Your health stays yours

flowell is a daily health planner made by Yousef Qatanani. This policy explains what happens to the information you put into the app.

The short version

To use flowell on a phone, you sign in with an account. Your account holds the main copy of what you enter, and your phone keeps a working copy that stays in sync with it. Only your account can open your data. There are no ads, and we don't sell or share any of it (see "What the app stores, and where"). When you use an AI feature, just the photo or text for that request is sent to be analysed, and nothing is kept (see "AI features").

What the app stores, and where

Your routine, tasks, reminders, prayer settings, water, medicines and supplements, sleep, measurements, symptoms and mood, meals, recipes, pantry, shopping lists, goals, special-day modes, kids' tasks and points, medical reports and their photos or files are saved in your account and in the app's private storage on your phone. Other apps can't read them.

Your account is kept by our database provider, Supabase, on servers in the region chosen for flowell. Each record is linked to your account, and the database only lets your signed-in account read or change it. Report files and meal photos are kept in private storage that only your account can open. Everything travels over an encrypted connection (HTTPS), and Supabase encrypts it where it is stored. We never use it for ads, and we never sell or share it.

Your phone syncs with your account when you open the app, every minute while it's open, and when you leave it. If you're offline, your changes wait on the phone and sync when you're back online.

A few settings belong to one phone and stay on it: the app lock, and the links to your calendar and to Apple Health or Health Connect.

Apple Health and Health Connect

If you choose to connect Apple Health (iPhone) or Health Connect (Android), flowell reads your sleep, steps, workouts and resting heart rate so they appear in the app. It never writes to them. What it reads is saved in your flowell log, so it is kept in your account like your other entries. It is never used for advertising or data mining, and is never shared with third parties.

Calendar, camera, photos and location

• Calendar: if you allow it, flowell reads events from the calendars you choose to show them as busy time. Events are not stored or changed.
• Camera and photos: used only when you attach a photo to a meal or a medical report. The photo is copied into the app's private storage and saved to your account.
• Location: used once, when you ask, to work out prayer times for where you are. Prayer times are worked out on your phone. The place is kept with your prayer settings, which are saved to your account, but never as a location history.

Each of these is asked for only when you use the feature, and the rest of the app works if you say no.

AI features

Some features can use AI, for example "Estimate with AI" on a meal photo. The first time, the app asks for your OK. When you use one, the app sends only what that feature needs (for a meal, the photo shrunk to 1024 pixels and the name you typed) over an encrypted connection to flowell's AI service, which passes it to Claude, an AI model made by Anthropic, and returns the answer. flowell's AI service does not store it. Anthropic does not use it to train its models and deletes it within 30 days. No name, account or other health data is sent with it. The answer is an estimate shown to you to check; it is not medical advice. If you never use an AI feature, nothing is sent.

"Ask the coach" sends your messages in that chat and, only if "Share my last 2 weeks" is on, a short summary made of numbers (for example average sleep, steps and water). It never includes medicine names, notes or symptoms in your words. Chats are not saved on the phone or the server.

"A tip for today" sends the same kind of number-only summary of your last 2 weeks, plus the time and how much of today's plan and water is done, only when you tap Get my tip. The tip is kept on your phone until the next day.

Online exercise library

Exercise library > More moves loads moves and animations from ExerciseDB (exercisedb.dev) over the internet, only while you have that screen open. The app sends ExerciseDB the search word and body area you pick, and ExerciseDB sees your device's internet address, as with any website. Nothing about you or your health is sent, and the moves are not saved on your phone.

Notifications

Reminders are scheduled on your device. You can hide medicine names from lock-screen reminders in the reminder settings.

Backups

If you make a backup, flowell creates a file and hands it to the place you choose (for example Files or a message). By default the file is locked with a password you choose (AES-256 encryption); if you turn that off, the file is not encrypted, so keep it somewhere private. flowell never uploads it and never keeps your password. You don't need a backup to move to a new phone: just sign in.

Your account

You need an account to use flowell on a phone. You can sign up with an email and password, or with Google or Apple where they are offered. Your email address and a scrambled form of your password are kept by Supabase, together with your flowell data (see "What the app stores, and where").

If you choose Continue with Google or Continue with Apple, Google or Apple tells us only your email address and a sign-in ID, and we keep them the same way. We don't get your contacts, photos or anything else from those accounts. With Apple you can choose Hide My Email, and then we only see a private relay address.

You can sign out at any time. Signing out sends your latest changes to your account and locks flowell on the phone: your data stays on the phone but can't be seen until you sign in again, and then only what changed is synced. If a different account signs in on that phone, flowell is cleared from it first. Sign in on any phone and everything comes back, so moving to a new phone is just signing in.

To delete your account, tap your picture at the top of any tab to open Your profile, then Account > Delete account. This removes your account and everything in it, including report files and meal photos, straight away, and clears flowell from the phone. You can also email support@tebber.com to ask for this.

Family sharing

If you start or join a family circle (Plan > Share with family), flowell posts a small status for today to our database provider, Supabase: your name, and only what you switch on (how much of today's plan is done, water today, and how many medicines you've taken, never their names). It is locked on your phone (AES-256) with a key that exists only inside the invite code, so we cannot read it; only people in your circle can. Leaving the circle or deleting your account removes your status. A circle holds at most 12 people.

Feedback and messages from us

If you use More > Help > Send feedback, we receive your message, the app language and version, and the email address only if you add one for a reply. It is stored with Supabase so we can read it, and is not linked to your account. Please don't put health details in it. To show news on Today, the app asks our server for the current message; nothing about you is sent.

Deleting your data

Your profile (tap your picture at the top) > Privacy and data > Delete all my data removes everything flowell has saved, in your account and on the phone, including attached files, and cancels all reminders. Your account stays, empty. Deleting the app removes only what's on the phone. Your account copy stays until you delete the account (see "Your account").

Children

flowell is not directed at children under 13, and we don't knowingly collect information from them. Kids' tasks and points are part of a parent's flowell data and are saved in the parent's account. A child needs no account or email.

Medical disclaimer

flowell is not a medical device and doesn't give medical advice. Talk to your doctor before changing medicines, diet or exercise.

Changes and contact

If this policy changes, the new version will be posted here with a new date. Questions: write to support@tebber.com.