Privacy Policy
This privacy policy applies to flexen.co and all products of Flexen UG (haftungsbeschränkt) — currently Flexen and Project Pluto. In-app data processing is additionally governed by each product's in-app privacy notice.
1. Controller
The controller for data processing on this website is:
Flexen UG (haftungsbeschränkt)
Paul-Heidelbach-Straße 14
34134 Kassel, Germany
Email: info@flexen.co
2. Hosting
This website is hosted by Google Firebase Hosting (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland). When you visit the website, information (e.g. IP address, time of access, page requested, user agent) is automatically stored in server log files. This data is used solely for the purpose of stable website operation and cannot be attributed to specific individuals. The legal basis is Art. 6(1)(f) GDPR (legitimate interest in stable website operation).
3. Contact by Email
When you contact us by email (e.g. info@flexen.co), we process the data you submit (email address, content, name if provided) for the purpose of handling your request. Legal basis is Art. 6(1)(f) GDPR (legitimate interest in responding). The data is deleted as soon as it is no longer required for our response and no statutory retention obligations apply.
4. Cookies and Tracking on this Website
This website sets no cookies and uses no tracking. No third-party scripts (e.g. Google Analytics, Facebook Pixel) are embedded.
5. Analytics in the Flexen App (PostHog)
This section concerns the Flexen mobile app, not this website.
With your explicit consent, we use PostHog (PostHog Inc., 2261 Market Street #4008, San Francisco, CA 94114, USA) in the Flexen mobile app to analyse usage. All processing takes place exclusively on EU servers in Frankfurt, Germany — your data never leaves the European Union.
Legal basis: Art. 6(1)(a) GDPR (consent). You can withdraw your consent at any time in the app's settings under “Anonymous usage statistics”. This feature is disabled by default on first use (opt-in).
Purpose: Improving the app, detecting errors, understanding which features are used, measuring user retention.
Data processed:
- Event metadata (e.g. “meal logged”, “workout completed”), without meal or workout content
- Screen views and tab switches
- Device and operating system information (model, OS version, language)
- Session replays: recordings of your screen interactions, with all text and images automatically masked
- A pseudonymous user ID (Firebase UID) to associate events
What we explicitly do NOT collect: the contents of your meals, chat messages with Julio, weight values, steps, sleep data or any other health parameters.
Retention: Event data for a maximum of 12 months, session replays for 30 days.
Data processing agreement: We have a Data Processing Agreement (DPA) with PostHog pursuant to Art. 28 GDPR. PostHog privacy policy: posthog.com/privacy.
6. Your Rights
You have the right to:
- Access your stored data (Art. 15 GDPR)
- Rectification of inaccurate data (Art. 16 GDPR)
- Erasure of your data (Art. 17 GDPR)
- Restriction of processing (Art. 18 GDPR)
- Data portability (Art. 20 GDPR)
- Object to processing (Art. 21 GDPR)
- Lodge a complaint with a data protection authority (Art. 77 GDPR)
Contact us at: info@flexen.co
7. External Links
This website links to the Apple App Store and Google Play Store. The respective privacy policies of Apple and Google apply to data processing by these services.
8. Fonts
This website uses locally hosted fonts (self-hosting). No connections to external font servers (e.g. Google Fonts) are established.
9. Changes
We reserve the right to update this privacy policy to reflect changes in the legal landscape or in
our services. The current version is always available on this page.
Last updated: June 2026