FLUX

Privacy Policy

Last updated: April 4, 2026

This Privacy Policy explains how Flux ("App"), operated by Flux App ("we", "us", or "our"), collects, uses, and protects your personal data. We are committed to safeguarding your privacy and complying with the General Data Protection Regulation (GDPR) and other applicable data protection laws.

1. Data Controller

Flux App
Toulouse, France
contact@meara.fr

2. Data We Collect

2.1 Data You Provide

Data	When	Purpose
Daily health metrics (energy, mood, libido, sleep quality, stress, training scores on a 1-10 scale)	Each daily log entry	Core service: calculate vitality score, detect patterns, provide insights
NoFap status (toggle)	Each daily log entry	Streak tracking and correlation analysis
Profile information (age, wake time, activity level, sleep quality, wellness goals)	Onboarding quiz	Personalize circadian phase calculations and recommendations
Email address	Optional account creation	Authentication and data sync across devices

2.2 Data Collected Automatically

Data	Purpose
Device push token	Deliver reminder notifications
Anonymous usage analytics (screens viewed, features used)	Improve the App experience
Device type and OS version	Ensure compatibility and diagnose issues

3. How We Use Your Data

• Provide the service: Calculate vitality scores, generate insights, display circadian phase information, and deliver personalized action plans.
• Improve the App: Analyze aggregated, anonymized usage patterns to enhance features and user experience.
• Communicate with you: Send reminder notifications (with your permission) and respond to support inquiries.

We process your data based on the following legal bases (GDPR Art. 6):

• Contract performance (Art. 6(1)(b)): processing necessary to provide the service you requested.
• Legitimate interest (Art. 6(1)(f)): anonymized analytics to improve the App.
• Consent (Art. 6(1)(a)): push notifications (you can withdraw consent at any time via device settings).

4. Third-Party Services

We use the following third-party services to operate the App:

Service	Provider	Purpose	Data Shared
Supabase	Supabase Inc.	Database and authentication	Account data, daily logs, profile
PostHog	PostHog Inc.	Product analytics	Anonymized usage events
RevenueCat	RevenueCat Inc.	Subscription management	Purchase status, anonymous user ID
Apple App Store / Google Play	Apple Inc. / Google LLC	App distribution, payments	Payment processed by platform (we do not see payment details)
Expo Notifications	Expo (650 Industries)	Push notification delivery	Device push token, notification content

Each third-party service operates under its own privacy policy. We encourage you to review their policies.

5. Data Storage and Security

• Your data is stored in a Supabase cloud PostgreSQL database.
• All data is protected by Row Level Security (RLS) policies, ensuring that each user can only access their own data.
• Data is transmitted over HTTPS (TLS encryption in transit).
• The App supports offline-first usage: data is stored locally on your device and synced when a connection is available.

6. Data We Do NOT Collect or Share

• We do not sell, rent, or trade your personal data to any third party.
• We do not collect precise location data.
• We do not use your data for advertising or ad targeting.
• We do not share identifiable health data with third parties.

7. Data Retention

• Your data is retained for as long as your account is active or as needed to provide the service.
• If you delete your account, all associated personal data is permanently deleted from our servers within 30 days.
• Anonymized, aggregated data (which cannot identify you) may be retained indefinitely for analytical purposes.

8. Your Rights (GDPR)

As a user in the European Union, you have the following rights under the GDPR:

• Right of access (Art. 15): Request a copy of your personal data.
• Right to rectification (Art. 16): Correct inaccurate or incomplete data.
• Right to erasure (Art. 17): Request deletion of your personal data ("right to be forgotten").
• Right to data portability (Art. 20): Receive your data in a structured, machine-readable format.
• Right to restrict processing (Art. 18): Request limitation of data processing.
• Right to object (Art. 21): Object to processing based on legitimate interest.
• Right to withdraw consent: Where processing is based on consent, you may withdraw it at any time.

To exercise any of these rights, contact us at contact@meara.fr. We will respond within 30 days.

You also have the right to lodge a complaint with a supervisory authority. In France, this is the CNIL (Commission Nationale de l'Informatique et des Libertes): www.cnil.fr.

9. Children's Privacy

Flux is not intended for use by anyone under the age of 16. We do not knowingly collect personal data from children under 16. If we become aware that we have collected data from a child under 16, we will delete it promptly. If you believe a child under 16 has provided us with personal data, please contact us at contact@meara.fr.

10. International Data Transfers

Your data may be processed and stored in servers located outside the European Economic Area (EEA) by our third-party service providers. Where such transfers occur, they are protected by appropriate safeguards, including Standard Contractual Clauses (SCCs) approved by the European Commission.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify users of material changes through the App or via email (if an account is registered). The "Last updated" date at the top of this page indicates when the policy was last revised.

12. Contact

For any questions or requests regarding this Privacy Policy or your personal data, contact:

Flux App
Toulouse, France
contact@meara.fr

Back to home