Privacy Policy

1. Who we are

Flowa is operated by Flowa ehf., registered in Iceland (kt. pending). Contact: info@flowa.is. We provide production costing software for food manufacturers.

2. What data we collect

Account data: name, email address, and password hash when you sign up. If you sign in with Google, we receive your name, email, and profile picture from Google. Usage data: recipes, ingredients, pricing, and other production data you enter into the application. This is your business data — we store it to provide the service. Technical data: IP address, browser type, and pages visited. We use Google Analytics with consent-based cookie tracking.

3. How we use your data

To provide and maintain the Flowa service. To authenticate your identity and manage your account. To send transactional emails (account confirmation, password reset). To improve the product based on aggregate usage patterns. We do not sell your data. We do not use your business data (recipes, costs, ingredients) for any purpose other than providing the service to you.

4. Where your data is stored

Your data is stored on Supabase (hosted on AWS in the EU region). Backups are encrypted at rest. Authentication tokens are stored in your browser's local storage.

5. Data sharing

We share data only with service providers necessary to operate Flowa: - Supabase (database and authentication) - Vercel (hosting) - Google Analytics (usage analytics, with consent) - LemonSqueezy (payment processing) We do not share your business data with any third party.

6. Your rights

You have the right to access, correct, or delete your personal data at any time. You can export your data from the application. To delete your account and all associated data, contact info@flowa.is. Under GDPR and Icelandic data protection law (lög um persónuvernd nr. 90/2018), you also have the right to data portability and to lodge a complaint with Persónuvernd (the Icelandic Data Protection Authority).

7. Cookies

We use essential cookies for authentication. Analytics cookies (Google Analytics) are only set after you give consent via the cookie banner. You can withdraw consent at any time by clearing your cookies.

8. Changes to this policy

We may update this policy from time to time. Significant changes will be communicated via email or an in-app notification.