Our Commitment: Your privacy is sacred to us. flowdays is designed with privacy at its core - your personal health data stays on your device and is never transmitted to our servers.
1. Introduction
flowdays ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and safeguard your information when you use our period tracking application and website.
We understand that menstrual health data is deeply personal, which is why we've built flowdays with a privacy-first approach.
2. Information We Collect
2.1 Information You Provide
- Account Information: When you purchase flowdays, we collect your email address, name, and payment information through our secure payment processor (Stripe).
- Communication: If you contact us for support, we may collect your email address and any information you choose to provide.
2.2 Health Data (Stored Locally Only)
flowdays collects health-related information to provide its core functionality:
- Menstrual cycle dates and patterns
- Discharge observations
- Symptoms and notes
- Prayer and fasting guidance preferences
Important: All health data is stored locally on your device only. We do not have access to, collect, or store your menstrual health data on our servers. Your cycle information never leaves your device.
2.3 Automatically Collected Information
When you visit our website, we may collect:
- Browser type and version
- Pages visited and time spent
- Referring website
- General location (country/region, not precise location)
3. How We Use Your Information
We use the information we collect to:
- Process your purchase and provide access to flowdays
- Send you important updates about the app
- Respond to your support requests
- Improve our website and services
- Send marketing communications (only if you've opted in)
4. Data Storage and Security
4.1 Local Data Storage
Your health data is encrypted and stored locally on your device using industry-standard encryption. We cannot access this data, and it is not backed up to our servers.
4.2 Account Data
Your account information (email, purchase history) is stored securely using:
- Firebase (Google Cloud) for authentication
- Stripe for payment processing (PCI-DSS compliant)
- 256-bit SSL encryption for all data transmission
5. Payment Processing
We use Stripe to process payments. When you make a purchase:
- Your payment card details are sent directly to Stripe
- We never see or store your full card number
- Stripe is PCI-DSS Level 1 certified (the highest level of security)
For more information, see Stripe's Privacy Policy.
6. Data Sharing
We do not sell, trade, or rent your personal information to third parties. We may share information only in these limited circumstances:
- Service Providers: With trusted partners who help us operate our business (e.g., Stripe for payments, Firebase for authentication)
- Legal Requirements: If required by law or to protect our rights
- Business Transfers: In connection with a merger or acquisition (you would be notified)
7. Your Rights
You have the right to:
- Access: Request a copy of the personal data we hold about you
- Correction: Request correction of inaccurate data
- Deletion: Request deletion of your account and associated data
- Portability: Export your health data from the app at any time
- Opt-out: Unsubscribe from marketing emails at any time
To exercise these rights, contact us at support@flowdays.co.
8. Data Retention
- Health Data: Stored on your device until you delete it or uninstall the app
- Account Data: Retained for as long as your account is active, plus 7 years for legal/tax purposes
- Marketing Data: Until you unsubscribe
9. Children's Privacy
flowdays is intended for users aged 13 and above. We do not knowingly collect information from children under 13. If you believe a child has provided us with personal information, please contact us.
10. International Users
flowdays is operated from the United Kingdom. If you are accessing our services from outside the UK, please be aware that your information may be transferred to, stored, and processed in the UK where our servers are located.
11. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the "Last updated" date.
12. Contact Us
If you have any questions about this Privacy Policy or our data practices, please contact us:
← Back to Home