Legal Notice

Publisher

Hosting

Data Protection

CuraFlow only collects data necessary for the service: practitioner email, client first name and phone number. Data is stored securely and never shared with third parties for commercial purposes. You can request access, correction or deletion of your data at any time.

Data Retention

Client data is retained for the duration of the care journey (maximum 14 days) then archived. Practitioners can delete client data at any time via the interface. Consent logs are retained for audit purposes for 3 years in accordance with legal requirements. When a practitioner account is deleted, all associated data is permanently removed.

Sub-processors

CuraFlow uses the following sub-processors to operate the service:

• Supabase (database) — EU/US hosting with standard contractual clauses
• Twilio (SMS delivery) — Transfer of phone numbers and message content for delivery
• LemonSqueezy (payment) — Payment processing and subscription management
• Netlify (hosting) — Web application hosting

Cookies

CuraFlow only uses essential cookies for service operation (authentication). No tracking or advertising cookies are used.