Privacy Policy
Flowa ("app", "we", "our") is an iOS application designed to help users track their daily wellbeing, recovery, HRV (heart rate variability), training load and overall health behaviours. This Privacy Policy explains what data is collected while using the app, how it is stored and how it is used.
By using the app, you agree to this policy.
1. Data collected
Flowa collects the following types of data to improve the user experience and provide health analysis.
1.1. Health data (HealthKit)
- HRV data
- Heart rate
- Activity duration
- Calories burned
- Workout data (from Apple Watch or HealthKit)
- Step count
This data is only read and processed with your permission.
Flowa does not share HealthKit data with third parties, does not use it for marketing and does not sell it.
1.2. Data recorded in the app
- Heart-rate measurement with the iPhone camera (PPG)
- Daily Check-in answers
- Hydration logs
- Sleep duration
- RPE / effort ratings
- Training load (ACWR) calculations
- Daily Score, Recovery, Energy and Sleep scores
1.3. Account data
- Name
- Email address
- Sign in with Apple (may be a private relay email)
- Language and appearance settings
- Subscription status (Flowa Pro / free)
1.4. Device data
- App version
- iOS version
- Notification permission status
- Crash logs in case of errors
2. Purpose of data use
Collected data is used for:
- Calculating the Daily Score and the Recovery, Energy and Sleep scores
- ACWR and training load analysis
- Creating HRV trends
- Generating personalised smart tips
- Scheduling notifications
- Flowa Pro subscription verification (RevenueCat)
- Resolving technical issues
- Improving the user experience
Flowa is not intended for medical diagnosis or treatment. The app does not replace a healthcare professional.
3. Data storage
User data is stored securely on Supabase.
Supabase:
- ISO/IEC 27001 compliant
- Encrypted data transfer (TLS)
- Role-based access control
A short-term cache may be stored locally on the device.
4. Data sharing
Flowa does not sell user data and does not share it with third parties.
Limited technical sharing takes place only with the following services:
- Apple HealthKit (within the permitted scope)
- RevenueCat (only a user ID, for subscription verification)
- Supabase (database)
- APNs (token for push notifications)
No health data is shared for advertising, marketing or third-party analysis purposes.
5. Camera use
The device camera is used for PPG-based heart-rate and HRV measurement.
- Camera images are not recorded
- They are not sent to servers
- They are used only for real-time measurement
6. Account deletion
You can permanently delete the following from the "Delete account" menu in the app:
- All account data
- HealthKit permissions
- All records on Supabase
Deletion is irreversible.
7. Data export
You can export all your data in JSON format.
8. Child safety
Flowa is not designed for users under 16 years of age.
9. Contact
For any questions: