Privacy Policy

Last Updated: April 8, 2026

Who We Are

FlowGroove is owned and operated by Sounding Doubts - Unipessoal Lda.

• Company: Sounding Doubts - Unipessoal Lda
• Address: Amadora, Portugal
• NIF: 518200736
• Website: https://flowgroove.app
• Contact: privacy@flowgroove.app

This privacy policy explains how we collect, use, store, and protect your personal data when you use FlowGroove.

What Data We Collect

Information You Provide

• Account data: Email address, display name
• Content data: Setlists, songs, notes, and other content you create
• Support data: Bug reports, feature requests, emails

Information We Collect Automatically

• Usage data: How you use FlowGroove (via Google Analytics 4, anonymized)
• Device data: Device type, browser type, operating system
• Log data: IP address, access times, pages viewed

Information We Don’t Collect

• We don’t collect precise location data
• We don’t collect biometric data
• We don’t collect financial information (no payment processing on our side)
• We don’t sell your data to third parties

How We Use Your Data

We use your data to:

✅ Provide the service: Sync your setlists across devices
✅ Improve the product: Understand which features are most used
✅ Communicate with you: Respond to support requests, send updates
✅ Ensure security: Detect and prevent fraud or abuse
✅ Comply with legal obligations: Meet EU regulatory requirements

Legal Basis for Processing (GDPR)

Under the General Data Protection Regulation (GDPR), we process your data based on:

1. Contractual necessity — To provide FlowGroove services you requested
2. Legitimate interests — To improve and secure our product
3. Consent — For analytics and marketing cookies (you can withdraw anytime)
4. Legal obligation — To comply with EU laws and regulations

Who We Share Your Data With

We don’t sell your personal data. We only share with:

Service Providers

• Google Firebase: Cloud storage and real-time sync (encrypted)
• Google Analytics 4: Anonymous usage analytics
• Microsoft Clarity: User behavior heatmaps (anonymized)

Legal Requirements

We may disclose data if required by law or to protect rights, safety, and property.

How We Protect Your Data

• Encryption in transit: All data sent via HTTPS/TLS
• Encryption at rest: Data stored encrypted in Firebase
• Access controls: Only authorized personnel can access data
• Regular audits: Security reviews conducted quarterly
• Backups: Daily automated backups with 30-day retention

Your Rights (GDPR)

Under GDPR, you have the right to:

We respond to all requests within 30 days.

Cookies

FlowGroove uses the following cookies:

Essential Cookies

• Session cookie: Keeps you logged in (required)
• Preference cookie: Remembers your theme choice (required)

Analytics Cookies

• GA4 cookie: Anonymous usage statistics (optional)
• Clarity cookie: User behavior tracking (optional)

You can manage cookie preferences in your browser settings or via our cookie consent banner.

Data Retention

We retain your data for as long as:

• Active account: Indefinitely
• Deleted account: 30 days (backup retention), then permanently deleted
• Inactive account (12+ months): We’ll email you before deletion

Children’s Privacy

FlowGroove is not intended for children under 16. We don’t knowingly collect data from children under 16. If we learn we have, we delete it immediately.

International Data Transfers

Your data may be processed outside the EU (via Google Firebase in the US). We ensure:

• Standard Contractual Clauses (SCCs) with processors
• Adequacy decisions where applicable
• Equivalent protections for all transfers

Changes to This Policy

We may update this policy. We’ll notify you of material changes via:

• Email to registered users
• Banner on the website
• Updated “Last Updated” date

Contact Us

For privacy-related questions or requests:

• Email: privacy@flowgroove.app
• Address: Sounding Doubts - Unipessoal Lda, Amadora, Portugal
• NIF: 518200736

Your privacy matters. We treat your data like we treat our own.