Privacy Policy

Last updated: 3 April 2026

At Canopas Software LLP ("we", "our", "us", or the "Company"), the publisher of Flux ("Flux", the "App"), we believe your health data is deeply personal. We are committed to protecting your privacy with transparency, control, and minimal data collection. We design our systems and processes to align with global privacy standards, including GDPR and CCPA.

Flux ("we", "us", "our") provides a mobile application for cycle, ovulation, and reproductive health tracking (the "Service"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our services (the "Service").

The "Service" includes:

The Flux mobile application
Our website (flux.canopas.com) and related pages
Customer support and related services

By using the Service, you agree to the practices described in this Policy. If you do not agree, please do not use the Service.

Flux is operated by Canopas Software LLP, which acts as the data controller responsible for your personal data.

1. Information We Collect

We collect only the information necessary to provide and improve the Service.

Health Data (Sensitive Personal Data)

This may include:

Menstrual cycle data
Ovulation & fertility data
Symptoms, mood, notes
Body metrics (e.g., temperature, weight)

This is considered sensitive (special category) data under laws like GDPR. We process this only with your explicit consent.

Due to the sensitive nature of this data, we apply enhanced safeguards and strict access controls. This data is never used for advertising or shared with third parties.

Account Information

When you create an account, we collect:

Name
Email address
Phone number
Birthdate

Account Sign-In Services

You may choose to sign in using third-party login services such as Google or Apple. If you use Apple Sign-In, Apple may provide a private relay email address instead of your actual email. We receive only the information you choose to share.

Automatically Collected Data

We may collect limited technical information such as:

Device type and operating system
App version
IP address
Crash logs
Device identifiers

Third-party integrations (optional)

If enabled, we may collect Apple HealthKit / Google Health Connect data. We never access external data without your permission.

Analytics Data

We collect usage data (e.g., features used, actions taken) to improve the App.

We use tools like Mixpanel for product analytics. These tools help us understand how users interact with the App.

Communications

If you contact us (support, feedback, etc.), we may store your communication to assist you and improve our services.

2. How We Use Your Information

We use your information to:

Provide cycle predictions and insights
Personalize your experience
Improve features, reliability, and performance
Send important service-related notifications (e.g., account, security, updates)
Send optional marketing communications (you can opt out anytime)
Detect fraud, misuse, or technical issues
Comply with legal obligations
Provide support

Legal Basis for Processing (IMPORTANT)

We process your personal data under the following legal bases:

Consent: for processing sensitive health data, personalization, and optional features
Contract: to provide core app functionality and services you request
Legitimate Interest: to improve app performance, security, and user experience
Legal Obligation: to comply with applicable laws and regulations

You may withdraw your consent at any time through app settings or by contacting us.

3. Our Privacy Commitment

We are a privacy-first company, and we mean it:

We do not sell your personal or health data
We do not share your data with advertisers
We do not run ads in the App

Your data is used only to operate, improve, and support the Service.

We share information only in limited and necessary situations:

Service Providers

We work with trusted third-party providers such as cloud infrastructure providers, analytics tools (e.g., Mixpanel), and payment processors. These providers process data only on our behalf and under strict contractual obligations.

Legal Requirements

We may disclose information if required by law or to:

Comply with legal obligations
Prevent fraud or misuse
Protect users, rights, or safety

Business Transfers

If Flux or Canopas Software LLP is involved in a merger, acquisition, or sale, your data may be transferred as part of that process.

Aggregated Data

We may share data that does not identify you (aggregated or anonymized) for analytics or research purposes.

5. Payments

Subscriptions are processed securely via:

Apple App Store
Google Play Store

We do not store or process your payment card details.

6. Data Retention

We retain your data only as long as necessary to:

Provide the Service
Comply with legal obligations
Resolve disputes and maintain records

We retain your data by default for as long as your account is active. If you choose to delete your account, you can do it from app settings. Deleted data may remain in secure backups for a limited period (up to 90 days) before being permanently erased. We may retain limited data where required to comply with legal obligations or resolve disputes.

7. Your Rights

Depending on your location (including EU/UK), you may have the right to:

Access your data
Correct or update your data
Request deletion of your data
Object to or restrict processing
Request data portability
Withdraw consent

To exercise your rights, contact us at: contact@canopas.com

For users in the EEA/UK, our legal basis for collecting data is Performance of a Contract (to provide the tracking service you requested) and Legitimate Interest (to improve app accuracy and prevent fraud).

8. Your Choices

You can:

Disable granted permissions (may limit functionality)
Opt out of marketing emails
Delete your account at any time

Some essential communications (e.g., security alerts) cannot be disabled.

You may withdraw your consent for data processing at any time by disabling features, adjusting settings, or deleting your account.

You may delete your account and all associated data directly within the Flux App Settings or by contacting us at contact@canopas.com.

9. Data Security

We use appropriate technical and organizational measures to protect your data, including encryption and access controls.

However, no system is completely secure, and we encourage you to protect your account credentials.

Data Breach Notification

In the unlikely event of a data breach that affects your personal data, we will notify you and relevant authorities as required by applicable law. We will take all reasonable steps to mitigate the impact and secure our systems.

10. International Data Transfers

As a global service, your data may be processed in countries outside your own. We ensure appropriate safeguards are in place.

11. Children’s Privacy

The Service is not intended for children under 13 (or the minimum age required in your country).

We do not knowingly collect personal data from children. If we learn we have collected data from someone under these ages, we will delete it immediately.

12. Changes to This Policy

We may update this Privacy Policy from time to time.

We will notify users of significant changes through the App or website.

13. Contact Us

If you have questions, contact us at: contact@canopas.com

Get in Touch