1. Who we are and what this policy covers
This Privacy Policy explains how Flvo handles information when you use the Flvo iOS app, its legal webpages, or contact us. “Flvo,” “we,” and “us” refer to the publisher of the Flvo app identified in its App Store listing. You can contact us at support.n7q4@flvoicemed.com.
Flvo is a private meal-reflection journal intended for adults. The current app does not provide a public feed, public profiles, comments, following, or user-to-user messaging. Creating content does not publish it to other users.
2. Information handled by Flvo
- Your content: meal photos, written reflections, voice recordings, meal types, fullness, mood, energy, timestamps, later check-ins, revision history, listening sets, and saved summaries. When you save or update content, the relevant records and selected attachments are sent to Flvo services. They can reveal personal or sensitive details you choose to record.
- Profile and preferences: your chosen name, personal intention, reminder schedule, quiet hours, meal-time preferences, and saved filters or views. Relevant preferences are stored with your service account and may also be cached on your device.
- Account and session information: the sign-in method you choose, an account or provider identifier, authorization tokens and codes where applicable, and session credentials needed to authenticate requests and keep account records separate. We do not receive your account-provider password. The app does not separately request a provider name or email address as part of its current sign-in flow.
- Device and connection information: an app-generated persistent UUID stored on the device and sent to our services, device model, operating-system version, app version, language or time zone where needed, and connection timing. The UUID is an app identifier, not a hardware IMEI. Service and website hosts also receive normal request information such as IP address, requested address, and request time.
- Purchase information: product and transaction identifiers, purchase receipts, delivery and verification status, and account-associated Coin credits, spending, dates, and balance. Receipts and related identifiers are sent to the purchase-verification service. Apple handles payment credentials; we do not receive your full payment-card number.
- Support information: your email address, messages, and any attachments you send to support.n7q4@flvoicemed.com. Please send only what is needed for your request.
3. Why information is used
We use account, session, and device information to sign you in, associate your records with the correct account, maintain connections, prevent duplicate delivery, and protect the service. Journal content and preferences are used to save, retrieve, display, and update your reflections, play selected media, produce summaries, and provide requested reminders. Purchase records are used to verify transactions, deliver Coins, reconcile balances, and resolve payment issues.
Summaries use saved journal fields and rules, including app-side calculations and service-provided results. They are not a medical diagnosis or an automated decision about eligibility for health care, employment, insurance, or credit. The app does not directly send your journal to a third-party generative-AI service.
4. Account services, local storage, and recipients
Flvo is not a device-only journal. Account services receive saved journal records, uploaded photos and recordings, relevant preferences, and purchase-verification information. The app reads journal records and Coin balances from those services. Your device also holds session information, local records, drafts, and downloaded media caches. Device identifiers and pending purchase-recovery records use Keychain storage; the Coin balance is supplied by the service rather than an independent device wallet.
We use hosting, storage, and technical service providers to deliver account, journal, media, and purchase-verification functions. These providers receive the information needed for those functions. Your selected account provider processes sign-in information under its own policy. Apple provides App Store billing and retains its purchase records; see Apple’s Privacy Policy.
Authenticated in-app web content receives account and session information needed to open that content. Information you submit through a page is sent to the service providing that feature. This differs from opening a public legal page: the app’s legal-document viewer uses a non-persistent web session and does not intentionally attach journal content or account credentials. Legal links opened in your browser use that browser’s settings and storage. These two policy files contain no analytics or advertising scripts.
The current app does not include advertising or cross-app tracking, and we do not sell journal content. Email providers process messages you send to support. Information may also be disclosed where legally required or reasonably necessary to address fraud, safety, or legal claims. Your private journal is not published to other users merely because it is stored by the service.
5. Optional device permissions
- Camera: used when you choose to take a meal photo or use an in-app page feature that requires the camera.
- Photos: the system picker lets you select specific images without unrestricted library access. A selected copy can be attached to a draft and uploaded when you save or submit it.
- Microphone: used when you choose to record a reflection or use a page feature requiring audio. Native voice reflections are limited to 60 seconds and can be previewed before attachment. Saved or submitted recordings can be uploaded to the service.
- Notifications: requested when you save an enabled reminder. Notifications are scheduled on the device; reminder preferences are also saved with the service account.
You can decline permissions or change them in iOS Settings. Declining a permission prevents the related feature, not unrelated journal functions. Removing an imported photo from Flvo does not delete the original from your Photos library.
6. Retention, deletion, and backups
Account records and saved content are retained to provide your journal and related services until removed through the available controls or account-deletion process, subject to necessary legal, security, and transaction-record retention. Editing may retain previous versions. Delete a reflection to request removal of that reflection and its associated history; changing only the current photo or note does not necessarily remove earlier versions.
To request account deletion, open Me → Settings → Delete account and confirm. The app sends the request to the account service. After a successful response, it clears the active account’s local journal, profile, preferences, media, and session and returns to sign-in. If the request fails, the app reports the failure rather than treating the account as deleted. Deleting an account does not delete your separate account-provider identity or automatically request an Apple refund. Contact support.n7q4@flvoicemed.com if deletion fails or you need help with service-held records.
Limited purchase, fraud-prevention, legal, or dispute records may need to be retained for those purposes rather than continued journal use. Device identifiers and pending purchase-recovery records in Keychain may remain after sign-out or removal of the app. We do not promise that account deletion preserves an accessible Coin balance or that signing in differently will recover the same account.
Signing out ends the session; it is not an account-deletion request. Uninstalling the app is not a request to delete service-held data. Access after reinstalling or changing devices depends on identifying the same service account; device-based access is not a guaranteed backup or recovery mechanism.
Device or service backups may retain copies until their normal replacement or expiry, and may not be erased immediately by deleting an active record. Records retained for legal or security reasons remain limited to those purposes. Support correspondence is retained only as reasonably needed to handle the request, meet legal obligations, or resolve disputes.
7. Your choices and privacy rights
You may review and edit account content, remove reflections, disable reminders, revoke permissions, and request account deletion from the app. Depending on applicable law, you may also have rights to access, correct, delete, restrict or object to processing, request a portable copy of information we hold, or withdraw consent where consent is the basis for processing. Contact us to make a request; we may reasonably verify your identity. Some information may need to be retained to meet legal obligations or protect legitimate claims.
Where privacy law requires a legal basis, we rely as appropriate on providing the features you request, your consent for optional activities, legitimate interests in security and support, or legal obligations. A device permission is not blanket consent for unrelated processing. You may complain to your local data-protection authority where applicable.
8. Security and international processing
The app uses HTTPS and secure WebSocket connections for remote services, platform storage controls for local files, and Keychain for device identifiers and purchase-recovery records. These measures do not make every stored record encrypted by the app, and no device, transmission, or storage method is completely secure. Protect your device and account access.
Flvo service providers, account providers, Apple, website hosts, and email providers may process information outside your country. Where required, cross-border processing must use applicable legal safeguards. Contact us for information about processing locations or safeguards relevant to your data; this policy does not promise a specific hosting country or that service-held content stays on your device.
9. Adults and changes to this policy
Flvo is intended for people aged 18 or older, and we do not knowingly solicit personal information from children. If you believe a child has sent us personal information, contact us.
We may update this policy as features or legal requirements change. The effective date above identifies the current version. Material changes will be communicated through the app or another appropriate channel, and additional consent will be requested where required. Questions and privacy requests can be sent to support.n7q4@flvoicemed.com.