Flowe ("Flowe", "we", "us") connects Pilates students with independent instructors. This policy explains what information the Flowe iOS app handles, how it is used, and the choices you have. We built Flowe to collect as little as possible.
Where your data lives
Flowe keeps your data in two places. Most of it — your instructor profile, community posts, events and your own cached activity — is stored in Apple iCloud (CloudKit) under your own Apple Account; public information such as an instructor profile lives in a shared area of iCloud so other signed-in Flowe users can see it.
To connect two people securely — and to make sure only the right people can see a booking, a class roster or who's attending an event — Flowe also runs its own small backend, hosted on Cloudflare in the EU. It stores your booking requests and their status, event registrations, the reviews you write, your display name, your optional "active / last seen" presence, and, if you enable notifications, your device's push token. This server-side data is readable by Flowe, the operator, in order to run these features — it is not end-to-end encrypted.
The exceptions are direct messages and instructor client notes: both are end-to-end encrypted, so even we cannot read them — only the participants, or the instructor who wrote the note.
Information we handle
- Account & identity. When you use Sign in with Apple, we receive your name and an email address (which may be Apple's private relay). This identifies your account.
- Profile information. If you list as an instructor, the details you add — display name, photo, bio, specialties, rates, and your exact studio address and precise map location — are shown publicly so signed-in students can find and reach you. People browsing without an account see only your general area, not the exact address.
- Bookings & reviews. Session requests you make or receive (day, time and type), and reviews you write after a session.
- Messages. Direct messages between users. Message contents are end-to-end encrypted — only you and the person you're messaging can read them.
- Community content. Posts, events and photos you choose to share, and event registrations.
- Presence (optional). If you turn on the "active / last seen" indicator, we store when you were last active so people you message can see it. It is off by default, only visible to people you can also see, and you can turn it off any time.
- Location. If you tap "Use my location," a student's location is used on their own device to sort instructors by distance and is never uploaded or stored. An instructor who publishes a teaching location shares their exact studio address and precise coordinates, which are stored on their public listing and shown to signed-in students (and plotted on the map). If you don't want your exact address to be public, don't publish a studio location.
- Notifications (optional). If you allow them, your device's push token, so we can alert you about a request, a reply or a session.
- Instructor client notes (health-related). If you teach, you can keep private notes about your own clients that may include health details you record for safety — such as injuries, pregnancy or medical conditions. These notes are end-to-end encrypted: stored as ciphertext only your device can read, never shown to the student or any other user, and never used for advertising.
How we use it
Only to make the app work: to sign you in, show instructor profiles, let you book and message, decide who is allowed to see each booking or roster, and display community content you choose to share. We do not use your information for advertising or profiling.
What we don't do
- We do not sell your personal data.
- We do not track you across other apps or websites, and we show no third-party ads.
- We use no third-party analytics or advertising SDKs.
Payments
Flowe takes no payment for lessons — you settle directly with your instructor. Optional instructor subscriptions (Visible / Boost) are purchased and billed by Apple; Apple handles that payment information under its own privacy policy. Manage subscriptions in Settings → [your name] → Subscriptions.
Who we share it with
Information you mark as public (your instructor profile, community posts) is visible to other Flowe users. Otherwise we share personal information only with the companies that help us run the app — under contract and only for that purpose:
- Apple — Sign in with Apple, iCloud storage, push notifications, and in-app purchases.
- Cloudflare — hosts Flowe's backend and database (in the EU); it processes this data only to run the service for us, not for its own purposes.
We do not sell your data or share it with advertisers or data brokers, except where required by law.
How long we keep it
We keep your data while your account is active. When you delete your account, the data you created is removed from Apple's iCloud and from Flowe's server, except where we must keep a limited record to meet a legal obligation or resolve a dispute. Aggregate ratings — with no name attached — may remain on an instructor's profile.
Your choices & rights
- Delete your account. In the app: Settings → Delete Account. This erases the data you created from both Apple's iCloud and Flowe's own server (booking requests, event registrations, reviews you wrote, your profile, presence and device tokens).
- Block or report. Use the ⋯ menu on a profile or in a message thread.
- Access or questions. Email us and we'll help — see below.
Children
Flowe is not directed to children under 13, and we do not knowingly collect information from them.
Changes
We may update this policy; we'll revise the date above when we do.
Contact
Questions about your privacy? Email pilatesflowe@gmail.com and we'll reply within 1–2 business days.