Privacy Policy

1. Scope and Who We Are

This Privacy Policy explains how SeventhFlow collects, uses, shares, and protects personal information through the SeventhFlow mobile application, website, APIs, support channels, and related services (collectively, the “Service”). SeventhFlow is operated by Romain Mullier under the SeventhFlow name (“SeventhFlow,” “we,” “our,” or “us”).

This Policy applies to account holders, website visitors, people who contact us, gym representatives, and others who interact with the Service. It should be read with our Terms of Service.

2. Important Summary

• We do not currently sell personal information or share it for cross-context behavioral advertising.
• We do not sell information we know belongs to a minor or sell identifiable training, injury, or health-related information.
• We may use and share information that is genuinely aggregated or deidentified so it is not reasonably linkable to a person.
• We may transfer information as part of a legitimate transaction involving the Service or its operating business, subject to the protections described below.
• If we offer a voluntary promotion or lead form for a named partner, we will explain what will be shared and ask you to choose whether to participate.

3. Information We Collect

Account and identity information

• Name, email address, username, and hashed account credentials.
• Date of birth when you choose to add it, age-related status, and email-verification, account-security, and versioned legal-acceptance records.
• Profile information such as biography, profile picture, nationality, city, country, social handles, disciplines, ranks, fight record, and coaching relationships.

Training and health-related information

• Training activities, dates, session types, duration, rounds, statistics, streaks, milestones, gym, coaches, and notes.
• Height, weight, injury or recovery status and dates, and similar information you choose to record.

Some of this information may be considered sensitive or consumer health data in certain places. We use it to provide the features you request, with your direction or consent where required. We do not use identifiable health-related information for targeted advertising or sell it. We will obtain any separate authorization required before a disclosure that is not necessary to provide the Service.

Content and social information

• Photos, videos, captions, comments, reactions, messages, reports, blocks, follows, and other interactions.
• Profile and activity visibility settings, followers, coaches, students, gym memberships, leaderboards, and known-for submissions.

Gym and business information

• Gym listings, addresses, contact details, profiles, schedules, announcements, media, and management relationships.
• Information submitted to claim a gym, which may include a business email, business phone number, registration information, explanatory notes, and proof documents.

Device, usage, and technical information

• IP address, request and access logs, browser or app information, operating system, app version, and approximate region inferred from network information.
• Device and push-notification information such as a push token, platform, device identifier or name, notification delivery status, and preferences.
• Product interactions, screens viewed, feature usage, app lifecycle events, performance information, diagnostics, and crash reports.

SeventhFlow does not currently request precise GPS location through the mobile app. Location shown in profiles or gyms is generally supplied by users or gym representatives.

Information from others

We may receive information when another user interacts with you, includes you in content, submits a report, or supplies gym or coaching information. We also receive limited information from service providers that help us operate, secure, analyze, and distribute the Service.

4. How We Use Information

• Create, verify, secure, and maintain accounts.
• Provide profiles, training records, statistics, feeds, social features, messaging, gyms, leaderboards, and notifications.
• Apply privacy settings and determine which users may view content.
• Personalize the Service and remember settings and preferences.
• Measure feature use, troubleshoot, test, improve performance, and develop the Service.
• Prevent fraud, abuse, security incidents, illegal conduct, and Terms violations; investigate reports and protect users.
• Send verification, security, service, support, and optional promotional communications.
• Comply with law, enforce agreements, establish or defend claims, and complete corporate or business transactions.

5. Legal Bases Where Required

Where a law requires us to identify a legal basis, we process information as necessary to perform our contract with you and provide requested features; for legitimate interests such as security, moderation, support, analytics, and improving the Service; with consent where required, including for certain sensitive information or optional communications; and to comply with legal obligations. You may withdraw consent for future processing where consent is the basis, although that does not affect earlier lawful processing.

6. Visibility and Sharing

Other users and the public

Information you make public may be viewed, copied, or reshared by others. Depending on your settings and the feature, profiles, posts, activities, gym relationships, rankings, comments, and reactions may be visible publicly or to approved followers. Direct messages are intended for their participants, but a participant may report a message to our moderation team or capture it outside the Service.

Service providers

We use providers to host and deliver the Service, store data and media, send email and push notifications, process media, provide analytics, monitor errors, secure infrastructure, and support operations. Current provider categories include services supplied by Vercel, MongoDB, Amazon Web Services, Expo, PostHog, Sentry, and Resend. They may process information only for the services they provide to us, subject to their contracts and applicable law.

Legal, safety, and enforcement

We may preserve or disclose information when we reasonably believe it is necessary to comply with law or valid legal process; protect the rights, safety, and security of users, the public, or the Service; investigate fraud or abuse; enforce our agreements; or establish, exercise, or defend legal claims.

At your direction

We share information when you direct us to do so, such as when you use a sharing feature, contact a gym, or voluntarily submit a form for a specifically identified partner. The form or feature will explain the recipient and information involved. We will not treat a general update to this Policy as consent to a materially different, incompatible use of information already collected.

