What we hold, and what we will never touch.

Everything Flowdayz stores about you falls into one of these. Nothing else is collected, and nothing here is optional dressing: each line exists because a feature you use needs it, or because you agreed to it.

During setup Flowdayz asks why you want to start now, and you can answer in your own words. Those words never leave your device. They are not uploaded, not synced to your other phone, not backed up to us, and not visible to anyone at Flowdayz.

When your answer is one of the offered choices rather than something you typed, that choice does sync, because it is one of the inputs that builds your plan. Anything you wrote yourself stays on the phone that heard it, and is gone when you delete the app.

This is a deliberate limit rather than a promise about our intentions. The field is not in the table the app syncs to, so there is no version of a mistake, a policy change, or a subpoena that produces it.

Flowdayz ships with product analytics disabled. No usage event leaves your phone unless you switch it on, and switching it off again stops the next one.

If you do turn it on, what is sent is a fixed list of sixteen events, with the platform, app version and your time zone. The app opened, a plan was generated, an action was started, completed or skipped, a day was finished, and so on. The service that receives them rejects anything it does not recognise. Names, email addresses, free text, reflection content, check-in answers, scores, mood and health details are refused at the door rather than filtered out later.

Analytics exists to answer whether the product works, meaning whether people who generate a plan come back and keep an action. It is never used to target advertising, because Flowdayz does not advertise to its members, and it is never joined back to your wellbeing answers.

This website is a separate matter and it is worth being exact about, because the heading above could be read as covering it. Pages here, including the blog, record a small number of anonymous events of their own: that a page was viewed, which page, and where the visit came from if you arrived by a link or a search. These are counted against a random identifier stored in your browser, never against your name or your email, and they run on Flowdayz’s own servers. There is no third-party analytics script on this site, so no other company sees your visit. Those events fall under the same retention rule in section 6 and the same unlinking in section 8.

Some of these are worth stating even though no law demands them, because a wellbeing product could plausibly do all of them:

• We never sell or rent your data, to anyone, at any price.
• We run no third-party advertising or tracking network on this website or in the app. No pixels, no ad SDKs, no cross-site profiles.
• We never make a claim about your sleep, mood, or health from what you logged. The numbers Flowdayz shows you describe behaviour only: minutes put in, days kept, actions completed, and nothing more.
• We never read your reflections to build your plan, or for marketing.
• We never share your data with an employer, insurer, or anyone else who might make a decision about you with it.
• We do not make automated decisions that produce legal effects for you. Your plan adapts, and it only ever changes after you confirm it.

Running Flowdayz needs a handful of companies, and each one only receives what its job requires. This is the complete list.

Your account, your plan and your progress are stored in the EU. The database and file storage run in an EU region, so the data that says most about you does not leave it.

Payment and email necessarily involve companies based in the United States, and hosting may serve a request from outside the EU. Where that happens the transfer relies on the European Commission’s standard contractual clauses. We will also hand over data where a law requires it, and we will tell you when we are allowed to.

Your account data, meaning your plan, your progress and your reflections, is kept for as long as you have an account, because it is the product. It goes when you go, as described in section 8.

Product analytics events expire automatically 15 months after they are recorded. That is enforced by the database rather than by someone remembering to run a cleanup.

Billing and tax records are kept for as long as tax law requires, which is longer than your account lives and is not something we can shorten on request.

Under the GDPR you can ask us to:

• tell you what we hold about you, and give you a copy;
• correct anything that is wrong;
• delete it;
• give it to you in a portable format, or send it somewhere else;
• stop or restrict a particular use;
• stop relying on a consent you gave for analytics, wellbeing check-ins, or marketing email. You can withdraw any of them at any time, without affecting anything done before you withdrew it.

Email mail@flowdayz.com and we will answer within one month. There is no charge.

If you think we have handled your data badly, you can complain to a data protection authority. Ours is the Österreichische Datenschutzbehörde, Barichgasse 40-42, 1030 Wien, Austria, and you can also go to the authority where you live or work. You are welcome to come to us first, but you do not have to.

You can delete your account from inside the app. It is not a request that lands in a queue. It runs immediately, in this order:

1. Your membership is not cancelled by this. A membership bought in the App Store belongs to your Apple ID, and only you can stop it, in your own subscription settings. Deleting your Flowdayz account does not stop a store charge, so cancel there first if you have not already.
2. Your address comes off the mailing list and your marketing contact record is deleted.
3. Your account is deleted, and your onboarding answers, plans, daily progress, per-action outcomes, totals, reflections and subscription record are destroyed with it.

Two honest exceptions. First, your email address is kept on a suppression list, a short record that says never contact this address again. That is the only way to honour the request permanently, since a suppression list you have erased suppresses nobody. Second, past website funnel events are kept but unlinked from you, so what remains is a count that no longer points at a person.

Backups roll off on their own schedule, so a copy may survive there for a short period after deletion. Nothing is restored from a backup to bring an account back.

Flowdayz is for adults. It is not designed or marketed for children, and you need to be at least 18 to have an account. If you believe a child has one, tell us and we will delete it.

The entity that operates Flowdayz is the controller of your data under the GDPR. Full company details, including the registered legal entity and address, are on the Imprint.

Privacy questions, requests, and complaints all go to mail@flowdayz.com, and a person reads them.

When this page changes, the date at the top changes with it. If a change actually affects what we do with your data, rather than merely tidying a sentence, we will tell account holders by email before it takes effect, and we will not apply it retroactively to data already collected under the old wording.

The Terms cover the money and the agreement between us.