FluxTribe Privacy Policy
FluxTribe ("the App") is operated by Echotropy LLC, a limited liability company organized under the laws of Wyoming, United States ("we," "us"). This policy explains what information the App collects, how we use it, and the choices you have. It applies to the FluxTribe app distributed on the United States App Store and to fluxtribe.net.
Because FluxTribe records health information, we also maintain a separate Consumer Health Data Privacy Policy covering that data in detail, as required by the laws of Washington, Nevada, and Connecticut. Where the two documents overlap, the Consumer Health Data Privacy Policy controls for consumer health data.
1. Information we collect
Account information. When you sign in with Apple, we receive a unique Apple identifier and, on first sign-in, the email address you choose to share (which may be Apple's private relay address). When you sign in with an email verification code, we collect that email address. We use email solely to identify your account and send verification codes.
Profile information you choose to provide. Nickname, avatar, bio, gender, age, height, and weight, if you enter them.
Health information you record. Medication plans and reminders, injection records (medication name, dose, injection site, time), weight and body-fat measurements, and side-effect notes. If you grant permission, the App reads weight and body-fat data from Apple Health; the App does not write to Apple Health. See the Consumer Health Data Privacy Policy for details.
Community content. Posts, photos, and comments you publish, and social actions such as likes, follows, reports, and blocks. Content you publish to the community feed is visible to other users of the App.
Feedback you send us. If you send feedback in the App, we receive what you write, any screenshots you attach, and technical details the App adds automatically: app version, operating system version, device model, and which screen you sent it from. We use this to answer you and fix problems. Our replies appear in the App's message center.
Purchase information. If you subscribe, we receive subscription status and transaction information from Apple through our subscription service provider. We do not receive your credit card number.
Consent and service records. We keep records of the policy versions you agreed to and when, and basic technical records (such as timestamps) generated by using the service.
Product usage events. We use PostHog, an analytics service, to record how the App is used: that a screen was opened, that an injection was logged, that a purchase succeeded. These events carry no health content and nothing you write: no medication name, dose, injection site, measurement, side-effect note, or post or comment text. There is one exception: if your answers in the medication safety screening stop you from creating a medication plan, the App records which screening question it was. That event is sent without your account identifier, and we do not link it to your account or to your other events; we use it only to count how often each question applies, not to record who it applied to. Every other event carries the account identifier described above (an internal number, not your email or name) and technical details about your device and the App: device model, operating system version, app version, language and time zone settings, screen size, and whether you are on Wi-Fi or cellular. PostHog also receives your IP address and derives an approximate location from it, at the city and country level. If the App crashes, it sends PostHog a crash report the next time you open it: where in the App's code the failure happened, with the same account identifier and device and app details. Crash reports contain no health records and nothing you entered. When you sign out or delete your account, the App stops attaching your account identifier to these events. You can turn these events off at any time in Settings → Usage analytics. While that switch is off, the App sends nothing to PostHog.
We do not collect your contacts, precise real-time location, browsing history outside the App, or advertising identifiers. The App contains no advertising SDKs. We do not use the usage events above for advertising, and we do not combine them with data about you from other companies' apps or websites.
Apple Ads attribution. If you install the App after tapping one of our ads on the App Store (Apple Ads), Apple's AdServices framework gives the App a short-lived attribution token when you first open it. The App passes that token to RevenueCat, our subscription service provider, which uses it to retrieve from Apple which of our Apple Ads campaigns, ad groups, and keywords led to the install, and keeps that with your subscription records. We use this only to measure which of our own ads lead to installs and subscriptions. It does not use your device's advertising identifier, does not track you across other companies' apps or websites, and is not shared with any advertising network. If you did not install through one of our Apple Ads ads, Apple reports no campaign.
Website visits. On fluxtribe.net we use Cloudflare Web Analytics to count visits: which pages are viewed, the site you came from, and your browser, device type, and country. It sets no cookies, does not identify you or follow you across other websites, and is not linked to your App account.
2. How we use information
We use the information above to operate the App: to maintain your account, store and chart your records, deliver reminders, run the community feed, moderate content, and manage subscriptions. We use the product usage events to see which features people use and where they get stuck, so we know what to fix next. We do not use your information to target advertising, and we do not sell your personal information. The only advertising-related use is the Apple Ads attribution described above, which tells us which of our own ads led to an install.
Automated content moderation. To keep the community safe, the text of posts and comments is checked by an automated moderation model (Llama Guard) running on Cloudflare Workers AI before publication. This processing happens within our infrastructure provider and is used solely for content moderation.
3. Who we share information with
We share information only with service providers that process it on our behalf to run the App:
| Provider | What they process | Purpose |
|---|---|---|
| Cloudflare, Inc. (USA) | All service data described above (database, media storage, email delivery, and automated moderation of post text) | Our backend infrastructure |
| RevenueCat, Inc. (USA) | An app-scoped user identifier, Apple purchase/subscription information, and Apple Ads attribution (which of our ads, if any, led to your install) | Subscription management and measuring our own ads |
| PostHog Inc. (USA) | Product usage events, crash reports, your internal account identifier, technical details about your device and the App (such as device model, operating system version, app version, language and time zone), and your IP address and the approximate city-level location derived from it | Product analytics |
| Apple Inc. (USA) | Sign in with Apple, App Store purchases, Apple Health data on your device (with your permission), and push delivery (a device token, the nudging opponent’s nickname, and whether the nudge asks for a weight or waist entry; no measurement values) | Platform services |
We do not share your personal information with third parties for their own marketing or advertising. We may disclose information if required by law, or to protect the rights and safety of users and the public.
Other users can see the content you publish and your public profile (nickname, avatar, bio, and community statistics). Your health records are private to your account and are not visible to other users unless you include them in something you post.
4. Where information is stored
Your service data is stored on Cloudflare infrastructure. Product usage events are stored by PostHog in the United States.
5. How long we keep information
We keep your information while your account is active. When you delete your account (Settings → Account), it enters a short cooling-off period during which you can change your mind; after that, your account and records are permanently deleted from our production systems. Content you posted to the community is removed from the feed when your account is deleted.
6. Your choices and rights
We offer the following to all users in the United States, regardless of state:
- Access and correction. You can view and edit your profile and records directly in the App.
- Deletion. You can delete individual records in the App, and delete your entire account in Settings → Account.
- A copy of your data. Email us and we will provide a copy of the personal information associated with your account.
- Withdraw consent. You can revoke Apple Health access at any time in iOS Settings, and turn off product usage events in Settings → Usage analytics.
To exercise any of these, use the App or email us at the address below. We will respond within 45 days. If you disagree with our response, reply with "Appeal" and a different team member will review the decision.
7. Children
FluxTribe is intended for adults and is not directed to children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has created an account, contact us and we will delete it.
8. Security
We protect your data with encryption in transit, access controls, and isolation of your records to your account. No system is perfectly secure; if a breach affecting your unsecured health information occurs, we will notify you and the FTC as required by the FTC Health Breach Notification Rule, and affected state authorities as required by state law.
9. Changes to this policy
We will post any changes here and update the version and date above. For material changes, we will notify you in the App and, where required by law, ask for your consent again.
10. Contact
Echotropy LLC
Email: support@fluxtribe.net