Privacy

Privacy Policy

Last updated: 29 October 2026

Who is responsible

This policy covers the Aflo app for iPhone and the website aflotips.com.

Data in the app

Stored on your device only

Your display name, your preferences (experience, goals, focus areas, cautions and daily target), saved and custom routines, lesson progress, practice history and settings are stored on your device. We cannot see them. Deleting the app deletes them. A backup of your device may include them, depending on your device settings.

Reminders

Reminders are local notifications that your device schedules itself. The app asks for permission first. No reminder data leaves your device.

Membership and purchases

Membership is sold as an in-app purchase through Apple. Apple processes the payment under its own terms and privacy policy. We do not receive your payment details.

The app connects to RevenueCat, a service of RevenueCat, Inc., United States, to load membership offers and check purchase access. Its SDK generates a random app identifier, called an anonymous App User ID. We do not link it to your display name, email address or an Aflo account.

RevenueCat receives purchase information supplied by Apple, such as the product, purchase and renewal dates, transaction identifiers and subscription status. The SDK also sends technical information: device model, operating system, app and SDK versions, language preferences, store region and, where available, Apple's vendor-specific device identifier (IDFV). Your IP address is visible when the app connects. Your local profile, preferences and practice history are not sent to RevenueCat.

RevenueCat processes this data on our behalf to unlock membership content, restore purchases, validate transactions and prevent fraud. Its dashboard also provides purchase history, subscription and revenue analytics. We do not use it to advertise to you or track you across other companies' apps and websites. RevenueCat's privacy policy describes its processing and safeguards.

Legal basis for users in the EU, the EEA, the UK and Switzerland: performance of the membership contract (Art. 6(1)(b) GDPR), legal obligations regarding transaction records (Art. 6(1)(c) GDPR), and our legitimate interest in understanding purchase activity and operating the membership service (Art. 6(1)(f) GDPR).

Retention: data on your device stays there until you delete it or the app. Transaction records at RevenueCat are kept as long as your membership can be restored and as long as tax and commercial law require. Deleting the app does not delete purchase records held by Apple or RevenueCat. For requests concerning membership data, contact us at mail@aflotips.com.

What the app does not do

The app has no advertising SDK or separate screen, tap or exercise analytics service and does not sell data. RevenueCat's purchase and revenue analytics are described above. Apple shares crash reports and usage statistics with us only if you allowed this in your device settings.

This website

This website is hosted by Vercel Inc., United States. When you open it, Vercel processes the technical data needed to deliver the page, such as your IP address, the time of the request, the requested page and your browser type. It keeps server logs for security and operation. Vercel's privacy notice describes this. The website sets no cookies of its own and uses no analytics.

Legal basis: our legitimate interest in providing a secure website (Art. 6(1)(f) GDPR).

Waitlist

If you join the waitlist, we store your email address, whether you use an iPhone or Android, the time you joined, the version of the consent text and, if you arrived through a campaign link, its source, medium and campaign name. We use this only to tell you when Aflo launches and to send you launch updates. Joining does not create an app account.

The list is stored in a database run by Neon (Databricks, Inc., United States) in its Frankfurt region. The signup runs through a Vercel function in Frankfurt. Neon's privacy notice describes its safeguards.

Legal basis: your consent (Art. 6(1)(a) GDPR). You can withdraw it at any time by writing to mail@aflotips.com or through the unsubscribe link in our emails. We keep your entry until you withdraw your consent or until we stop sending launch updates.

Data transfers

Apple, RevenueCat, Vercel and Neon are companies based in the United States and may process data there. Their privacy policies describe the safeguards they use for transfers from the EU and other regions.

Your rights

Depending on where you live, you may have the right to access, correct, delete or receive your data, to restrict or object to its processing and to complain to a data protection authority. You can view and delete your local profile and practice data on your device. Deleting the app removes that local data, but does not cancel a subscription or erase purchase records. For membership data and other requests, write to mail@aflotips.com.

Children

Aflo is not directed to children under 16. We do not knowingly collect personal data from them.

Changes

We update this page when something changes. The date at the top shows the current version.

WHOOP connection under development

The WHOOP connection is not enabled for live health data. Its separate personal-test privacy notice describes the operator’s personal connection test. Public customer connections remain unavailable.