Privacy Policy

The data controller is KIGARDEN, a Société par Actions Simplifiée (SAS) registered in France, with its registered office at 6 Rue Baudelique, 75018 Paris, France, SIREN 844 647 248, operating the service under the Flovvi brand. For any request regarding your personal data, contact us at team@flovvi.com.

• Account data: name, email address, password (stored encrypted), preferred language and units, and — if enabled — two-factor authentication or passkey credentials.
• Billing data: payment method type and last four card digits, handled by our payment provider Stripe (we never store full card numbers on our own servers).
• Session data: IP address and browser user agent, associated with your login session for security purposes.
• Your pet's data: name, species, breed, date of birth, weight, sex, sterilization status, and an optional profile photo. This is not personal data of a natural person, but it may indirectly identify you as the owner.
• Your pet's health data: weight and body condition history, diagnosed conditions and allergies, food plans, and your answers and results in the Nutrition Assessment.
• Uploaded documents: vet reports, health records, and other documents you upload, including text automatically extracted from them so the AI assistant can search them.
• AI assistant conversations: the text of the questions you ask and the answers you receive, which may include descriptions of your pet's symptoms or condition.

• Providing the service (account creation, pet health tracking, AI assistant, reminders) — legal basis: performance of our contract with you.
• Managing your subscription and billing — legal basis: performance of the contract and legal obligations (invoicing, accounting).
• Keeping the service secure (preventing unauthorized access, limiting abuse) — legal basis: legitimate interest.
• Service-related communications (reminders, system notifications) — legal basis: performance of the contract.
• Improving the service (aggregated, anonymized usage analysis) — legal basis: legitimate interest.

We do not use your data for direct marketing without your explicit consent, and we do not sell your personal data to third parties.

We only share data with the providers strictly necessary to run the service (processors), each contractually bound to process data solely on our behalf:

• Anthropic (provider of the Claude AI model) — receives the text of your conversations with the assistant and, when you upload documents, an image of the document to extract its text. We contractually require our AI providers not to use your data to train their general models.
• Voyage AI — receives text excerpts extracted from uploaded documents to generate numerical representations (embeddings) that make documents searchable by the assistant. The same contractual no-training commitment applies.
• Stripe — processes payments and manages your subscription; receives your name, email, and payment method details.
• Supabase — hosts our database and uploaded files (pet photos, documents), with infrastructure located in Paris, France.
• Email delivery provider — sends system emails (account verification, password reset, reminders) on our behalf.
• Google (Google Analytics) — receives anonymized traffic and usage data (pages visited, device and browser type) for marketing pages, but only if you accept analytics cookies via the cookie banner. See §8 below.

Some of these providers are based in the United States. For these transfers outside the EU, we rely on the Standard Contractual Clauses approved by the European Commission, which require the providers to offer safeguards equivalent to those of the GDPR.

We keep your data for as long as your account remains active. If you delete a pet from your profile, its data (including photos and documents) is deleted immediately. If you delete your account, all associated data — pets, documents, conversations, billing data — is permanently deleted from our systems and file storage, with no need for a separate request.

We apply appropriate technical and organizational measures to protect your data: passwords stored encrypted, encrypted connections (HTTPS), optional two-factor authentication and passkeys, and access strictly scoped to each account's owner — no user can see another user's pets or data.

Under the General Data Protection Regulation (GDPR), you have the right to:

• Access: obtain a copy of the personal data we hold about you.
• Rectification: correct inaccurate or incomplete data.
• Erasure: request deletion of your data (you can do this yourself at any time by deleting your account from settings).
• Portability: receive your data in a structured, machine-readable format.
• Objection and restriction: object to certain processing or request that it be restricted.

To exercise these rights, email us at team@flovvi.com. We respond within one month, as required by the GDPR.

You also have the right to lodge a complaint with the competent supervisory authority: the CNIL (Commission Nationale de l'Informatique et des Libertés) as lead authority (https://www.cnil.fr), or the data protection authority of your own EU country of residence.

We use strictly necessary technical cookies (login session, CSRF protection). These cookies do not require your consent under the ePrivacy rules, since they are essential to providing the service you request. We do not use profiling or advertising cookies.

On our marketing pages we also offer optional, non-essential analytics cookies from Google Analytics, used to understand how visitors use the site. These are never set until you explicitly accept them via the cookie banner shown on your first visit — declining, or not answering, means no analytics cookie is ever placed. You can change your choice at any time from the "Cookie preferences" link in the site footer.

The Flovvi assistant is an artificial intelligence system, not a veterinarian. When you interact with the assistant, you are communicating with an automated system: its responses are for educational and preventive purposes only and never constitute a diagnosis, prescription, or professional veterinary advice. We contractually require our AI providers not to use the content of your conversations to train their general models.

The service is intended for users who are at least 18 years old and have the legal capacity to enter into a binding contract. We do not knowingly collect data from minors.

We may update this policy from time to time. In the event of material changes, we will notify you by email or with an in-app notice before the changes take effect.

This policy is published in Italian, English, and French. In the event of any discrepancy between versions, the English version shall prevail.