Privacy Policy

This Privacy Policy describes how FlareDock LLC ("we", "us", or "our") collects, uses, and safeguards your personal data when you use the Current mobile application (the "App").

1. Information We Collect

• Account & Identity Data: When signing in with Google Sign-In, we collect your name, email address, profile photo URL, and unique authentication identifier provided by Google.
• Mindfulness & Activity Data: Your saved breathing rhythms, custom pacer settings, session duration logs, and streak counters. Current does not collect medical records, clinical biometrics, or health diagnostic data.
• Technical & Device Diagnostics: Standard operational data including device model, operating system version, crash reports, and system performance metrics necessary to deliver smooth haptics and animations.

2. Purpose of Data Processing

We process collected data exclusively to:

• Authenticate your account and maintain session persistence across devices.
• Synchronize breathwork history and preferences securely via our cloud backend.
• Deliver customer support and resolve app performance issues.

3. Third-Party Data Processors

We do not sell, rent, or trade your personal data. We utilize trusted infrastructure partners:

• Google Identity Services: Manages OAuth 2.0 authentication. See the Google Privacy Policy.
• Supabase: Provides managed database and user authentication storage. All data in transit is encrypted using industry-standard TLS 1.3/HTTPS.

4. Account and Data Deletion (App Store & Google Play Compliant)

You retain full ownership and control of your personal data. In compliance with Apple App Store and Google Play requirements:

• In-App Deletion: You can delete your entire account and associated cloud data instantly at any time directly inside Current by navigating to Settings > Account > Delete Account.
• Web Deletion Request: If you have uninstalled the app or cannot access your account, you may submit an account deletion request by emailing support@flaredock.com with the subject line "Account Deletion Request".

Upon executing a deletion request, your authentication record, user profile, and session logs are permanently purged from our active database within 30 days.

5. Children's Privacy

Current does not knowingly collect or solicit personal information from children under the age of 13. If we discover that personal data from a child under 13 has been collected without verifiable parental consent, we will promptly delete it.

6. Security Measures

We apply robust technical safeguards, including Row-Level Security (RLS) policies and encrypted database channels, to protect your stored data against unauthorized access or loss.