Thank you for choosing to be part of our community at mallabe ("mallabe", "we", "us", or "our"). We are committed to protecting your personal information and your right to privacy. If you have any questions or concerns about this privacy policy, or our practices with regards to your personal information, please contact us at mallabe.apps@gmail.com.
When you use our mobile application Flow (the "App"), we appreciate that you are trusting us with your personal information. We take your privacy very seriously. In this privacy policy, we seek to explain to you in the clearest way possible what information we collect, how we use it, and what rights you have in relation to it. We hope you take some time to read through it carefully, as it is important. If there are any terms in this privacy policy that you do not agree with, please discontinue use of our App immediately.
1. WHAT INFORMATION DO WE COLLECT?
Personal and Health Information you disclose to us
Because Flow functions primarily as a bladder and hydration tracking health utility, we collect sensitive physiological and health data to provide you with meaningful clinical tracking and insights. The personal information that we collect depends on the context of your interactions with us and the App, the choices you make, and the features you use. The personal information we collect may include the following:
- Health and Fitness Data: We collect your urinary habits, fluid intake logs, leakage incidents, and related bladder health data. This is the core functionality of our App, utilized exclusively for tracking your health history and generating personal wellness insights.
- Account Information: We collect email addresses, user IDs, encrypted passwords, gender, and birth year. This data is used to securely manage your account, sync your information across devices, and establish baseline hydration formulas based on age and gender.
Payment Data
We may collect data necessary to process your purchase of the Premium subscription tier. However, please note that all payment processing is handled securely by native app store platforms (the Apple App Store or Google Play Store). We do not store or have direct access to your credit card numbers or billing addresses. We utilize RevenueCat to securely verify purchase receipts and manage your active subscription status. You may find RevenueCat's privacy policy here: https://www.revenuecat.com/privacy/.
Automatically Collected Information
We automatically collect certain information when you visit, use, or navigate the App. This information does not reveal your specific identity (like your name or contact information) but may include device and usage information, such as device characteristics, operating system, language preferences, device name, location (at a country or city level), information about how and when you use our App, and other technical information. This information is needed primarily to maintain the security and operation of our App, and for our internal analytics and troubleshooting.
2. HOW DO WE USE YOUR INFORMATION?
We use personal information collected via our App for a variety of business purposes described below. We process your personal information for these purposes in reliance on our legitimate business interests, in order to enter into or perform a contract with you, with your consent, and/or for compliance with our legal obligations.
Crucially, we never sell your health data to data brokers, advertisers, or other third parties.
- To provide core application functionality: We process your health logs and demographic data to generate custom hydration schedules, track bladder health trends, and provide localized clinical insights.
- To manage user accounts: We use your account details to synchronize your data securely across multiple devices via our backend database.
- To facilitate account creation and logon: If you choose to link your account to a third-party (such as Google), we use the information you allowed us to collect to facilitate account creation securely.
- To send administrative information: We may use your personal information to send you product, service, and new feature information and/or information about changes to our terms, conditions, and policies.
3. WILL YOUR INFORMATION BE SHARED WITH ANYONE?
We only share information with third parties necessary to provide you with the App functionality, to comply with laws, or to protect our rights. We do not sell your health or personal data.
- Supabase: We utilize Supabase for robust cloud database hosting and user authentication. Your data is encrypted in transit using HTTPS, and stored securely.
- RevenueCat: Used to communicate with Apple/Google to verify your premium subscription ownership without tying your App Store identity to your personal data.
- Legal Obligations: We may disclose your information where we are legally required to do so in order to comply with applicable law, governmental requests, a judicial proceeding, or court order.
4. HOW DO WE KEEP YOUR INFORMATION SAFE?
We have implemented appropriate technical and organizational security measures via Supabase and our own software architecture to protect the security of any personal information we process. All data syncing with our servers is encrypted in transit using the industry-standard HTTPS protocol. However, despite our safeguards and efforts to secure your information, no electronic transmission over the Internet or information storage technology can be guaranteed to be 100% secure. Although we will do our best to protect your personal information, transmission of personal information to and from our App is at your own risk.