7. Business Transfers

We may disclose information under appropriate confidentiality protections during evaluation or negotiation of a financing, merger, acquisition, reorganization, change of control, bankruptcy, or sale of all or part of the business or assets relating to the Service. If such a transaction closes, information may transfer as part of the operating Service or business.

A purchaser or successor must handle information collected under this Policy consistently with this Policy and applicable law. We will provide notice and choices where required before a materially inconsistent new use. This business-transfer provision does not mean that we may sell the user database as an unrelated, standalone list in violation of the promises made when the information was collected.

8. Sale, Advertising, and Partner Programs

We do not currently sell personal information or share it for cross-context behavioral advertising. If that practice changes, we will update this Policy and provide notices, opt-out rights, and consent mechanisms required by law before beginning the new practice. We will not sell personal information we know belongs to a minor.

We may offer sponsored content or voluntary partner programs without transferring your contact information. We may also let adults choose to submit contact information to a named partner. Participation will be optional and separately disclosed; declining will not prevent ordinary use of SeventhFlow.

9. Aggregated and Deidentified Information

We may create aggregated or deidentified information, such as broad training trends, feature-use statistics, or regional community insights, when individual identities have been removed and the information is not reasonably linkable to a person or household. We may use, publish, license, or share that information for research, product development, business planning, sponsorship measurement, and other lawful purposes. We will take reasonable measures to prevent reidentification and will not attempt to reidentify it except to test our deidentification safeguards or as permitted by law.

10. Retention and Account Deletion

We retain information for as long as reasonably necessary to provide the Service, maintain security and integrity, resolve disputes, enforce agreements, comply with law, and complete the purposes described in this Policy. Retention depends on the type of information, why it was collected, sensitivity, user settings, and legal requirements.

You may request account deletion in the app settings. Access is deactivated promptly and deletion processing occurs in the background. Account records, training data, profiles, media, and other associated records are deleted or deidentified as the process completes. To avoid breaking public conversations, comments on another user's content may be retained with the author replaced by a deleted-user label.

Limited records may be retained when reasonably necessary for fraud prevention, safety and moderation, legal compliance, transaction records, versioned Terms and Privacy acceptance evidence, proof that a deletion request was completed, or establishing or defending claims. Backup copies and provider records may remain for a limited period before being overwritten under normal retention cycles. Information that has been genuinely aggregated or deidentified is no longer associated with your account.

11. Your Choices and Privacy Rights

Depending on where you live, you may have rights to access, correct, delete, or obtain a portable copy of personal information; object to or restrict certain processing; withdraw consent; opt out of sale, sharing, targeted advertising, or certain profiling; and appeal a denied request. You also have the right not to receive discriminatory treatment for exercising an applicable privacy right.

• Update profile information and visibility settings through the app.
• Delete your account through the app settings.
• Unsubscribe from promotional email using the message link; essential account and safety messages may continue.
• Request access, correction, export, deletion, restriction, or an appeal by emailing privacy@seventhflow.com or using our contact page.

We may need to verify your identity before completing a request. An authorized agent may submit a request where permitted, subject to verification of the agent's authority. Because we do not currently sell personal information or share it for cross-context behavioral advertising, there is no such ongoing practice to opt out of today.

EEA, United Kingdom, and Switzerland

Where applicable, you may also lodge a complaint with your local data protection authority. You may contact us first so we can try to address the concern. If we rely on legitimate interests, you may ask for more information about the balancing involved and may object as provided by law.

12. Children and Teen Users

The Service is not intended for children under 13, and we do not knowingly create accounts for them. If you believe a child under 13 has provided personal information, contact us so we can investigate and take appropriate action.

For users we know are under 18, we do not sell personal information or use it for targeted advertising. We process a teen user's information to provide requested features, protect safety and security, comply with law, and for other purposes with consent when required. Parents, guardians, and teen users may contact us with privacy questions or requests.

13. International Processing

SeventhFlow and its providers may process information in the United States and other countries whose laws may differ from those where you live. Where required, we use contractual or other recognized safeguards for international transfers and provide additional information upon request.

14. Security

We use administrative, technical, and organizational safeguards designed to protect personal information, including access controls, encrypted network transmission, credential hashing, and restricted infrastructure access. No system is completely secure, and we cannot guarantee that information will never be accessed, lost, or misused. Protect your password and notify us if you suspect unauthorized access.

15. Changes to This Policy

We may update this Policy as the Service, our practices, and law change. Each published version will have a version number and effective date, and prior versions will remain available at their versioned URLs. We will provide additional notice of material changes where appropriate. If a change requires consent or would materially and incompatibly alter how previously collected information is used, we will provide the notice and choices required by law rather than relying only on a posted policy update.

16. Contact Us

Questions, complaints, and privacy requests may be sent to privacy@seventhflow.com or through our contact page. Please include enough information for us to understand and respond to your request, but do not send passwords or unnecessary sensitive information.