FuaFlow Market privacy notice

Effective November 14, 2026

What matters, in four lines

• FuaFlow Market shows you what verified businesses sell and, only if you ask, takes your contact details to one of them so they can help you. There's no account and no password: your identity is a key that lives on your phone.
• When you ask for help, your name, phone, area and what you write are sealed on your phone for the people at the business who can help you and for whoever runs it. Our server, the relay, carries that envelope and can't open it.
• What reaches a business is received to help you, and from then on that business answers for that data. Every business agrees to use it only for that and to protect it as this notice says.
• No ads, no usage analytics, no trackers, and we don't sell data.

Who answers for this data

FuaFlow Market is developed and run by José Arturo Ornelas Brand, at Calle San José de los Reynoso 115, Col. Bosques del Prado Sur, C.P. 20130, Aguascalientes, Ags., Mexico. He personally handles everything about your personal data, including requests to exercise your rights: hola@fuaflow.com.

We answer for what the relay keeps and for what you send us by email. If you write to us from “Report a problem”, you can add the app's error log; it only reaches us if you add it, and you see it in the email before you send it. The business you ask for help answers for what reaches it: it receives it to help you, its people keep it on their phones (in FuaFlow CRM and FuaFlow Teams), and we don't see it. Every business has its own privacy notice, which the app shows you in the form before you send (the model they all use).

Every business on FuaFlow Market agrees, in the FuaFlow Teams terms:

• to use what reaches it only to help you and for any sale you make together;
• not to use it for advertising without your permission, and not to pass it on to anyone else;
• to keep it safe, and to stop contacting you or delete it if you ask.

It's the same protection this notice gives you.

What's on your phone

• The businesses you opened with their link or QR code: their name, their catalog (products, prices, deals, areas and photos), what they say about themselves (their hours, how they take payment and their privacy notice) and the keys the app uses to check that the catalog belongs to that business. Also which ones you blocked and since when. Photos stay saved on the phone so you can see them without signal.
• Your requests: the product (or the ones from your list), the business, what you sent and where each one stands (sent, taken, helped or canceled), with the name of who will help you once the business confirms it, and their WhatsApp if that person allows it, while the request is open. If you rated how you were helped, also the stars you gave.
• How many times you've asked each business and how many times you answered “Yes, and I bought”. Your phone counts it.
• What you save, the last products you opened and your list. With that, your phone lets you know if something you saved dropped in price or is back in stock: the phone works it out, and the relay doesn't know what you saved.
• Your name, phone, area and how you prefer to be contacted, so you don't have to type them again on your next request.
• What's waiting for signal: if you ask for something offline, the request waits sealed on your phone until it can be sent.
• How you want the app to look: language, theme, notifications and the date of the terms you accepted.
• Your key: its secret half lives in the phone's keychain (on iPhone, only on that iPhone: it isn't copied to iCloud), and the public half is given to the relay.
• From FuaFlow Market 1.2, if you're someone's emergency contact: their name and since when and, if their SOS reaches you, their location, the time and whether you've seen it. It's deleted with “Stop being their contact” or when you delete your data.

What reaches the business

Only when you tap “Send”, and only to the business of that product:

• your name, your phone, your area (ZIP code or town), how you want to be contacted (WhatsApp or call) and when, what you write in “What are you looking for?”, the product (or the products on your list) with the option you picked (for example, the size) and the price you saw, and the date you accepted this notice;
• if you asked them before, how many times you've asked and how many times you bought from them: just the numbers, never what you bought;
• an identifier of your app, so the business can answer you inside the app (for example, who will help you).

Only the phones of the people at the business who can help you and of whoever runs it can open it. If the business shares its requests among several people, before someone takes yours they all see a summary: what you're asking for (with the option you chose or your list), your area and when you want to be contacted, without your name or phone number; the relay only gives those to whoever takes it and whoever runs the business. If you opened a salesperson's link, it reaches that salesperson and their leader. If that person is no longer with the business, your request is sealed again for the business and someone else helps you.

If you later cancel, or answer “Have you been helped?” (“Yes”, “Yes, and I bought” or “Not yet”), that reaches the same people, with no other data.

If you rate how you were helped (1 to 5, with a comment if you like), the rating reaches, sealed, only the person who passed your request to whoever helped you, never the person who helped you, and it's never published anywhere.

Your identifier is the same with every business you ask. None of them sees which others you asked, but two businesses that compared it could tell you're the same person.

Don't write health data in “What are you looking for?”, or anything you don't want the business to read. If you ask about a health product, the business will know which one you asked about.

