Privacy Policy

Flaym is a private app for couples, made by Fuimus Labs. Fuimus Labs is a trade name of Cabal Enterprises, LLC, which is responsible for your information as described in this policy ("we", "us", "our").

This policy applies to the Flaym app on iOS and Android. If you have questions, email support@fuimuslabs.com.

What is end-to-end encrypted:

• the text of your messages;
• photos, videos, and voice notes, including their file names, thumbnails, and durations;
• Snapshot photos and captions;
• your position favorites, ratings, and history.

This content is encrypted on your device with AES-256 before it is uploaded. The keys are created on your device and your partner's device. We never receive them in a form we can use. Our servers store only encrypted data, so we cannot read it, and we cannot give anyone a readable copy, including law enforcement.

Your PIN. So you can sign in on a new device, we store a copy of your key that is locked with your PIN. Your PIN never leaves your device, so we cannot unlock that copy. If you forget your PIN and your partner can't help you restore access, we cannot recover your content.

Biometrics. If you turn on Face ID, Touch ID, or fingerprint unlock, your phone's operating system checks it. We never receive biometric data.

Flaym needs this information to work. It is not end-to-end encrypted:

• Account: your email address, your display name (your partner sees it too), and your password, which Firebase Authentication handles and we never see. If you sign in with Google or Apple, we receive your name and email address from that account.
• Your connection: who you're paired with, and when you connected or disconnected. Pairing codes are 6 digits and expire after 15 minutes.
• Message details: who sent each message and when, its type (text, photo, voice, video, and so on), read receipts, reactions, deleted status, and the size of encrypted files.
• Activity status: whether you're online, when you were last active, and whether you're typing. Your partner sees these.
• Games: your answers and scores in Quick Fire and Love Language games.
• Encryption keys: your key, locked with your PIN as described above, and your shared key, locked with each partner's key. We cannot unlock either.
• Subscription and trial: plan, status, and dates. We also keep your device model and a device identifier, used only to stop repeated free trials.
• Notifications: push-notification tokens. The notifications themselves are generic (for example "You received a message") and never include what was sent.
• Technical information: our servers log requests with IP addresses and times.

Permissions. Flaym asks for your camera (photos, videos, Snapshots), microphone (voice notes and video audio), and photo library (to attach media or save it). It also asks to send notifications. Each is used only when you use that feature. We do not collect location, contacts, or advertising identifiers.

On your device. Decrypted copies of messages and media, a message search index, and anything you save or export stay on your device. Those copies are under your control and never reach us unencrypted.

• To deliver messages and media between you and your partner, and to run games, Snapshots, and notifications.
• To manage subscriptions and free trials, including preventing repeated trials.
• To keep Flaym secure and prevent abuse.
• To answer you when you contact us, and to find and fix problems.

We do not sell your information, we do not show ads, and we do not use your information for advertising.

Analytics. We may add Google Analytics for Firebase to learn, in aggregate, which features get used. It would never receive message content, media, game answers, or anything else you share with your partner. It would never be used for advertising, and it would have advertising identifiers turned off. We will update this policy before turning it on.

Flaym is intimate by design, and some of what you do in it can reveal things about your sex life. That is why the most personal content is end-to-end encrypted. Game answers are not end-to-end encrypted. We treat them as sensitive: we use them only to run the games, and never for advertising, profiling, or anything else.

Your partner sees what you send, your display name, your activity status, and your game answers once a game is finished.

Service providers that process data for us, under contract:

• Google Cloud and Firebase (database, encrypted file storage, sign-in, push notifications).
• RevenueCat (subscription status).
• Apple and Google (sign-in if you use it, push delivery, and purchases).
• Google Fonts (the app loads its fonts from Google, which receives your IP address).

Legal requests. If the law requires it, we can only hand over information our servers can see (listed above). We cannot hand over encrypted content, because we cannot decrypt it.

Business transfers. If Fuimus Labs is sold or merged, your information may transfer to the new owner, and this policy will still apply to it.

When you download the app or buy a subscription, Apple (App Store) or Google (Google Play) handles that transaction under its own privacy policy. We never receive your payment card details.

If you have chosen in your device settings to share diagnostics with app developers, Apple or Google may give us crash reports and aggregated usage statistics. They do not identify you, and we use them only to fix problems.

• Photos, videos, and voice notes are deleted from our servers 14 days after they're sent. Save anything you want to keep to your device before then.
• Messages and shared data stay until your connection ends. When either partner disconnects, the shared conversation, media, and game data are deleted from our servers within 30 days.
• Deleting your account disconnects you from your partner and deletes your account and your shared data within 30 days. See how to delete your account.
• Free-trial records (a device identifier and model) are kept for up to 24 months, even after you delete your account, so the same device can't restart a free trial.
• Our servers keep request logs (which include IP addresses) for about 30 days. Copies of deleted data can remain in those logs for up to that long.

Flaym is only for people 18 and older. We do not knowingly collect information from anyone under 18. If we learn that a minor has an account, we will delete it.

• All traffic between the app and our servers is encrypted in transit (HTTPS/TLS).
• Our data is stored on Google Cloud, which encrypts it at rest.
• Access to production systems is limited to the people who need it to run the service.
• The app can lock with your PIN or biometrics, and you can blur media in the chat.

No system is perfectly secure, but we work to protect your information and will notify you and the authorities if a breach affects you, as the law requires.

In the app you can change your display name and PIN, disconnect from your partner, and delete your account from Settings. Because your content is end-to-end encrypted, we cannot export it for you, but the app lets you save and export your media on your own device.

You can also ask us to:

• give you a copy of the personal information we hold about you,
• correct information that is wrong,
• delete your information, or
• stop a particular use of it.

Email support@fuimuslabs.com from the address on your account. We may need to confirm your identity first. We respond within 30 days, or sooner where the law requires. We will not treat you differently for exercising these rights.

We do not sell your personal information, share it for cross-context behavioral advertising, use it for targeted advertising, or use it for profiling that produces legal or similarly significant effects.

If you live in a state with a consumer privacy law (for example California, Colorado, Connecticut, Virginia, or Texas), you may have the rights described above: to know, access, correct, delete, and port your information. If we decline a request, you can appeal by replying to our decision with the word "Appeal". We will answer within the time your state's law allows.

Cabal Enterprises, LLC, trading as Fuimus Labs, is the controller of your personal data. We rely on these legal bases:

• Contract: to provide Flaym to you and your partner.
• Legitimate interests: to keep Flaym secure, prevent abuse and repeated free trials, and fix problems.
• Consent: for notifications and device permissions, and for any information about your sex life.
• Legal obligation: where the law requires us to keep or disclose information.

Information that reveals details about your sex life is a special category of data under the GDPR. We process it only with your explicit consent. You can withdraw that consent by deleting the data or your account.

Your data is processed in the United States. Where the law requires, we rely on our providers' Standard Contractual Clauses or equivalent safeguards for this transfer.

In addition to the rights above, you may object to processing based on legitimate interests and withdraw consent at any time (this does not affect processing that already happened). You can also complain to your local data protection authority.

If we change how Flaym handles your information, we will update this page and its effective date before the change takes effect. For material changes, we will also let you know in the app or by email.

Questions or requests about your privacy:

• Fuimus Labs (Cabal Enterprises, LLC)
• 116 Agnes Rd Ste 200, Knoxville, TN 37919
• Phone: (615) 549-8514
• Email: support@fuimuslabs.com