Last updated August 28, 2026
When you create an account, we collect your name, email address, and (if you use Google) profile photo through Firebase Authentication. You may sign in with Google or with email and password. We do not store your Google password. If you choose email/password, your password is handled by Firebase Auth and is not stored in Flovy's application databases. Temporary or disposable email addresses are not allowed for signup.
When you connect third-party services, we access only the data you explicitly authorize:
• Google Calendar. We read your calendar events (past and upcoming) to provide scheduling insights and coaching. We never modify or delete your calendar entries. • Notion. We read page titles and content from pages you explicitly select. We store a plain-text copy locally to power AI coaching without repeatedly calling the Notion API.
Messages you exchange with your AI Coach are stored to maintain conversation history and to improve the quality of personalized coaching over time. A short summary of your coaching profile (~150 words) is generated and stored to give the AI context across sessions.
If you accept analytics in the cookie banner, we collect anonymized analytics (page views, feature usage) via Google Analytics to improve the product. This data is not tied to your personal identity.
We use the information we collect to: • Provide and personalize the AI coaching experience • Generate proactive coaching briefings based on your calendar and notes • Maintain your conversation history and coaching profile • Sync selected Notion pages for context-aware suggestions • Send you notifications and coaching nudges (if enabled) • Improve and develop new features • Respond to your support requests
We do not sell, rent, or trade your personal data. We share data only with:
Your messages and relevant context (calendar events, Notion notes, coaching summary) are sent to our AI provider (Google Gemini / OpenAI) to generate coaching responses. These providers process data per their own privacy policies and do not use your data to train their models when accessed via API.
We use cloud hosting (Railway), database services (PostgreSQL), and Firebase (Google) for authentication. These providers act as data processors under our instructions.
We may disclose information if required by law, subpoena, or legal process, or to protect the rights, property, or safety of Flovy AI, our users, or the public.
Your data is stored in encrypted PostgreSQL databases hosted on secure cloud infrastructure. We use HTTPS/TLS for all data in transit. OAuth tokens for connected services (Google Calendar, Notion) are stored securely and never exposed to the frontend. We retain your data for as long as your account is active. You may request deletion at any time (see Your Rights below).
Depending on your location, you may have the following rights: • Access. Request a copy of the personal data we hold about you. • Correction. Request corrections to inaccurate data. • Deletion. Request deletion of your account and all associated data. • Disconnect. Revoke access to connected services (Google Calendar, Notion) at any time from Settings. • Data Portability. Request your data in a machine-readable format. • Opt-out. Disable notifications and analytics tracking from the cookie banner, the footer, or Settings. To exercise any of these rights, email us at privacy@flovy.ai or use the account deletion option in Settings.
We use essential storage (localStorage and similar) to keep you signed in, remember your theme, and run the product. These are required for the service to work. Optional Google Analytics runs only if you accept it in the cookie banner. We do not use advertising cookies or cross-site tracking. You can change this anytime from the cookie banner, the footer Cookies link, or Settings.
Our service may contain links to third-party websites (Notion, Google). We are not responsible for the privacy practices of these external sites. We encourage you to review their privacy policies.
Flovy AI is not intended for users under the age of 13. We do not knowingly collect personal information from children. If you believe a child has provided us with personal data, please contact us and we will promptly delete it.
We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page and updating the "Last updated" date. Continued use of the service after changes constitutes acceptance of the updated policy.
If you have any questions about this Privacy Policy or our data practices, please contact us at: Email: privacy@flovy.ai General: hello@flovy.ai