What the relay keeps

The relay runs on Railway, Inc. (United States) and is reached through Cloudflare, Inc. (United States), which protects it from attacks: Cloudflare sees your IP address and each request to the relay, but not what the envelopes say, because they're sealed. The relay keeps:

• your public identifier, your public key and your envelope key (the one the business uses to seal what it answers you);
• for each request: the sealed envelope, which business it's for, who it's for (their identifiers, not their names), your identifier and when it was sent, picked up or canceled. Never your name, your phone or what you wrote: that's inside the envelope. It does see which product you're asking about when the request comes in, to count it in that product's numbers, but it doesn't keep it with your request. To count you only once a day in each product's numbers, it keeps for one day a fingerprint made from your identifier, the product and the date, which is deleted the next day;
• if the person who helped you leaves the business and your request is deleted so it can be sent again, your identifier and the business, for one day, so the resend doesn't count toward your limits;
• your IP address, for up to a day in memory, to count how many requests come from the same network and stop abuse. It isn't written to disk or to the relay's logs. Railway and Cloudflare do log the address of each request in their own records;
• if you allow notifications, the token Apple (on iPhone) or Google (Firebase Cloud Messaging, on Android) gives your phone to send it notifications. When a business takes your request, the relay asks for “Someone will help you soon” to ring: a fixed text that doesn't say who or what; and, if an SOS reaches you, “SOS from someone who has you as their emergency contact”, also fixed. Apple or Google (United States) receive that token, that text and the kind of notification;
• if a business blocks you, that this business no longer receives your requests (your identifier and the business), until you delete your data;
• if you are the emergency contact of someone who uses FuaFlow CRM: that you are (the keys, not the names), with which app and since when. While that person is at an appointment, it keeps, sealed, the SOS they prepared for you: if they check in OK, it's discarded without reaching you; if not, it reaches you at the latest 2 minutes after the time they had to check in by. If they send it with the button, it reaches you right then. If you have no signal, it waits for you up to 7 days, and it's deleted when it reaches you. After that it keeps, for 24 hours, only that it was delivered and when, to let you know if they check in OK late. It also takes to that person, sealed, your name when you accept and your “I saw it”. Either of you can remove it whenever you want;
• if you report a product: which one, the reason (from a fixed list), your identifier and when, so we can review it, until 30 days after that product is removed or expires. That product stops showing for you, and the business doesn't see who reported it;
• if you report the person helping you: the reason (from a fixed list), what you write, which request it's about, who you report, your identifier and when, so we can review it. We keep it for 90 days, or a year if it's confirmed, and we never tell that person who reported them;
• if we warn, suspend or block you because of a report: the reason, the rule that wasn't followed, the date and, for a suspension, until when. A notice you've seen is deleted after 30 days (one you haven't, after a year), a suspension when it ends and a block if we lift it;
• if you ask a business to delete your data, that notice (your identifier and the business) for 30 days, so it reaches its people's phones even if they're off;
• how many requests each product gets per day and how long the business took to take each one, without who asked. That's how the app says “Usually replies in about 15 min” and “Most requested”. The counts are deleted after 8 days, and the times after 30;
• the service logs, one line per thing that happens, with the time. For a request, only which business it's for and who it's for are logged, never who asked or what they asked for.

If you ask us to review a warning, a suspension or a block, we keep your request (what you write, up to 500 characters, and which app it came from) and what we decided, for 90 days after it is resolved, or a year if it is not. If you delete your data, it is deleted. Reports also keep which app they were sent from.

System permissions

• Notifications: for the notice that someone took your request and for next day's reminder, “Have you been helped?”, which your phone schedules, and, if you're someone's emergency contact, so their SOS rings. When you accept, the app asks for notifications if you didn't have them on. They're optional: if you don't allow them, you see it when you open the app.
• The clipboard: only when you tap “Paste a company's link”, to read the link you copied.

The app doesn't ask for your contacts, location, camera, microphone or photos.

What it's used for

• showing you the catalog of the businesses you open and checking it belongs to that business;
• taking your request, sealed, to the person who will help you, and bringing back their answer;
• letting you know when someone takes it and asking you the next day whether you were helped;
• telling you, only with numbers, how fast a business usually replies and what's most requested;
• letting us review the products and people you report and, if a report against you is confirmed, warning, suspending or blocking you;
• taking to a business your request that it delete your data;
• stopping abuse of the relay: there's a daily limit of requests per person, per product, per business and per network;
• if you accept being someone's emergency contact, bringing you their SOS, sealed, and taking that person your name and your “I saw it”;
• working without signal wherever possible.

