Privacy Policy

1. Who We Are

UNIFLOW is a habit-tracking and accountability platform developed and operated by UNI Organisation, founded by Shiva Rathore. Our registered contact is shivarathorecse@gmail.com. By using UNIFLOW, you agree to the practices described in this policy.

2. Information We Collect

• Account data: Email address and password hash (via Supabase Auth).
• Profile data: Display name, optional avatar, invite codes for FlowMate bonding.
• Usage data: Habits logged, completion timestamps, streak data, and AI Mentor (Aura) chat history.
• Feedback data: Name, email (optional), star rating, and written feedback submitted via our feedback form.
• Technical data: Browser type, device type, IP address (anonymised after 30 days), and page interactions.

3. How We Use Your Information

• To provide and operate UNIFLOW's core features (habit tracking, FlowMate bonding, AI Mentor).
• To personalise your experience and generate AI-driven insights.
• To read and respond to product feedback.
• To send essential service emails (account confirmation, security alerts). We do not send marketing emails without explicit consent.
• To detect abuse, ensure platform integrity, and comply with legal obligations.

4. Data Storage & Security

All data is stored on Supabase infrastructure (PostgreSQL), hosted on secure cloud servers with encryption at rest and in transit (TLS). Row-Level Security (RLS) policies ensure users can only access their own data. API keys are stored server-side only and never exposed to the client.

5. Data Sharing

We do not sell your personal data. We may share data only with:

• Supabase – our backend-as-a-service provider.
• Law enforcement – only when required by applicable law.

6. Your Rights

Where applicable law grants you rights (e.g., GDPR, DPDPA 2023), you may:

• Request access to your personal data.
• Request correction or deletion of your data.
• Object to or restrict processing.
• Request data portability.

Email shivarathorecse@gmail.com to exercise any of these rights. We will respond within 30 days.

7. Cookies

UNIFLOW uses minimal cookies — strictly those required for authentication sessions (Supabase JWT). We do not use third-party tracking or advertising cookies.

8. Children's Privacy

UNIFLOW is not directed at children under 13. We do not knowingly collect data from children. If we discover such data has been collected, we will delete it promptly.

9. Changes to This Policy

We may update this policy periodically. Material changes will be announced via the platform. Continued use after changes constitutes acceptance.

10. Contact

Questions about this policy? Contact: shivarathorecse@gmail.com
UNI Organisation · India