Privacy Policy
YAMPA MEDIA — Last updated: 5 May 2026
1. Who We Are
Flovvi is a mobile application for pet health management, published by YAMPA MEDIA (SIREN 910 581 172), located at 135 Avenue Gaston Roussel, 93230 Romainville, France. YAMPA MEDIA is the data controller under the GDPR (EU Regulation 2016/679).
2. Data We Collect
Account data
Email, password (hashed), display name and profile photo (optional).
Pet data
Name, species, breed, date of birth, weight, height, sex, photos, attached documents.
Health and wellness data
Health records, vet appointments, activity (walks, measurements), wellness quiz responses, AI assessment history.
Subscription data
Plan (Free / Pro) and purchase receipts (processed by Apple / Google — we do not store payment data).
Technical data
Push notification tokens, app version, operating system, anonymised usage statistics.
3. How We Use Your Data
• Account creation and management — contractual basis (Art. 6(1)(b) GDPR) • Core app features — contractual basis • Push notifications — consent (Art. 6(1)(a) GDPR) • AI assessments and wellness advice — contractual basis / consent • Pro subscription processing — contractual basis • App improvement and bug fixes — legitimate interest (Art. 6(1)(f) GDPR) • Legal obligations — legal obligation (Art. 6(1)(c) GDPR) We do not sell your data to third parties. We do not use your data for advertising profiling.
4. AI Features
When you use AI assessments or wellness advice, your pet's profile data and chat messages are sent to an AI provider's API for processing, under a data processing agreement. AI-generated content does not replace the advice of a qualified veterinarian.
5. Data Retention
• Account and pet data: for the lifetime of the account, then deleted within 30 days of account deletion • Health records and documents: deleted with the account • Push notification tokens: deleted upon permission revocation or account deletion • Analytics data: retained in anonymised form for 24 months
6. Data Sharing
We share data only with the following sub-processors: • Supabase Inc. — database hosting, authentication, file storage (USA, SCCs in place) • AI provider — assessment processing (varies) • Apple / Google — in-app purchases (USA) • Expo / EAS — app build and distribution (USA) All extra-EEA transfers are covered by Standard Contractual Clauses (SCCs) or an adequacy decision.
7. Your Rights (GDPR)
As an EU/EEA resident you have the right to: • Access the personal data we hold about you • Rectify inaccurate data • Erase your data ("right to be forgotten") • Restrict processing in certain circumstances • Data portability • Object to processing based on legitimate interest • Withdraw consent at any time To exercise these rights, contact us at privacy@yampa.media. We will respond within 30 days. You also have the right to lodge a complaint with the CNIL (www.cnil.fr).
8. Security
• All communications use HTTPS/TLS • Passwords are hashed and never stored in plaintext • Files are stored in private buckets with access control
9. Minors
Flovvi is not intended for children under 16. If you believe a minor has provided us with personal data, contact us at privacy@yampa.media and we will delete it.
10. Changes
We may update this policy. We will notify you of material changes via in-app notification or email at least 14 days before they take effect.
11. Contact
YAMPA MEDIA 135 Avenue Gaston Roussel 93230 Romainville, France privacy@yampa.media