PRIVACY
Your people.
Your choices.
This policy describes flekks 3.0, operated by FLEKKS LLC.
Updated October 19, 2026.
Your account and practice
Supabase provides authentication, database records and private photo storage. Your account can contain your sign-in email or provider identity, display name, username, adult and terms confirmations, friendships, circle memberships, invitations, photo-sharing permissions and usage records. Your local practice preferences, stretch history, favorites, custom routines and private photo journal are stored for your account on this iPhone and excluded from app backups. If you enable Live Activities, a completed stretch can also send a completion event to our service, as explained below.
Invitations and product measurement
Inviting friends is optional. The contact picker gives the app only the person and phone number you choose; that selection is used on your iPhone to prepare a message you review and send. We do not upload your address book or selected invitation phone numbers. We record coarse setup steps and invitation actions, linked to your account, to improve onboarding. A new account arriving through a personal profile link may be associated with its inviter. Accepted friendships, first shared photos, replies and verified paid membership help us measure whether invitations lead to participation. These measurements do not include message bodies, photo contents, questionnaire answers or practice history, and are not sent to an advertising SDK. Growth records are retained for up to 90 days through scheduled cleanup and removed with the associated account.
Sign-in providers
You can sign in with Apple, Google or email. A sign-in provider processes your credentials and gives flekks the identity information needed to open your account. Google Sign-In may process profile and contact information, account and device identifiers, IP-based approximate location, and service and usage information for sign-in, security and analytics. Some information, such as a phone number associated with your Google account, is processed by the provider and is not a required flekks signup field. See Google’s privacy policy and Apple’s privacy policy. flekks does not request GPS location for stretching or sharing.
Private saves and shared photos
Taking a photo or choosing “Save privately” does not upload it. The app removes source photo metadata such as GPS before saving or sending. Sending requires a destination and an explicit Send action. Shared images, smaller previews, captions, timestamps and reactions are stored in access-controlled cloud storage. Shared media is encrypted at rest; it is not end-to-end encrypted because our service must review and deliver it.
Safety review before sharing
When you choose Send, the app sends the shared photo, its preview and caption to our service, which sends them to OpenAI for automated safety moderation before publication. The send screen explains this before you send. This applies to free sharing too. Local normalization removes metadata and reduces image size; it is not a safety classification. If server review is unavailable, the photo is not published. Provider handling is described in OpenAI’s privacy policy.
Who can see a memory
A circle has up to 12 people. Everyone in it, including people who join later, can see its shared history. Direct photos go only to the accepted friends selected for that send. Blocking, leaving or removal can revoke access. An author can remove a shared photo, including through Account → Shared photos after leaving a circle. Photos remain until removed or the account is deleted; reports may also lead to removal. People may already have viewed, photographed or copied a shared image.
Messages, support and service records
When you send a photo or a coach message, we store its sender, recipients, content and delivery or read status so the conversation works. If you choose to include a practice summary with a coach introduction, the preview shows the duration preference, experience and focus areas that will be shared. Caution answers and Apple Health data are not included. Reports and support requests contain the issue and the account or content identifiers needed to investigate it. Sharing counts, reactions, access and delivery records help us operate the service, prevent abuse and enforce allowances.
Widgets, notifications and the Lock Screen
Installation identifiers, device tokens and notification preferences support delivery through Apple Push Notification service. With Live Activities enabled, finishing a stretch can send a completion event and its time to our service to coordinate the temporary Lock Screen prompt. It does not send the routine, detailed stretch history or Apple Health records. The sender chooses whether a photo may appear on authorized circle members’ widgets, including their own, and on recipients’ Live Activities; recipients control their notification and Activity preferences. Widgets may be visible to anyone looking at the device. Display copies are limited to an hour before reauthorization. A narrow, revocable widget credential is kept in shared Keychain storage, separate from your account session. Revocation prevents future authorized retrieval; an offline device’s existing display copy cannot be erased remotely immediately.
Apple Health and purchases
Saving a completed flexibility workout to Apple Health is optional and stays on the iPhone. Health data is not uploaded. Apple processes purchases. RevenueCat verifies membership using purchase information and your account identifier. We do not receive your payment-card details. See RevenueCat’s privacy policy.
Retention and your controls
You can remove shares, revoke surface permission, leave a circle, block people and delete your account in the app. Deletion clears local account data and schedules associated cloud records and media for removal. Infrastructure backups and limited security or financial records can follow separate retention requirements. Non-identifying receipt and spending records prevent duplicate purchases or account-deletion abuse. Deleting an account does not cancel its Apple subscription.
Earlier versions and contact
Legacy body scans, food logging, clothing exchange and paid AI tools do not launch in version 3.0. Existing records from earlier versions remain subject to their access and deletion controls. Contact support to remove a legacy record that this version does not expose. We do not sell your photos or use them for advertising. This static website has no sign-up tracking or advertising cookies. For privacy questions or account help, Email app support.
Last updated October 5, 2026 · Applies to the flekks fitness app and flekks.app.