Privacy Policy
1. Who we are and what this policy covers
Flamico (“Flamico”, “we”, “us”, “our”) makes the Flamico mobile application for iPhone and Android (the “App”) and operates the website flamico.app (the “Website”). Together we call them the “Services”. Flamico is the controller of the personal information described in this policy, which means we decide how and why it is processed.
This Privacy Policy explains what information we collect when you use the Services, why we collect it, how we use and share it, how long we keep it, how we protect it, and the choices and rights you have. It applies to everyone who uses the Services, wherever they live. Some sections add details that only apply in certain countries or states; those sections say so.
This policy does not cover services run by other companies, even if you reach them through Flamico, such as the App Store, Google Play, the website of a crisis helpline, or a site you open from one of our articles. Their own privacy policies apply.
2. Our principles
- Data minimization. We only collect what a feature truly needs. If a feature can run entirely on your phone, it does.
- No advertising business. Flamico is paid for by subscriptions. We have no reason to sell your attention or your data, and we don’t.
- No shame, no exposure. Nothing we send you, and nothing we show anyone you invite, reveals the sites you tried to visit or the details of your struggle unless you choose to share them.
- You stay in control. You can see, export and delete your information from inside the App, and you can contact us about anything in this policy.
3. Information you give us
3.1 Account information
When you create an account, we collect the sign-in method you choose (for example Sign in with Apple, Sign in with Google, or email), a unique account identifier, and your email address if the sign-in method provides one. If you use Sign in with Apple and choose “Hide My Email”, we receive a private relay address from Apple instead of your real one. We use your account to keep your progress, settings and subscription linked to you across devices.
3.2 Your answers during setup
When you set up Flamico, we ask questions that help the App support you: your first name or nickname, your main goal, your reason for quitting (for example “to be present for my family”), the times of day or situations you find hardest, and similar preferences. You can skip questions, and you can change or delete your answers at any time in Settings. These answers are used to personalize the App: the words on the block screen, the lock screen, Mico’s messages, check-in times and night lock suggestions.
3.3 Your motivational video
Flamico lets you record or choose a short video of yourself to watch when an urge hits. The video is stored only on your device. We do not upload it to our servers. If you have turned on your phone’s own backup (iCloud on iPhone or Google backup on Android), the operating system may include the App’s data in that backup; that backup is handled by Apple or Google under their privacy policies, not by us.
3.4 Your progress, check-ins and notes
The App records the information you create while using it: your streak, the date of a reset if you report one, the times you pressed “I feel an urge”, the steps you took during an urge (for example “breathed with Mico” or “locked my phone”), check-ins, milestones, and notes you write. This information powers your Progress screen and your insights, such as the hours when urges usually hit you. It is stored on your device and synced to your account so it is not lost if you change phones.
3.5 Conversations with Mico
If you chat with Mico, the messages you send and Mico’s replies are processed to generate answers. See section 7 for exactly how this works.
3.6 Accountability partner
If you invite someone to be your partner, we process the invitation and, once they accept, the link between your account and theirs, plus the alert settings you choose. See section 8.
3.7 Messages to us
If you contact support, we receive your email address, the content of your message, and any information you decide to include, such as screenshots. We use it to help you and to improve the Services.
4. Information collected automatically
- Device and app information: device model, operating system version, App version, language, time zone and region setting. We use these to make the App work correctly on your phone, show times in your time zone and fix bugs.
- Subscription status: whether you have an active subscription or trial, which plan, and when it renews or ends. We receive this from Apple or Google. We never receive your card number or bank details.
- Notification token: if you allow notifications, a token from Apple Push Notification service or Firebase Cloud Messaging that lets us deliver reminders to your device.
- Crash reports and performance data: if you allow it, technical reports when the App crashes or runs slowly (for example the screen that was open and the error that occurred). These reports do not include your messages, your video, your notes or anything about the sites you visit.
- Product analytics: limited, pseudonymous events about how features are used (for example “lock started”, “urge flow completed”, “paywall shown”). They help us understand which features actually help people and where the App is confusing. They never include the content of your messages or notes, and never include the names of blocked sites or apps. You can turn product analytics off in Settings at any time.
- Server logs: when the App or the Website talks to our servers, our infrastructure records technical information such as IP address, date and time, and the request made. We use these logs for security, abuse prevention and troubleshooting, and keep them for a short time (see section 15).
5. What never leaves your phone
Some information is so sensitive that we designed Flamico so that we never receive it at all:
- The websites you visit or try to visit, and your browsing history.
- The names of the apps you have chosen to limit or block, on iPhone.
- The content you see on your screen in other apps.
- Your motivational video.
- Your Face ID, Touch ID, fingerprint or device passcode. When you lock Flamico with biometrics, the check is done by your phone’s operating system, and the App only learns whether it succeeded.
6. How blocking works, and what we can and cannot see
6.1 On iPhone
On iPhone, Flamico uses Apple’s Screen Time technology (the Family Controls, Managed Settings and Device Activity frameworks). When you give Flamico Screen Time permission, Apple lets the App apply restrictions on your device, such as blocking adult websites, limiting apps you choose, and showing Flamico’s block screen. Apple designed these frameworks with privacy in mind: the App receives opaque tokens instead of the names of your apps and websites, and the decisions are made on your device. As a result, Flamico (and we) cannot see which apps you use or which sites you open.
6.2 On Android
Android works differently, and blocking adult content across every app requires special permissions. Depending on your device and the features you turn on, Flamico may ask for:
- Accessibility service permission, used only to detect when an adult website or a blocked app is opened, so Flamico can show its block screen, and to prevent protection from being switched off when strict mode is on. Flamico does not use this permission to read, collect, store or share the content of your screen, your messages or what you type, and nothing observed through it is sent to us.
- A local VPN, used only to filter requests to adult domains. The filtering happens on your device. Your traffic is not routed through our servers, and we do not log or inspect it.
- Usage access and “display over other apps”, used to apply app limits, run the phone lock and show the block screen above other apps.
- Device administrator (if you enable strict mode), used only to make it harder to uninstall Flamico on impulse. You can turn it off in Flamico’s settings at any time.
Before asking for any of these permissions, the App explains in plain words what the permission does and why it is needed, and you can say no. Features that depend on a permission will not work without it, but the rest of the App will.
6.3 The block screen and the phone lock
The block screen and the lock screen show your first name, your streak and your reason, which are stored on your device. When you press “I need help” on the block screen, Flamico sends you a local notification that opens the urge flow. The fact that you pressed it is recorded on your device as part of your progress, without the name of the site.
7. Mico, our AI companion
Mico is an AI companion that talks with you about urges, hard moments and progress. To reply, Mico needs some context. When you send a message:
- Your message, the recent conversation, and a short summary of what Mico needs to know (such as your first name, your reason, your streak, your hard hours and the memories you allowed Mico to keep) are sent securely to our servers and to the AI model provider that generates Mico’s reply.
- Our AI providers process this information only to generate the reply and only on our instructions. Under our contracts with them, they may not use your conversations to train their AI models, and they may keep data only for a short period to provide the service and to detect abuse.
- We store your conversation history so you can scroll back and so Mico can remember you. You can delete a single memory, a conversation, or everything Mico remembers, in Settings → Mico → Memory. Deleted items are removed from our active systems right away and from backups within 35 days.
- Our staff do not read your conversations. The only exceptions are when you send part of a conversation to us yourself (for example when reporting a problem), when it is necessary to investigate a serious violation of our Terms of Use, or when the law requires it.
- Safety. Mico is designed to recognize messages that suggest you may be in danger, such as thoughts of self-harm, and to respond by pointing you to real help such as a crisis line. This check happens automatically as part of generating the reply. We do not contact anyone on your behalf based on your conversations.
- Mico can be wrong. It is not a doctor, therapist or counselor, and its replies are not professional advice. See our Health Disclaimer.
8. Accountability partner
Inviting a partner is optional. If you invite someone, we create an invitation link or code that you share yourself. When they accept, we link the two accounts. Your partner only receives the alerts you choose in Settings, for example “a day was reset” or “protection was switched off”. A partner never sees the sites you tried to visit, your conversations with Mico, your notes or your video. You can change what your partner receives or remove them at any time, and they can leave at any time. If your partner does not have a Flamico account, we only use their contact details to deliver the alerts you chose, and we delete them when you remove the partner.
Please only invite people who have agreed to receive alerts from you.
9. Sensitive information and your consent
Information about your use of pornography, urges, relapses and the reasons you want to change may reveal details about your sex life and your health. Many privacy laws treat this as sensitive or special category data and give it extra protection. We process this information only because you choose to give it to us to use the App, and, where the law requires it, only with your explicit consent, which we ask for during setup. You can withdraw your consent at any time by deleting the information in the App or deleting your account; this does not affect processing that already took place.
We never use sensitive information for advertising, never sell it, never use it to infer characteristics about you for any purpose other than supporting you in the App, and never share it with anyone except the service providers who help us run the App under strict contracts, or your partner if you choose to send an alert.
10. Notifications and discreet mode
If you allow notifications, Flamico can send you check-ins at your hard hours, milestone messages and reminders, such as the reminder the day before your free trial ends. Notifications can appear on your lock screen, where other people might see them. If you turn on discreet mode, every notification shows only a neutral word such as “Reminder”, with no mention of Flamico, porn or urges. You can also turn notifications off completely in your phone’s settings.
11. Purchases and subscriptions
Subscriptions are sold and billed by Apple through the App Store or by Google through Google Play. Apple or Google process your payment information under their own privacy policies; we never receive your card or bank details. We receive information about your purchase, such as the plan, price, currency, country, trial status, renewal date and a transaction identifier, so we can unlock the App, show your plan, and help you with billing questions. We may use a subscription management service to receive and verify this information from Apple and Google.
12. How we use information
We use the information described above to:
- Provide the Services: create and secure your account, run blocking, locks, the urge flow, Mico, progress and partner alerts, and sync your data across devices.
- Personalize the App: show your name, reason and streak, choose the right time for check-ins, and tailor Mico’s replies.
- Process your subscription and free trial, and send you transactional messages such as the trial reminder.
- Keep you safe: show crisis resources when Mico detects you may be in danger.
- Maintain and improve the Services: fix bugs, measure which features help people, and develop new features, using pseudonymous or aggregated data wherever possible.
- Protect the Services and our users: prevent fraud, abuse and security incidents, and enforce our Terms of Use.
- Communicate with you: answer support requests and, if you agree, send occasional product news. You can unsubscribe at any time.
- Comply with the law: meet legal obligations, respond to lawful requests from authorities, and establish or defend legal claims.
We do not use your information for automated decisions that produce legal or similarly significant effects on you.
13. Legal bases for processing (EEA, UK and Switzerland)
If you are in the European Economic Area, the United Kingdom or Switzerland, we rely on the following legal bases:
- Performance of a contract, to provide the Services you signed up for, including your account, subscription, sync and core features.
- Explicit consent, for sensitive information about your sex life and health (section 9), for optional features such as Mico memory and the partner feature, for product analytics where required, and for marketing messages. You can withdraw consent at any time.
- Legitimate interests, to keep the Services secure, prevent abuse, fix problems and improve the App using pseudonymous or aggregated data, where these interests are not overridden by your rights. You can object to this processing (section 17).
- Legal obligation, to keep records required by tax and consumer law and to respond to lawful requests.
