PRIVACY POLICY

Last updated on 20 Feb 2026

1. Introduction

This Privacy Policy describes how Applabtech Limited, Myrtiotissis, 13 AQUA MANSIONS, Flat/Office 1 Germasogeia, 4041, Limassol, Cyprus ("Company", "we", "us", "our") collects, uses, discloses, and safeguards personal information when you use the Flow mobile application (the "App").
By using the App, you acknowledge the practices described in this Privacy Policy.

2. Information We Collect

a. Account Information
We collect limited information necessary to create and maintain your account, which may include your email address, username, and authentication credentials. This information is used solely to provide access to the App and enable core functionality.

b. Content and Voice Interactions
Flow offers voice and chat functionality powered by third-party AI providers. Voice processing occurs through AI infrastructure and is not recorded, stored, or retained by Flow. We do not store audio recordings, transcripts, health information, or the substantive content of conversations. Processing of voice and conversational inputs may be subject to the privacy practices of the AI provider.

c. Session Metadata
To operate and improve the App, we may store limited session-related metadata that does not directly identify you, such as the date and time of a session, session duration, and high-level topic indicators derived in a de-identified manner. These indicators are used only for product improvement and analytics and are not linked to your personal profile or conversation content.

d. IP Address of the Device
Information resulting from general internet connection rules, such as IP address (and other information in system logs), is used for technical and statistical purposes, including, in particular, the collection of general demographic information (e.g. about the region from which the connection is made).

e. Automatically Collected Technical Information
We may collect basic technical information necessary for app functionality and diagnostics, such as device type, operating system, app version, and general performance metrics. This information is used to ensure stability, security, and performance of the App.

f. Cookies and Similar Technologies
Flow may use limited cookies or similar technologies necessary for authentication, security, and basic app functionality. These technologies do not track your conversations or sensitive content and are not used for advertising or cross-site behavioral tracking. Where cookies are used, they are limited to essential technical purposes.

g. Other Data
Other data may be collected as part of handling specific cases or may be provided by you via email, the contact form available in the Service, the comments section available in the Service, mail, or when contacting us by phone.

3. How We Use Personal Information

We use information to provide and operate Flow, create and maintain accounts, deliver personalized wellness support and conversations, maintain context and continuity, detect potential crisis situations and surface support resources, improve performance, safety, and features, communicate with users, prevent misuse, fraud, or harm, and comply with legal obligations. Flow may use automated processing to personalize responses and identify safety concerns.

4. AI Processing and Third-Party AI Providers

Flow may integrate with third-party platforms, app stores, and service providers necessary for the operation and distribution of the App. When you access the App through such platforms or interact with external links, those third parties may independently collect information in accordance with their own privacy policies. Flow is not responsible for the privacy practices of such third parties.

We may use service providers and infrastructure partners to support the functionality, security, and performance of the App. These may include providers offering AI processing, cloud infrastructure, app distribution, authentication, and limited technical analytics services.

In particular, Flow relies on third-party AI services (such as OpenAI) to enable conversational functionality. Any processing of conversational inputs by such providers is governed by their respective privacy policies and terms.

Flow does not use third-party analytics tools that capture personal conversation content or sensitive information. Where analytics are used, they are limited to de-identified technical and session metadata necessary for product improvement, reliability, and security.

5. Analytics and App Improvement

We use analytics tools to understand feature usage and improve performance. Analytics data is designed to avoid capturing chat content or sensitive health information. Analytics may include session duration, feature interactions, performance metrics, and error diagnostics. Where possible, analytics data is aggregated or de-identified.

6. Sharing of Personal Information

We may share personal information with service providers supporting infrastructure and analytics, payment processors if applicable, legal authorities where required by law, and safety partners in emergency situations where permitted by law.
We do not sell personal information and we do not share personal information for cross-context behavioral advertising.

7. Crisis and Safety Situations

If Flow detects indicators suggesting potential harm or emergency situations, we may surface crisis resources or encourage seeking professional help. Where legally permitted and technically feasible, limited information such as general location may be used to display relevant emergency resources. Flow does not replace emergency services.

8. Data Retention

We retain personal information while your account is active, for a reasonable period after deletion (generally up to 12 months), and as necessary for safety, dispute resolution, or legal compliance. Aggregated or de-identified data may be retained longer.

9. Security

We implement reasonable administrative, technical, and organizational safeguards designed to protect personal information, including encryption in transit, encryption at rest, and access controls.

10. Your US Privacy Rights

Depending on your state of residence, including California, you may have the right to access personal information, request deletion, correct inaccurate information, obtain a portable copy of data, opt out of sale or sharing of personal information, limit use of sensitive personal information, and receive equal service without discrimination.
Requests may be submitted via flow-support@harmonyapps.io.

11. Sensitive Personal Information

Health-related and emotional data may be considered sensitive personal information. We use such data only to provide requested services, safety features, and personalization.

12. Children's Privacy

Flow is not intended for children under 16. We do not knowingly collect personal information from children. If such data is discovered, we will delete it.

13. International Users

Flow is designed for use within the United States. By accessing or using the App, you acknowledge that the App and its services are intended for users located in the U.S. and that any information you provide will be processed in accordance with applicable U.S. laws.

14. Medical Disclaimer

Flow is an AI powered App designed for emotional support and wellness guidance and is not a licensed healthcare provider. Information provided by Flow is informational only, may be incomplete or inaccurate, and does not replace professional care. Always seek qualified professionals for medical or mental health concerns.

15. Changes to This Policy

We may update this Privacy Policy periodically. Material changes will be communicated through the App or other appropriate means.