Privacy Policy
Last updated: July 27, 2026
This Privacy Policy explains what personal information Flaga AI collects when you use our AI health platform, how we use it, who we share it with and the rights you have over your data.
1. Information we collect
We collect the information you provide when you create an account, purchase AI credits or interact with our AI coaches, including your name, email address, password (stored hashed), and payment references.
To personalize your plans we also process the health inputs you choose to share — goals, body metrics, dietary preferences, training history, food logs, sleep and recovery signals, and messages exchanged with the AI.
We automatically collect limited technical information such as device type, browser, approximate location derived from IP, and product usage events to keep the service secure and reliable.
2. How we use your information
We use your information to operate the platform, generate personalized nutrition, training and recovery recommendations, process credit purchases, provide customer support, improve our AI models on aggregated non-identifying data, prevent fraud and comply with legal obligations.
3. Legal bases
We process your data based on the performance of our contract with you, your explicit consent for sensitive health data, our legitimate interest in improving and securing the service, and to comply with applicable laws.
4. Sharing and subprocessors
We do not sell your personal information. We share limited data with vetted processors that help us run the service — hosting, payment processing, transactional email, analytics and AI model providers — under strict confidentiality and data-processing agreements.
5. International transfers
Where data leaves your region we rely on appropriate safeguards such as Standard Contractual Clauses to protect it in accordance with applicable data-protection laws.
6. Retention
We keep account and health data while your account is active and for a limited period after closure so we can meet legal, accounting and dispute-resolution requirements. You can request earlier deletion at any time.
7. Your rights
Subject to your jurisdiction you may access, correct, export, restrict or delete your personal data, withdraw your consent for optional processing, and lodge a complaint with your local data-protection authority.
8. Security
We use encryption in transit, encryption at rest for sensitive fields, access controls and continuous monitoring. No system is perfectly secure, but we work hard to protect your information.
9. Contact
To exercise your rights or ask questions about this Privacy Policy, contact us at [email protected]. We respond within 30 days.