Our Commitment: Your privacy is sacred to us. flowdays is designed with privacy at its core — your personal health data is encrypted on your device and, if you sign in, privately backed up to your own account. We never sell it, use it for advertising, or share it with third parties for their own purposes.
flowdays is a period tracking application developed and operated by 7 Steps Group ("we", "our", or "us"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use the flowdays mobile application (available on iOS and Android) and our website at flowdays.co.
By using flowdays, you agree to the collection and use of information in accordance with this policy.
⚠️ Health Data Notice: flowdays collects and processes sensitive health information related to your menstrual cycle. This data is classified as "sensitive user data" under Google Play policies and applicable privacy laws.
| Data Type | Purpose | Storage Location |
|---|---|---|
| Menstrual cycle dates | Core app functionality - tracking periods | Device + encrypted cloud backup (Firestore) |
| Discharge observations | Purity status determination | Device + encrypted cloud backup (Firestore) |
| Symptoms and notes | Personal health tracking | Device + encrypted cloud backup (Firestore) |
| Prayer/fasting preferences | Islamic guidance features | Device + encrypted cloud backup (Firestore) |
Important: Your health and cycle data is stored on your device using encrypted local storage and securely synced to Google Firebase Firestore (linked to your account) to enable backup and cross-device access. This data is associated with your account ID but is never used for advertising, profiling, or shared with third parties beyond what is described in this policy.
Web purchases: If you subscribe on our website, your payment details are collected and processed by Stripe and RevenueCat, our payment processors. We do not store your card details. We receive your email address, purchase details, and subscription status in order to provide your subscription, receipts, and support.
Marketing emails: If you enter your email on our website (for example to hear more about flowdays before subscribing), we store it with your consent timestamp and the campaign you arrived from, and use it to send you emails about flowdays. Every email includes an unsubscribe link. We use Resend to deliver these emails. We record which link brought you to our site (UTM parameters) to understand which of our content is useful.
flowdays uses the following third-party services:
| Service | Purpose | Privacy Policy |
|---|---|---|
| Google Firebase | Authentication, analytics, crash reporting | Firebase Privacy |
| Google Play Services | App distribution, in-app updates (Android) | Google Privacy |
| Apple App Store | iOS subscription payments | Apple Privacy |
| Stripe | Payment processing for purchases made on flowdays.co | Stripe Privacy |
| Google Play Store | Android subscription payments | Google Privacy |
| Apple Services | App distribution (iOS) | Apple Privacy |
| RevenueCat | Subscription management and in-app purchases | RevenueCat Privacy |
| PostHog | In-app product analytics and masked session replay (non-health usage events only; EU-hosted) | PostHog Privacy |
| Google Analytics | Website analytics (our website only) | Google Privacy |
| Resend | Sending account and support emails | Resend Privacy |
We do not sell, rent, or trade your personal information.
We may share information only in these circumstances:
flowdays lets you connect a partner (for example your spouse) and choose to share selected information with them — such as your current cycle phase, mood, or general guidance on how to support you. Partner sharing is entirely opt-in: nothing is shared until you invite a partner and choose what to share. You control exactly what your partner sees (which may appear on their home-screen widgets if they enable them), and you can change what you share or disconnect your partner at any time, which stops all further sharing.
To delete your health data:
To delete your account and all associated data:
Account deletion requests are processed within 30 days.
Depending on your location, you may have the following rights:
To exercise these rights, contact support@flowdays.co.
The data controller is 7 Steps Group, United Kingdom (contact: support@flowdays.co).
Lawful bases. We process your data on the following bases: performance of a contract (to provide the app and your account), legitimate interests (to secure, maintain and improve the app using non-health usage analytics), consent (for optional marketing and, where applicable, location), and legal obligation (e.g. retaining tax records).
Special-category (health) data. Your menstrual and related health data is "special category" personal data under Article 9 of the UK/EU GDPR. We process it only on the basis of your explicit consent, which you give when you choose to log this data and (optionally) back it up. You can withdraw that consent at any time by deleting the data or your account.
International transfers. Where your data is transferred outside the UK/EEA (for example to Google/Firebase infrastructure in the United States), we rely on appropriate safeguards such as the UK International Data Transfer Agreement, EU Standard Contractual Clauses, and applicable adequacy decisions.
Right to complain. If you are in the UK, you can lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk. If you are in the EEA, you may complain to your local data protection supervisory authority. We would appreciate the chance to address your concern first.
California residents: we do not "sell" or "share" your personal information as those terms are defined under the CCPA/CPRA.
flowdays is intended for users aged 13 and above. We do not knowingly collect information from children under 13, or under the minimum age of digital consent in your country — 13 in the UK, and up to 16 in some EU countries. If you are between 13 and 18, please review this policy with a parent or guardian. If you believe a child under the minimum age has provided us with personal information, please contact us immediately at support@flowdays.co and we will delete such information.
flowdays is operated from the United Kingdom. Your information may be transferred to and processed in countries outside your residence. We ensure appropriate safeguards are in place for such transfers in compliance with applicable laws.
We may update this Privacy Policy from time to time. We will notify you of material changes by:
If you have questions about this Privacy Policy or our data practices:
Google Play Users: This privacy policy is provided in compliance with Google Play's User Data policy requirements. For questions about data collected through Google Play, please also refer to Google's Privacy Policy.
← Back to Home