1. Introduction

flowdays is a period tracking application developed and operated by 7 Steps Group ("we", "our", or "us"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use the flowdays mobile application (available on iOS and Android) and our website at flowdays.co.

By using flowdays, you agree to the collection and use of information in accordance with this policy.

2. Sensitive User Data Disclosure

2.1 Types of Sensitive Data Collected

Data Type	Purpose	Storage Location
Menstrual cycle dates	Core app functionality - tracking periods	Device + encrypted cloud backup (Firestore)
Discharge observations	Purity status determination	Device + encrypted cloud backup (Firestore)
Symptoms and notes	Personal health tracking	Device + encrypted cloud backup (Firestore)
Prayer/fasting preferences	Islamic guidance features	Device + encrypted cloud backup (Firestore)

Important: Your health and cycle data is stored on your device using encrypted local storage and securely synced to Google Firebase Firestore (linked to your account) to enable backup and cross-device access. This data is associated with your account ID but is never used for advertising, profiling, or shared with third parties beyond what is described in this policy.

3. Information We Collect

3.1 Information You Provide Directly

• Account Information: Email address, name (optional), when you create an account or make a purchase
• Payment Information: Processed securely by Stripe - we never see or store your full card details
• Support Communications: Information you provide when contacting customer support

3.2 Information Collected Automatically

• Device Information: Device type, operating system version, unique device identifiers
• App Usage Data: Features used, app crashes, performance data (collected anonymously via Firebase Analytics)
• Website Analytics: Pages visited, referring site, browser type (via Google Analytics)

4. Third-Party Services

flowdays uses the following third-party services:

Service	Purpose	Privacy Policy
Google Firebase	Authentication, analytics, crash reporting	Firebase Privacy
Google Play Services	App distribution, in-app updates (Android)	Google Privacy
Stripe	Payment processing	Stripe Privacy
Apple Services	App distribution (iOS)	Apple Privacy
RevenueCat	Subscription management and in-app purchases	RevenueCat Privacy

5. How We Use Your Information

• To provide and maintain the flowdays app
• To process your purchase and grant app access
• To send important updates about the app (security, features)
• To respond to your support requests
• To improve our app and fix bugs
• To send marketing communications (only with your consent)

6. Data Sharing and Disclosure

We do not sell, rent, or trade your personal information.

We may share information only in these circumstances:

• Service Providers: With trusted partners who help operate our services (listed in Section 4)
• Legal Requirements: If required by law, court order, or government request
• Safety: To protect the rights, property, or safety of our users
• Business Transfers: In connection with a merger or acquisition (you would be notified)

7. Data Security

• Health Data: Encrypted using AES-256 encryption and stored locally on your device only
• Data Transmission: All data transmitted to our servers uses TLS 1.3 encryption
• Payment Data: Handled by PCI-DSS Level 1 certified payment processor (Stripe)
• Account Data: Stored in secure, access-controlled cloud infrastructure (Firebase)

8. Data Retention and Deletion

8.1 Retention Periods

• Health Data: Stored on your device until you delete it or uninstall the app
• Account Data: Retained while your account is active, then deleted within 30 days of account deletion request
• Payment Records: Retained for 7 years for legal/tax compliance

8.2 How to Delete Your Data

To delete your health data:

• Open flowdays app → Settings → Delete All Data
• Or simply uninstall the app (all local data is permanently deleted)

To delete your account and all associated data:

• Open flowdays app → Settings → Account → Delete Account
• Or email support@flowdays.co with subject "Delete My Account"

Account deletion requests are processed within 30 days.

9. Your Rights

Depending on your location, you may have the following rights:

• Access: Request a copy of personal data we hold about you
• Correction: Request correction of inaccurate data
• Deletion: Request deletion of your data (see Section 8.2)
• Portability: Export your health data from the app (Settings → Export Data)
• Opt-out: Unsubscribe from marketing emails anytime
• Withdraw Consent: Withdraw previously given consent

To exercise these rights, contact support@flowdays.co.

10. Children's Privacy

flowdays is intended for users aged 13 and above. We do not knowingly collect information from children under 13. If you believe a child under 13 has provided us with personal information, please contact us immediately at support@flowdays.co and we will delete such information.

11. International Data Transfers

flowdays is operated from the United Kingdom. Your information may be transferred to and processed in countries outside your residence. We ensure appropriate safeguards are in place for such transfers in compliance with applicable laws.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by:

• Posting the new policy on this page with an updated "Effective Date"
• Sending an email notification for significant changes
• Displaying an in-app notification

13. Contact Us

If you have questions about this Privacy Policy or our data practices:

• Developer: 7 Steps Group
• Email: support@flowdays.co
• Website: flowdays.co

Google Play Users: This privacy policy is provided in compliance with Google Play's User Data policy requirements. For questions about data collected through Google Play, please also refer to Google's Privacy Policy.

← Back to Home