Privacy and personal data policy
Last updated: October 21, 2026
This is an English translation for convenience. If there is any difference, the Spanish version prevails.
1. Who is responsible for your data
The data controller is Fluvi, in Bogotá, Colombia. For anything about personal data, write to hola@fluvi.fit.
Fluvi is a platform for booking in-person wellness classes and services in Bogotá, paid with credits. This policy applies to the Fluvi app, to the portals for partner places, companies and administration, and to the fluvi.fit website. We wrote it to comply with Colombian Law 1581 of 2012 and its regulations, compiled in Decree 1074 of 2015.
2. What data we process
We only ask for what Fluvi needs to work. Fluvi does not receive or store card details.
| Category | What data | When we receive it |
|---|---|---|
| Account | Email, password (we only store an encrypted version), language and country | When you sign up |
| Sign-in with Google | Your email and the basic details Google shares from your account | Only if you choose to sign in with Google |
| Session security | IP address and device type of each session | When you sign in |
| Usage | Bookings, credits, purchases and reviews (rating and text) | When you use the app |
| Coach | What you write to it, your goals, your starting point and your preferences (activities, schedule, area) | Only if you accept the coach |
| Location | The map area where you search. Your exact location is used on your phone to center the map and calculate distances, and is not sent | When you use the map and give permission |
| Phone alerts | A notification identifier for your phone | Only if you turn on reminders for your classes |
| Companies | If your company gives you credits, the email it invites you with and the credits it assigns you | When your company invites you |
| Partner places | Business name, contact, address and coordinates of its locations, social media, photos of the space, and details of its team and of the account for its payments | When a business is set up |
| Contact | What you write to hola@fluvi.fit | When you write to us |
| Waiting list | Name, email and WhatsApp | If you signed up before launch |
| Technical failures | Error reports with a pseudonymous identifier, without your email or your IP | When the app or a portal fails |
3. Sensitive data: health and wellbeing
The law considers data about your health sensitive. We only process it with your express authorization, and giving it is never mandatory: you can use Fluvi without the coach.
- Today we do not collect health or physical activity data from your phone, a watch or any other app. If we ever turn that feature on, we will ask for a separate, optional authorization before reading any data, and we will update this policy.
- The coach needs its own authorization. What you tell it about your wellbeing, your goals and how you are doing can be sensitive data. That is why the coach only starts if you accept it, and that authorization includes your messages being processed by an artificial intelligence provider (section 5).
- What we do not process. Biometric data, medical history, weight, height or sleep.
- Your control. You can withdraw the coach authorization whenever you want from Profile, under Permissions. In What I know about you you see exactly what the coach receives.
- No advertising. We never use this data for advertising.
4. What we use your data for
- Creating and protecting your account.
- Managing your bookings and your credits, and paying partner places for the classes.
- Managing the credits a company gives to its team.
- Letting the coach answer you and suggest classes that fit you.
- Showing you nearby places on the map.
- Sending you account emails (codes and password recovery) and reminders for your classes.
- Detecting failures and abuse, and checking that the money adds up.
- Meeting our legal and accounting obligations.
We do not sell your data or use it for third-party advertising.
5. Who we share your data with, and where
We work with providers that process data on our behalf, for what this table says and nothing else. They operate outside Colombia, mainly in the United States: that is why your data is transferred outside the country.
| Provider | What for | What it receives | Where |
|---|---|---|---|
| Supabase | Database, accounts and server functions | The app's data | United States (Oregon). Server functions may run in the Supabase data center closest to you |
| Anthropic | The coach's artificial intelligence (Claude models) | Your message and its context: your goals, your starting point, your preferences, your credits and your latest bookings (status, credits and date). Never your name, your email or your location. Each message travels alone, without your previous conversations | United States |
| Resend | Sending emails: account codes, company invitations and notices to partner places | Your email and the content of the message | United States |
| Sentry | Diagnosing failures | Error reports with a pseudonymous identifier, without email, IP or screenshots | United States |
| Expo | App updates and delivery of your class reminders, which go through Apple or Google depending on your phone | The notification identifier, the reminder text (day and time of your class) and your app version | United States |
| Maps on Android, location addresses and, if you choose it, sign-in with Google | The map area, location addresses and, for sign-in, your Google account details | United States | |
| Apple | Maps on iPhone and app distribution | The map area | United States |
| Vercel | Hosting the website and the portals | Technical logs of visits (IP and browser) | United States |
| Namecheap | Forwarding the hola@fluvi.fit email | What you write to us | United States |
Partner places only see what is needed for your booking and your check-in: they do not see your email or your conversations with the coach. If you have credits from a company, your company only sees totals for its team, never which class you go to or when.
6. How long we keep your data and how to delete your account
We keep your data while you have your account. Some of it lasts less:
| Data | How long it lasts |
|---|---|
| Session data (IP and device) | While the session is open |
| Notification identifier | Until you sign out on that phone, turn off reminders or delete your account |
| Exact location | We do not store it: it stays on your phone |
| Waiting list | Until you ask us to remove you |
You can delete your account whenever you want from Profile, under Delete my account. The steps are in Delete your account.
| When you delete your account | What happens |
|---|---|
| Your access, your email and your password | Deleted |
| What you wrote to the coach, your goals, your starting point and your preferences | Deleted |
| The text of your reviews, your notifications and your notification identifier | Deleted; the review rating stays without your name |
| The record of your bookings and your credits | Kept without anything that identifies you, for the period accounting law requires |
| The proof of your authorizations | Kept without anything that identifies you, to show that you gave them |
| Your unused credits | Lost |
| Your pending bookings | Cancelled |
| Your company's unused credits | Go back to your company |
Backups and providers. Deleted data may remain in backups until they are replaced. Whatever was already sent to a provider, such as a message to the coach or an error report, is kept according to that provider's policy, and we cannot delete it from Fluvi.
7. Your rights and how to exercise them
As the owner of your data you have the right to:
- Know, update and correct your data.
- Ask for proof of the authorization you gave us.
- Know how we use your data.
- Revoke your authorization and ask us to delete your data, except what the law requires us to keep.
- File complaints with the Superintendence of Industry and Commerce (SIC).
- Access your data free of charge.
How to do it. Several things you do in the app: in What I know about you you see what the coach knows, in Profile you withdraw your authorizations and delete your account. For anything else, write to hola@fluvi.fit from your account's email.
| Type of request | Deadline to answer you |
|---|---|
| Query (knowing your data) | 10 business days, extendable by 5 more with notice |
| Claim (correcting, deleting or revoking) | 15 business days, extendable by 8 more with notice |
If you are not satisfied with our answer, you can go to the Superintendence of Industry and Commerce.
8. Minors, security and changes
- Minors. We do not knowingly collect data from minors. If we detect an account belonging to a minor, we delete it.
- Security. Data travels encrypted. Each person only sees their own data, enforced by rules in the database itself. Administrative access requires a second factor, and an automatic check reviews every 15 minutes that the money adds up.
- Changes. If we change anything important in this policy, we will let you know before it takes effect. Each version carries its date.