Legal
Privacy Policy
Last updated: 25 June 2026
The important bits, up front
- Your health data belongs to you. We will never sell, rent or trade your personal information or health data — to anyone, ever.
- The information you track in Fluxie (your cycle, symptoms, check‑ins, food logs and voice notes) is sensitive information under Australian privacy law, and we treat it that way.
- We only collect health information with your consent, and you can withdraw that consent at any time by deleting your data or your account.
- We use a small number of trusted service providers to run Fluxie. We share only what's necessary, under contract, and never for their own marketing.
- You can access, correct, export or delete your data at any time. If you're ever unhappy with how we've handled your information, you can complain to us and, if needed, to the Office of the Australian Information Commissioner (OAIC).
This Privacy Policy explains how Fluxie (ABN 41 488 231 365) ("Fluxie", "we", "us" or "our") collects, holds, uses, discloses and protects your personal information when you use the Fluxie mobile app, the website at fluxieapp.com, and related services (together, the "Service").
We are bound by the Privacy Act 1988 (Cth) and the 13 Australian Privacy Principles (APPs). Because Fluxie collects health information, these obligations apply to us regardless of our size or turnover. We are committed to handling your information in a way that is lawful, fair and transparent.
Please read this Privacy Policy together with our Terms & Conditions. If you don't agree with how we handle your information as described here, please don't use the Service.
1. Who we are and how to contact us
- Entity: Fluxie
- ABN: 41 488 231 365
- Location: Queensland, Australia
- Privacy contact: hello@fluxieapp.com
For any privacy question, access or correction request, or complaint, email hello@fluxieapp.com.
2. What information we collect
2.1 Information you give us
Account information. When you create an account, we collect your email address and a password (your password is stored only in a securely hashed form — we never see or store it in plain text). If you sign in using Apple or Google, we receive basic profile information (such as your email address) from that provider in line with their privacy terms.
Health and sensitive information. This is the heart of Fluxie, and it is "sensitive information" under the Privacy Act, which carries extra protection. With your consent, we collect the information you choose to enter, which may include:
- cycle and menstrual data, and cycle‑phase tracking;
- symptoms, mood, energy and other check‑in data;
- food and hydration logs;
- voice notes you record;
- any other health‑related notes, factors or logs you add.
Providing this information is entirely voluntary — it's up to you how much you enter. You can leave any field blank.
2.2 Information we collect automatically
Device and technical data. Information about the device and app, such as device model and operating system, app version, language settings, and crash/diagnostic logs that help us fix bugs.
Usage data. Information about how you use the Service (for example, which features you use), generally in aggregated or de‑identified form, so we can understand what's useful and improve Fluxie.
Website data. When you visit fluxieapp.com, our hosting and analytics tools may process limited technical information such as your IP address and browser type. See Section 13 (Cookies and our website).
3. Why we collect your information, and our consent basis
We collect, hold and use your information to:
- create and secure your account and verify you as a user;
- provide the core Service — storing your entries, generating your patterns, insights, cycle‑phase estimates and reports;
- back up, restore and sync your data across your devices;
- respond to your support requests;
- send you service messages (for example, about changes to the Service) and, only with your consent, reminders, newsletters or product updates;
- understand usage and fix bugs to improve the Service; and
- meet our legal obligations.
Consent for sensitive information. Under APP 3, we only collect your health and other sensitive information with your consent. You give that consent when you create an account and choose to enter health data. You can withdraw your consent at any time (see Section 9). Withdrawing consent for core health processing means we can no longer provide the Service, so it will involve deleting your data and/or account.
We collect personal information only by lawful and fair means, and only what is reasonably necessary for the purposes above.
4. How we use automated insights
Fluxie generates patterns, cycle‑phase estimates, hydration estimates and other insights from the data you enter. These are produced to help you reflect on your own information.
- These insights are approximations, not clinical findings, and are not medical advice (see our Terms & Conditions).
- Fluxie does not make any automated decision that produces a legal or similarly significant effect on you.
- We do not send your health data to any third‑party artificial‑intelligence service. Insights are generated within our own systems.
5. We never sell your data
We do not sell, rent or trade your personal information or health data. We do not disclose your information except as set out in this Privacy Policy.
6. Who we share your information with
We share limited personal information only where it's necessary to run the Service, where you ask us to, or where the law requires it.
Service providers. We use a small number of trusted providers who process data on our behalf, under contracts that require them to protect your information and use it only for the services they provide to us. These include:
| Provider | What they help us do | Where data is processed |
|---|---|---|
| Supabase | Database, authentication and file/voice‑note storage | Australia (Sydney, ap-southeast-2) |
| Kit (formerly ConvertKit) | Email and newsletters (your email address only) | United States |
| Netlify | Website hosting | United States / global |
| Apple / Google | App distribution, sign‑in and push notifications | United States / global |
| Stripe | Subscription payment processing (email and payment details only) | United States |
Legal disclosures. We may disclose information if required or authorised by law — for example, in response to a valid court order, subpoena or lawful request from a regulator or law‑enforcement agency. We will disclose only the minimum necessary.
