Privacy Policy

Last updated: December 9, 2024

Privacy Policy for Flowstake.com

Last Updated: January 1st, 2025

1. Introduction

FlowStake ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our platform.

2. Information Collection

2.1 Required Information

  • Wallet address
  • Email address
  • KYC documentation
  • Activity data (distance, duration, location, etc.)
  • Device information
  • Blockchain transaction data

2.2 Optional Information

  • Profile picture
  • Social connections
  • Fitness preferences
  • Health metrics
  • Device and wearable data

2.3 Automatically Collected Information

  • IP address
  • Browser type
  • Device identifiers
  • Operating system
  • Network information

3. Use of Information

3.1 Core Platform Functions

  • Activity verification
  • Challenge participation
  • Reward distribution
  • Account management
  • Security maintenance

3.2 Blockchain Data

  • On-chain attestations
  • Smart contract interactions
  • Token transactions
  • Challenge participation
  • Governance votes

3.3 Platform Improvement

  • Service optimization
  • Feature development
  • Bug resolution
  • Performance monitoring
  • User experience enhancement

4. Data Storage

4.1 Decentralized Storage

  • Activity data stored on IPFS
  • Attestations on Base Chain
  • Smart contract state
  • Token transactions

4.2 Centralized Storage

  • User profiles
  • Email preferences
  • KYC documents
  • Support tickets
  • Platform analytics

5. Data Protection

5.1 Security Measures

  • End-to-end encryption
  • Multi-factor authentication
  • Regular security audits
  • Penetration testing
  • Access controls

5.2 Data Encryption

  • At-rest encryption
  • In-transit encryption
  • Key management
  • Secure storage
  • Regular updates

6. Third-Party Services

6.1 Integration Partners

  • Strava (activity tracking)
  • Auth0 (authentication)
  • Supabase (database)
  • Base (blockchain)
  • IPFS/Pinata (storage)

6.2 Data Sharing

  • Service providers
  • Analytics partners
  • Compliance requirements
  • Legal obligations
  • User consent basis

7. User Rights

7.1 Data Access Rights

  • View personal data
  • Export data
  • Correct information
  • Delete account
  • Restrict processing

7.2 Control Options

  • Privacy settings
  • Notification preferences
  • Data sharing options
  • Marketing choices
  • Cookie settings

8. Data Retention

8.1 Retention Periods

  • Account information: Duration of account
  • Activity data: Permanent (blockchain)
  • KYC documents: 5 years after verification
  • Support messages: 2 years
  • Analytics data: 3 years

8.2 Data Deletion

  • Account deletion process
  • Data removal timeframes
  • Blockchain limitations
  • Backup retention
  • Legal requirements

9. Children's Privacy

We do not knowingly collect or maintain information from persons under 18 years old. If you are under 18, please do not use the Platform.

10. International Transfers

10.1 Data Transfers

  • Cross-border processing
  • Security measures
  • Legal safeguards
  • Transfer mechanisms
  • Privacy shields

10.2 Storage Locations

  • Blockchain nodes
  • IPFS nodes
  • Cloud services
  • Data centers
  • Backup locations

11.1 Essential Cookies

  • Authentication
  • Security
  • Preferences
  • Session management
  • Load balancing

11.2 Optional Cookies

  • Analytics
  • Marketing
  • Performance
  • Functionality
  • Third-party services

12. Changes to Privacy Policy

12.1 Updates

  • Regular reviews
  • Material changes
  • User notification
  • Continued use
  • Previous versions

12.2 Notification Methods

  • Email notifications
  • Platform announcements
  • Website updates
  • Social media
  • Support channels

13. Contact Information

13.1 Privacy Inquiries

  • Email: privacy@flowstake.com
  • Form: flowstake.com/privacy
  • Mail: [Physical Address]
  • Phone: [Number]
  • Hours: 24/7

13.2 Data Protection Officer

  • Contract performance
  • Legal obligations
  • Legitimate interests
  • User consent
  • Public interest

14.2 User Rights

  • Access rights
  • Rectification
  • Erasure
  • Portability
  • Objection

15. Compliance

15.1 Regulatory Framework

  • GDPR compliance
  • CCPA compliance
  • Local regulations
  • Industry standards
  • Best practices

15.2 Data Protection

  • Security measures
  • Breach notification
  • Impact assessments
  • Record keeping
  • Staff training

16. Blockchain Specific Provisions

16.1 Immutable Data

  • On-chain data permanence
  • IPFS storage
  • Smart contract state
  • Transaction history
  • Attestation records

16.2 Wallet Privacy

  • Address linking
  • Transaction privacy
  • Block explorers
  • Public visibility
  • Privacy tools

Contact Us

For any privacy-related questions or concerns, please contact us at:

For questions about our privacy practices, please contact us at privacy@flowstake.com