5. HOW LONG DO WE KEEP YOUR INFORMATION? (DATA RETENTION)
We keep your personal information only for as long as it is necessary to fulfil the purposes set out in this privacy policy, unless a longer retention period is required or permitted by law (for example, tax, accounting, or other legal requirements). The retention periods we apply to each category of data are set out below.
- Data stored on your device: Flow is a local-first App. Your activity logs and settings are stored on your device and remain there until you erase them from within the App (Settings → Data Management → "Clear All App Data") or uninstall the App. Uninstalling the App removes all locally stored Flow data from that device.
- Health, bladder and fluid intake logs synced to the cloud: If you create an account and use cloud sync, your logs are retained in our Supabase database for as long as your account remains active, so that your history stays available to you across devices. You can have this data deleted at any time as described in Section 7.
- Account information (email address, user ID, encrypted password, gender, birth year): Retained for as long as your account is active, and deleted when your account is closed.
- Deleted accounts: When you request deletion, we permanently erase your account and all associated health and personal data from our live databases within 30 days of verifying the request. Any copies held in encrypted backups are isolated from all further processing and are automatically overwritten within a further 30 days.
- Inactive accounts: If an account has not been used to sign in or sync for 24 consecutive months, we treat it as abandoned and permanently delete the account together with all associated health data. Where we hold a valid email address, we will notify you before deletion.
- Subscription and purchase records: Records confirming your Flow+ subscription status (held by us and by RevenueCat) are retained for up to 7 years after the transaction, because we are required to keep them for tax, accounting, and consumer-protection purposes. These records contain no health data.
- Diagnostic, device and usage information: Retained for a maximum of 12 months, after which it is deleted or irreversibly anonymised.
- Support correspondence: Emails you send to mallabe.apps@gmail.com are retained for up to 24 months from the date of your last message, and are then deleted.
When we no longer have an ongoing legitimate business or legal need to process your personal information, we will either delete it or irreversibly anonymise it. Where deletion is not immediately possible (for example, because the information is held in a backup archive), we will securely store your personal information and isolate it from any further processing until deletion is possible.
6. CHILDREN'S PRIVACY
Our App is strictly intended for individuals who are at least 18 years of age. We do not knowingly solicit data from or market to children under 18 years of age. By using the App, you represent that you are at least 18. If we learn that personal information from users less than 18 years of age has been collected, we will deactivate the account and take reasonable measures to promptly delete such data from our records.
7. HOW CAN YOU REVIEW, UPDATE, OR DELETE YOUR DATA?
You have the absolute right to request the review, update, or complete deletion of your account and all associated health and personal data.
- Review and update: You can review and change your profile details and logs at any time inside the App, and you can export a full copy of your data (PDF, CSV, or Excel) from Settings → Data Management → "Export Report".
- In-App Deletion of device data: You can permanently erase all Flow activity logs and settings stored on your device at any time from Settings → Data Management → "Clear All App Data". This action is immediate and irreversible.
- Account and cloud data deletion: To delete your account together with all health and personal data synced to our cloud database, email us at mallabe.apps@gmail.com from the address associated with your account, using the subject line "Delete my account". We will verify your identity and permanently purge your data from all live databases within 30 days, as described in Section 5. There is no charge for this request.
8. DO WE MAKE UPDATES TO THIS POLICY?
Yes, we will update this policy as necessary to stay compliant with relevant laws and reflect any changes in our data processing practices. The updated version will be indicated by an updated "Revised" date at the top of this document. We encourage you to review this privacy policy frequently to be informed of how we are protecting your information.
9. CONTACT US
If you have questions or comments about this policy, or if you need assistance with data deletion,
you may email us anytime at:
mallabe.apps@gmail.com