Business transfers. If Fluxie is involved in a sale, merger or restructure, your information may be transferred as part of that transaction. We would require any recipient to honour this Privacy Policy or seek your consent.
We will never share your health data with advertisers, data brokers or insurers, and we do not use your health data to target advertising.
7. Doctor reports and exports
Fluxie's report and export feature is designed so you can share your own tracking data with your healthcare team if you choose.
- Fluxie does not send your data directly to any doctor, clinic or other provider.
- You decide what to export, and to whom you send it.
- Once you share an export outside the app (for example, by email), it leaves our systems and is in your control. Please make sure any recipient address is correct and trusted before you send.
8. Sending information overseas (cross‑border disclosure)
Your health data is stored in Australia (Sydney) via Supabase. Limited non‑health data (such as your email address for newsletters) is disclosed to our email provider Kit in the United States, and to Netlify (website hosting) and Stripe (payments) which operate globally including the United States.
Before we disclose your personal information to an overseas recipient, we take reasonable steps to ensure they handle it consistently with the Australian Privacy Principles, including through contractual data‑protection terms.
Based on our current providers, your information may be disclosed to recipients in: Australia and the United States.
9. Data security
We take the security of your information seriously and apply technical and organisational measures appropriate to its sensitivity, as required by APP 11. These measures include:
- Encryption in transit. All data exchanged between the app and our servers is protected using HTTPS/TLS encryption.
- Encryption at rest. Your data, including voice notes, is stored in encrypted cloud storage provided by our database and storage provider.
- Hashed passwords. Passwords are stored using one‑way hashing — never in plain text.
- Access controls. Access to systems holding personal information is restricted to authorised people who need it to operate or support the Service, protected by authentication controls.
- Row‑level / per‑account isolation. Your records are linked to your account so that one user cannot access another user's data.
- Voice notes. Voice notes are stored privately and linked only to your account. We do not listen to your voice notes as part of normal operations.
- Backups and recovery to protect against data loss, and routine review of our security practices.
- Secure disposal. When data is no longer needed, we take steps to destroy or de‑identify it.
No method of transmission or storage is ever completely secure. While we work hard to protect your information, we can't guarantee absolute security. Keep your device locked (PIN/Face ID/fingerprint) and your account password private.
If a data breach occurs that is likely to result in serious harm, we will assess it and notify you and the OAIC as required under the Notifiable Data Breaches scheme.
10. How long we keep your information
We keep your personal information only for as long as needed to provide the Service and for any period the law requires.
- Your health data is retained while your account is active.
- When you delete an entry, your account, or otherwise ask us to delete your data, we delete it from our active systems and from routine backups within 30 days, except where we're required to retain limited information by law.
- We may retain de‑identified or aggregated data (which can no longer identify you) for analytics and product improvement.
11. Your rights
Under the Australian Privacy Principles, you can:
- Access the personal information we hold about you (APP 12). Most of it is visible to you directly in the app; you can also request a copy by emailing us.
- Correct your information if it's inaccurate, out of date or incomplete (APP 13). You can edit most data directly in the app.
- Export your data in a portable format.
- Withdraw consent to the processing of your health data at any time by deleting your data and/or account.
- Delete your account and all associated data at any time from the Settings screen, or by contacting us.
- Complain if you think we've mishandled your information (see Section 12).
We'll respond to access and correction requests within a reasonable time. There's normally no charge; if a request is complex we'll let you know of any reasonable cost before proceeding.
12. Complaints
If you have a privacy concern or complaint, please contact us first at hello@fluxieapp.com. We'll acknowledge your complaint and aim to resolve it promptly and fairly.
If you're not satisfied with our response, you can contact the Office of the Australian Information Commissioner (OAIC):
- Website: oaic.gov.au
- Phone: 1300 363 992
13. Cookies and our website
Our website may use essential cookies to function and, with your consent, limited analytics to understand site usage and improve it. You can control or block cookies through your browser settings, though some site features may not work as well if you do.
14. Young users
You must be at least 16 years old to use Fluxie. We don't knowingly collect personal information from anyone under 16. If we learn that we've collected information from someone under 16 without appropriate consent, we'll delete it.
If you're a parent or guardian and believe a child under 16 has used Fluxie, please contact us.
15. Changes to this Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in the law, our practices or the Service. We'll post the updated version here with a new "last updated" date, and where changes are material we'll take reasonable steps to let you know (for example, an in‑app notice).
16. Contact us
Email: hello@fluxieapp.com
Entity: Fluxie, ABN 41 488 231 365, Queensland, Australia