Flow State App Privacy Policy
Last updated 10 November 2026
What we collect, why, and what you can do about it. We keep it to what's needed to run your plan and keep the app working.
Who looks after your data
Imogen Hunter, Joseph Laurie and Benjamin Laval, working together in partnership, are responsible for your data together. We make the Flow State app using the Flow State brand with Flow State Freediving's permission.
The best way to reach us is at immy@flowstatefreediving.co.uk. Address is 138 Herne Hill Road, London SE24 0AY. Ben looks after data requests.
What we collect
Account: how you sign in. That's your Apple or Google account (which shares your name and email, or with Apple a private relay email if you choose to hide yours), or your email. Your name, if you add one.
Training: your answers in onboarding (goal, experience, training days), your hold times, the sessions you do and how they felt.
Health: your hold times and how sessions felt can count as health data, as do the health, safety and age confirmations you give when you sign up.
Usage: which screens you open and buttons you tap, your device type and app version, and crash reports.
Screen recordings, only if you say yes: the screens you see and what you tap, never your camera, microphone or anything you type. Screens that show your hold times or how a session felt are blanked out, so recordings don’t contain your health data. Only Immy, Joe and Ben watch them.
Why we use it, and our legal basis
To give you the app you signed up for: your account, your plan and progress, and adjusting your tables when you tell us a session felt too easy or too hard. Legal basis: our contract with you.
Health data: only to build and run your training plan, and only with your explicit consent, which you give when you sign up. Without it we can’t make you a plan. You can withdraw consent at any time by emailing immy@flowstatefreediving.co.uk. We’ll stop using your health data and delete it, which means we can no longer run your plan. You can also delete your account in Profile → Account.
Usage and crash reports: to keep the app working and make it better. Legal basis: our legitimate interest in running a reliable app. You can object to this (see Your rights).
Screen recordings: to see what's confusing or broken. Legal basis: your consent. Turn it off any time in Profile → Account.
Reminders are set on your phone with your permission and aren't sent from our servers.
Immy and Joe may look at anonymised training results (with nothing that identifies you) to improve the plans.
Your plan adjusts itself from how sessions felt, but we don't make any automated decisions with legal or similarly significant effects on you.
Who we share it with
We never sell your data or use it for advertising. A few services run parts of the app for us and only use your data on our instructions: Supabase (accounts and storage), PostHog (usage, crash reports and screen recordings), Resend (sign-in emails), Apple and Google (sign-in, app delivery and notifications).
Flow State Freediving doesn't get your data for its own use. If we ever want to tell you about its courses or trips, we'll ask you first.
Where it's stored
Your account and training data are stored in the EU, with Supabase in its Paris region. Usage data and screen recordings go to PostHog's EU servers. The EU is covered by UK adequacy rules.
Apple and Google may process data in the US. Those transfers are protected by the UK–US data bridge or the UK's standard contract terms.
How long we keep it
Account and training data: while you have an account.
When you delete your account, it’s deleted from us and from the services that run the app for us within 30 days.
Screen recordings: up to 90 days, then deleted. Usage and crash data: up to 12 months.
We may keep a little longer anything the law requires us to keep.
Your rights
You can ask to see, correct, download or delete your data, or to limit how we use it. Download and delete are in Profile → Account. For anything else, email us. We'll reply within a month.
You have the right to object to us using your data for our legitimate interests, such as usage and crash reports. Email us and we'll stop unless we have a strong reason not to.
You can withdraw your consent at any time. Turn off screen recording in Profile → Account. To withdraw consent for your health data, email us and we’ll stop using it and delete it (your plan can’t run without it), or delete your account in Profile → Account. Withdrawing consent doesn’t affect anything we did before you withdrew it.
Complaints
If you're unhappy with how we handle your data, email immy@flowstatefreediving.co.uk. We'll confirm we've got it within 30 days and tell you what we've done.
You can also complain to the Information Commissioner's Office (ico.org.uk, 0303 123 1113).
Age and changes
The app is only for people aged 18 or over. We'll tell you in the app if we change this policy.