14. How we share information
We do not sell your personal information, and we do not share it for cross-context behavioral advertising. We share information only in these situations:
- Service providers who process data on our behalf and under our instructions, bound by contracts that require confidentiality, security and deletion when the service ends. They include: cloud hosting and database providers; AI model providers that generate Mico’s replies; authentication providers (Apple and Google, when you use their sign-in); push notification services (Apple and Google); a subscription management service; crash reporting and privacy-preserving product analytics; and our email and support tools.
- Apple and Google, as the platforms that distribute the App and process payments, under their own terms.
- Your accountability partner, only the alerts you choose to send.
- Legal reasons, when we believe in good faith that disclosure is required by law, a court order or a lawful request from authorities, or necessary to protect the safety of a person, to prevent fraud, or to protect the rights and property of Flamico or our users. Where the law allows, we will tell you about such a request.
- Business transfers, if Flamico is involved in a merger, acquisition, financing or sale of assets, in which case your information may be transferred as part of that transaction, subject to this policy. We will tell you before your information becomes subject to a different privacy policy.
- With your consent, in any other situation where you ask us to share something.
We may share aggregated or de-identified information that cannot reasonably be used to identify you, for example “people who used the urge flow ten times kept longer streaks”. We commit not to try to re-identify such information.
15. How long we keep information
| Information | How long we keep it |
|---|---|
| Account, settings and setup answers | While your account exists. Deleted within 30 days after you delete your account. |
| Progress, check-ins and notes | While your account exists, or until you delete them. |
| Conversations and memories with Mico | Until you delete them or your account. Accounts inactive for 24 months are deleted after a warning by email. |
| Motivational video | Only on your device, until you delete it or the App. |
| Partner link and alert settings | Until you or your partner remove the link. |
| Subscription records | As long as required by tax and accounting law, usually up to 7 years, without any of your App content. |
| Support emails | Up to 2 years after the conversation ends. |
| Crash reports and product analytics | Up to 13 months, in pseudonymous form. |
| Server security logs | Up to 30 days, longer only if needed to investigate an incident. |
| Backups | Deleted data disappears from backups within 35 days. |
16. How we protect information
We use administrative, technical and physical measures designed to protect your information, including encryption in transit (TLS) for all communication between the App and our servers, encryption at rest for our databases, strict access controls so that only a small number of authorized people can access production systems and only when needed, logging of administrative access, and regular review of our service providers. On your device, you can add another layer by locking Flamico with Face ID, Touch ID, a fingerprint or a passcode.
No system is perfectly secure. If a security incident affects your information, we will notify you and the relevant authorities as required by law.
17. Your choices and rights
17.1 Controls inside the App
- See and change your setup answers, reason and preferences in Settings.
- Delete any memory, conversation or note, or everything Mico remembers, in Settings → Mico → Memory.
- Export a copy of your data in Settings → Privacy → Export my data.
- Turn off product analytics, crash reports, marketing messages, notifications or discreet mode at any time.
- Remove your partner at any time.
- Delete your account and all associated data in Settings → Account → Delete account, or by following the steps on our Delete your data page.
17.2 Your rights
Depending on where you live, you may have the right to:
- Know what personal information we hold about you and get a copy of it (access).
- Correct information that is inaccurate or incomplete (rectification).
- Ask us to delete your information (erasure).
- Receive your information in a portable format and transfer it to another service (portability).
- Object to or ask us to restrict certain processing.
- Withdraw your consent at any time, without affecting processing that already happened.
- Opt out of the sale or sharing of personal information and of targeted advertising. We do not sell, share or target ads, so there is nothing to opt out of, but you may still ask.
- Not be discriminated against for exercising your rights. We will never charge you more or give you a worse service because you used a privacy right.
- Complain to a data protection authority.
To exercise any right, use the controls in the App or email support@flamico.app with the subject “Privacy request”. We will reply within 30 days (45 days where the law allows, if we need more time, and we will tell you why). To protect you, we may need to verify your identity, usually by asking you to send the request from the email address linked to your account or to confirm it in the App. You may use an authorized agent where the law allows; we may ask for proof that they act for you. If we decline your request, you can appeal by replying to our answer, and we will review the decision within the time required by law.
