIGHTS

You have the right to:

To exercise your rights, contact: fabian.sponsel@hotmail.de

9. RIGHT TO LODGE A COMPLAINT

You have the right to lodge a complaint with your supervisory authority:

10. CHANGES TO THIS POLICY

For material changes affecting your rights or requiring new consents, you will be notified in the app and asked to consent again. The current version is always accessible under Settings → Privacy.

Contact: fabian.sponsel@hotmail.de