All of these are needed for what you ask. We don't sell or share data with anyone else, there are no ads, we don't build profiles, and it isn't used to train artificial intelligence. The app has no advertising, analytics or tracking libraries.

We don't ask for sensitive personal data. If you write any in what you ask for or in a rating's comment, it reaches the business; if it's in a report or a review request, we use it only to review it. There are no secondary purposes. ARCO rights are handled by José Arturo Ornelas Brand at hola@fuaflow.com.

How long it lasts and how to delete it

• On your phone: until you delete it. “Delete all my data”, in Settings, deletes the businesses, their catalogs and photos, your requests, what you saved, what you viewed, your list, your saved contact details, whose emergency contact you are and their SOS alerts, and your key, and asks the relay to forget you. Before that, the app lets you ask the businesses to delete what reached them from you. Uninstalling the app deletes what's on your phone except your key: on iPhone it stays in the keychain even if you delete the app, and if you install FuaFlow Market again, the relay recognizes you as the same person (from version 1.0.1, the app gets back which requests you have open and which businesses you blocked). To delete your key too, use “Delete all my data”, with a connection, before you delete the app. Uninstalling doesn't delete what the relay has or what already reached a business either.
• On iPhone, if you back up your iPhone to iCloud or your computer, that Apple backup includes what FuaFlow Market keeps on the phone, except your key. On Android, the app doesn't let Google back it up.
• On the relay: a request is deleted once it's no longer needed, 7 days after the person helping you picks it up, or after 30 days if nobody does. So you can still answer “Have you been helped?” or leave a rating when your appointment is weeks away, it keeps which request it is and which company it's for, without what you asked for, for up to 30 days after someone takes it. If you cancel it, what belongs to that request stops passing an hour later. “Delete all my data” deletes your requests, your reports, the blocks and your notification token from the relay. It also removes that you're someone's emergency contact (that person is told you no longer are) and whatever was waiting for you. From the reports you made about a person it removes your identifier, and it deletes the notices we sent you. A suspension or a block isn't deleted this way, and with your key suspended this reaches the relay once the suspension ends and you open the app.
• At the business: what already reached it stays on its people's phones while they help you and sell to you. If you ask it to delete your data, its apps delete it on their own as soon as they connect. If it already helped you and you bought from it, it keeps your name, phone number and the details of that sale even if you ask to have your data deleted, for example if a payment is still pending; that data is on its people's phones, not with FuaFlow Market, and the business handles it under its own privacy notice. If the person who helped you leaves the business, their app deletes what reached them from you.

A suspension or a block is kept to protect other people and to handle a review. If you ask for access to a report about you, it won't include who made it.

Who else gets it

• The business you choose, when you ask it for help. That's what the app is for, and you do it.
• The person whose emergency contact you are: your name when you accept, and “I saw it” if you tap it. You do it.
• Railway and Cloudflare, which host and protect the relay, and Apple and Google, for notifications. They handle it on our behalf and only for that.
• Whoever hosts each business's photos: your phone asks for each photo at the web address the business gave, like any web page, and that server sees your IP address.
• If you tap “Message them on WhatsApp”, WhatsApp opens with the number of the person helping you. What you write there is handled by WhatsApp (Meta), under its own rules.
• An authority, only if a law or a court requires it, and only what the relay keeps, which is sealed.

If there's a security breach

If something breached the security of your data in a way that significantly affects your rights, we'll let you know right away, so you can protect yourself.

Your rights

You can request access, rectification, cancellation or objection regarding the data we have (the relay's and emails), or withdraw your consent:

• write to hola@fuaflow.com with your name and how to reply to you, which data it's about and what you want us to do. Since there are no accounts, we'll tell you how to show the key is yours;
• we reply within 20 business days at most and, if it applies, we carry it out within the next 15 business days. It's free;
• in the app you already see everything you sent, in “My requests”, and you can cancel a request, block a business, ask it to delete your data and delete everything;
• we have no copy of what already reached a business: ask the business, from the app or through the contact in its privacy notice;
• if you disagree with our answer, you can file a data protection request with Mexico's Secretaría Anticorrupción y Buen Gobierno within the following 15 days; if we don't answer, once the deadline has passed.

Minors

FuaFlow Market is for people 18 and older. If you're the parent or guardian of a minor who used it, write to us and we'll delete what the relay has.

Changes

If this notice changes, we publish the new version on this page with its date before it takes effect, and, if the change is important, we'll let you know in the app.