Privacy Policy

Last Updated: October 14, 2025

At Flux Performance ("we," "our," or "us"), we are committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, store, and protect your data when you use our mental performance coaching application.

Information We Collect

Account Information

When you create an account or sign in using Google OAuth, we collect:

  • Email address
  • Full name
  • Profile picture (if provided by Google)
  • Google account ID (for authentication purposes)

Usage Information

We collect information about how you use our application:

  • Visualization sessions created and completed
  • Chat conversations with the AI coach
  • App features you interact with
  • Session timing and frequency data

Technical Information

We automatically collect certain technical information:

  • Device type and operating system
  • Browser type and version
  • IP address and location data
  • Log data and error reports

How We Use Your Information

We use the information we collect for the following purposes:

  • Account Management: To create and manage your user account
  • Service Delivery: To provide personalized mental performance coaching and visualization sessions
  • Communication: To send you important updates, notifications, and support messages
  • Improvement: To analyze usage patterns and improve our application features
  • Security: To protect against unauthorized access and ensure platform security
  • Compliance: To comply with legal obligations and enforce our terms of service

Data Storage and Security

Your data is stored securely using industry-standard encryption and security practices:

  • Secure Infrastructure: We use Supabase, a secure cloud database platform, to store your information
  • Encryption: All data is encrypted in transit (using HTTPS/TLS) and at rest
  • Access Controls: Strict access controls limit who can view or modify your data
  • Regular Audits: We conduct regular security audits and updates to maintain protection

While we implement robust security measures, no method of transmission over the internet is 100% secure. We continuously work to protect your information but cannot guarantee absolute security.

Third-Party Services

We use the following trusted third-party services to operate our application:

Google OAuth

We use Google OAuth for secure authentication. When you sign in with Google, we receive your email address, name, and profile picture. Google's use of your data is governed by their Privacy Policy.

Supabase

We use Supabase for data storage and backend services. Your data is stored in secure, encrypted databases. Learn more in Supabase's Privacy Policy.

OpenAI / Google Gemini

We use AI services to power our mental performance coaching features. Your conversations are processed to generate personalized responses and visualization sessions. These services do not store your conversations beyond processing.

Vercel Analytics

We use Vercel Analytics to understand how users interact with our application. This helps us improve performance and user experience. Vercel collects anonymous usage data.

Stripe

We use Stripe for payment processing. We do not store your credit card information. All payment data is handled securely by Stripe according to their Privacy Policy.

Data Sharing and Disclosure

We do not sell, trade, or rent your personal information to third parties. We may share your information only in the following circumstances:

  • Service Providers: With trusted third-party services that help us operate our application (as listed above)
  • Legal Requirements: When required by law, court order, or legal process
  • Business Transfers: In connection with a merger, acquisition, or sale of assets (users will be notified)
  • Protection: To protect our rights, property, safety, or that of our users

Data Retention

We retain your personal information for as long as necessary to:

  • Provide you with our services
  • Comply with legal obligations
  • Resolve disputes and enforce our agreements

When you delete your account, we will delete or anonymize your personal information within 30 days, except where we are required to retain it for legal purposes.

Your Rights and Choices

You have the following rights regarding your personal information:

  • Access: Request a copy of the personal information we hold about you
  • Correction: Request correction of inaccurate or incomplete information
  • Deletion: Request deletion of your personal information
  • Data Portability: Request a copy of your data in a structured, machine-readable format
  • Opt-Out: Unsubscribe from marketing communications at any time
  • Withdraw Consent: Withdraw consent for data processing where applicable

To exercise any of these rights, please contact us at privacy@fluxperformance.ai.

International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. These countries may have different data protection laws. We ensure appropriate safeguards are in place to protect your information in accordance with this Privacy Policy.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will notify you of any material changes by posting the new Privacy Policy on this page and updating the "Last Updated" date. Your continued use of our services after such changes constitutes acceptance of the updated policy.

Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

Email: info@fluxperformance.ai

By using Flux Performance, you acknowledge that you have read and understood this Privacy Policy.