Global Privacy Control. Our Website honors the Global Privacy Control signal as a request to opt out of the sale or sharing of personal information, although we do not sell or share it in the first place.
18. Information for specific regions
18.1 European Economic Area, United Kingdom and Switzerland
You have the rights described in section 17 under the GDPR, the UK GDPR and the Swiss Federal Act on Data Protection. You can lodge a complaint with the data protection authority where you live, work, or where you believe a violation happened. We would appreciate the chance to address your concern first.
18.2 California
This section is our notice at collection and privacy policy under the California Consumer Privacy Act, as amended by the California Privacy Rights Act (“CCPA”). In the past 12 months we collected the following categories of personal information, from you, your device, and Apple or Google, for the purposes described in section 12:
| Category | Examples | Disclosed for a business purpose to |
|---|---|---|
| Identifiers | Account ID, email, IP address, notification token | Hosting, authentication, notification, support providers |
| Commercial information | Subscription plan, trial and renewal dates | Subscription management provider |
| Internet or network activity | App events, crash reports, server logs (never browsing history) | Hosting, crash reporting and analytics providers |
| Sensitive personal information | Information about sex life and health that you provide (setup answers, progress, conversations) | Hosting and AI model providers, only to run the App |
| Inferences | Your hardest hours, derived from your own check-ins, shown to you in the App | Hosting provider |
We have not sold or shared personal information, as those terms are defined in the CCPA, and we have no actual knowledge of selling or sharing the personal information of consumers under 16. We use sensitive personal information only for the purposes permitted by the CCPA, such as providing the services you requested, so the right to limit its use does not apply. Retention periods are listed in section 15.
18.3 Other US states
If you live in a state with a comprehensive privacy law, such as Virginia, Colorado, Connecticut, Utah, Texas, Oregon, Montana, Iowa, Delaware, New Hampshire, New Jersey, Tennessee, Minnesota, Maryland, Indiana, Kentucky or Rhode Island, you have the rights described in section 17, including the right to appeal a decision about your request. If we deny your appeal, you may contact your state attorney general.
18.4 Consumer health data (Washington, Nevada and similar laws)
Some of the information you give Flamico may be considered consumer health data under laws such as the Washington My Health My Data Act. We collect it only with your consent and only to provide the App; we share it only with the service providers described in section 14 to run the App; and we never sell it. You have the right to know what we collected, to withdraw consent and to ask us to delete it, as described in section 17.
18.5 Other countries
If you live in Brazil, Canada, Australia, New Zealand, Japan, South Korea, Singapore, South Africa or another country with a data protection law, you have the rights that law gives you, and you can exercise them as described in section 17.
19. International transfers
We and our service providers may process your information in countries other than your own, including the United States and the European Union. When we transfer personal information out of the EEA, the UK or Switzerland, we rely on an adequacy decision or on Standard Contractual Clauses approved by the European Commission (and the UK Addendum where relevant), together with additional safeguards where needed.
20. Children
Flamico is intended for adults aged 18 and over. We do not knowingly collect personal information from anyone under 18. If you believe a minor has given us personal information, please contact us and we will delete it.
21. Our Website
Our Website does not use advertising cookies, tracking pixels or cross-site trackers, and it does not require an account. Our hosting provider keeps standard server logs for security. The Website loads fonts from Google Fonts, which receives your IP address when the fonts load. If we ever add privacy-friendly, cookie-free analytics, we will update this section. See our Cookie Notice for details.
22. Changes to this policy
We may update this policy when the Services or the law change. When we do, we change the “Last updated” date at the top. If a change materially affects how we use your information, we will tell you in the App or by email before it takes effect, and where the law requires it we will ask for your consent again. Previous versions are available on request.
23. Contact us
For any question, request or complaint about privacy, email support@flamico.app with the subject “Privacy”. We read every message and reply as quickly as we can, and always within the time limits set by law.