Privacy Policy

The camera runs inside your browser. Pose detection — the skeleton you see drawn over the picture — happens on your own device; those frames are not uploaded.

New scans send measurements and the context you enter to generate the report. Detailed reports use OpenAI to explain these measurements. Camera frames and captured photographs stay on your device and are not sent to that service. Basic reports are generated without an AI request.

MyFloww does not store your photographs. They are not written to our database or to file storage. Once your report is generated, the only things kept are the measurements, the written report, and the details of your account. Images remain in memory for your current report and are discarded when the scan session closes. A downloaded or emailed PDF may include them.

• Account details: your name, email address and — if you gave one — your phone number.
• Scan records: the date, the measurements the engine computed, the written report, your entered context, capture methods and versions, consent confirmation, and any available alignment index. Saved reports are available in your account until deleted under our retention policy.
• Payment records: the amount, the pack bought, the transaction reference from PayU, and whether it succeeded. We never receive or store your card details.
• Technical logs needed to keep the service running and to investigate faults.

We process this information to provide the service you asked for and paid for, to keep records of payments as required by law, and to keep the service secure. Health-related information is processed on the basis of the consent you give by choosing to take a scan. You can withdraw that consent at any time by deleting your reports or your account.

• OpenAI — receives measurements and your entered goals, activity and symptom context to generate Detailed report explanations.
• Google Firebase — hosts the application, your account and your saved reports.
• PayU — processes payments and holds the payment details you enter with them.
• Your clinic — ONLY if you were scanned by a MyFloww clinic as one of its patients. A scan you take yourself with Libria is not visible to any clinic.

We do not sell your data or use it for advertising.

Your account and its reports are kept while your account exists. Payment records are kept for as long as tax and accounting law requires. Delete a report and it is removed from your account; ask us to delete your account and we will remove it and its reports, apart from payment records we are obliged to retain.

You can ask for a copy of what we hold about you, ask us to correct it, or ask us to delete it. Write to info@myfloww.in and we will respond within 30 days.

Libria is designed around the Act. In practice that means: you are asked for consent before every scan, and the consent names what is processed; we collect only what the report and the payment need; we do not sell your data or use it for advertising; and you can ask to see, correct or delete what we hold. The contact for any of these, and for a complaint, is info@myfloww.in. We respond within 30 days, and if our answer does not resolve it you may escalate to the Data Protection Board of India.

The Biometric Scan is not for use by anyone under 18 and we do not knowingly collect their information. If a child has created an account, contact us and we will delete it.

Traffic is encrypted in transit. Accounts are separated from one another at the database level, so one person’s reports cannot be read by another. Clinic records and public scan accounts are held in separate collections with separate access rules. No system is perfectly secure; if a breach affects you, we will tell you.