Your privacy
Version: 15 October 2026.
Controller and contact
Thomas List, Robert-Koch-Straße 56, 84489 Burghausen, Deutschland. Privacy and support: info@alpinelogic.ai.
Data and purposes
We process sign-in identifiers and session information, movement preferences, timezone, weekly plans, favorites, workout sessions and progress to provide your account and the features you choose. We do not ask for diagnoses, injury histories, weight or biometrics. Please do not submit medical information through support unless specifically necessary and agreed.
For billing, Stripe processes payment instruments, billing details, invoices and subscriptions. Flowra stores the customer/subscription mapping, status and period needed to manage your membership. We do not store full payment card details.
Legal bases
Account and membership processing provides the requested service under Article 6(1)(b) GDPR. Necessary billing retention may rely on legal obligations, Article 6(1)(c). Proportionate security and abuse prevention may rely on legitimate interests, Article 6(1)(f). Optional processing requiring consent will not begin before valid consent.
Service providers
Vercel provides hosting and delivery; Clerk provides account authentication and Google sign-in; Neon provides PostgreSQL storage in the configured Frankfurt region; Stripe provides checkout and membership billing; Google provides the social sign-in you request. Resend delivers transactional messages, including cancellation receipts, using the recipient address and the information needed for that message. No AI coach, wearable integration, advertising or third-party behavioral analytics is included in this release.
These providers may use subprocessors and process information outside the EU. An EU database location does not mean all processing stays in the EU. Contact us for information about the providers and applicable international-transfer safeguards.
Storage and deletion
Training preferences and records remain with your account until deletion. Export and deletion controls are available in Settings. Deletion blocks access immediately and starts retryable cleanup of application data and Clerk identity, including cancellation of active Flowra subscriptions. Billing records required by law remain with restricted access where required. Minimal completed deletion-task records are retained for 30 days to prevent stale sessions from recreating an erased account. Provider security logs and backups have separate retention periods determined by their security, recovery and legal purposes; contact us for information about those periods.
Cookies and browser storage
Clerk uses cookies/storage for sign-in and session security. Flowra remembers explicitly chosen non-sensitive navigation preferences on your device under your account. These are cleared on sign-out. The service does not use optional marketing cookies.
Your rights
Subject to applicable conditions, you may request access, rectification, erasure, restriction, portability and objection, and withdraw consent for the future. Contact info@alpinelogic.ai. You may complain to a competent data protection supervisory authority, including the Bavarian State Office for Data Protection Supervision.
Adults and updates
Flowra’s first version is intended for adults 18 and over. We update this notice when processing changes.