Bioflow

Privacy Policy

Effective date: March 28, 2026

1. Introduction

Bioflow (“we”, “us”, or “our”) is a platform that allows users to centralize their social media links on a single customizable profile page that can be shared publicly. We are committed to protecting the privacy of our users and handling their personal data with transparency, security, and full respect for applicable law.

This Privacy Policy describes what information we collect, how we use it, with whom we share it, and what rights you have as a data subject. By registering and using Bioflow, you accept the practices described in this document.

2. Data Controller

The entity responsible for processing your personal data is:

Company Name:
Bioflow
Privacy contact email:
privacy@bioflow.io
Website:
https://bioflow.io

3. Personal Data We Collect

3.1 Data you provide to us

When you create a Bioflow account, we collect the following information:

  • Name or username
  • Email address
  • Password (stored in encrypted form; never in plain text)
  • Profile picture (optional)
  • Bio or profile description (optional)
  • Links to your social media profiles and websites
  • Registration method (email, Google, etc.)

3.2 Data collected automatically upon registration

At the time of registration, we automatically collect certain technical information:

  • IP address
  • Country and city (via IP geolocation)
  • Device type (mobile, desktop, tablet)
  • Operating system and version
  • Web browser and version
  • Browser language
  • Time zone
  • Exact date and time of registration
  • Acquisition source (UTM parameters / referrer — the page you came from)

3.3 Usage data and in-platform events

Once your account is active, we record key events to improve the service:

  • Date and time of your first added link
  • Number of links in your profile and connected platforms
  • Date of last profile update
  • Login history (date, time, device, IP address)

3.4 Data about visitors to your public profile

When third parties visit your Bioflow profile page, we collect:

  • Visitor IP address and country
  • Device type and browser
  • Date and time of the visit
  • Link clicked
  • Referring page (referrer)

This information is used to provide profile analytics to registered Bioflow users (you), and is not used to individually identify visitors.

4. Purposes of Data Processing

4.1 Primary purposes (required for the service)

  • Create and manage your Bioflow account
  • Allow you to configure and publish your personalized profile page
  • Ensure the security of your account and detect unauthorized access
  • Provide technical support and handle customer service requests
  • Comply with applicable legal obligations

4.2 Secondary purposes (service improvement and analytics)

With your consent or based on our legitimate interest, we also use your data to:

  • Analyze aggregated usage metrics (registration country, device type, acquisition source) to improve the platform
  • Understand which social networks are most connected to prioritize new feature development
  • Send communications about service updates, new features, or important notices
  • Send marketing communications (only with your explicit consent and with an opt-out option at any time)

5. Legal Basis for Processing

The processing of your personal data is based on the following legal grounds:

  • Contract performance: to provide you with the Bioflow service in accordance with our Terms and Conditions.
  • Legitimate interest: to improve the platform, ensure security, and prevent fraud.
  • Consent: for marketing communications, non-essential cookies, and optional analytics.
  • Legal obligation: when the law requires us to retain or disclose information.

6. Cookies and Tracking Technologies

Bioflow uses cookies and similar technologies for site functionality, session authentication, and usage analytics. You can manage or disable non-essential cookies through your browser settings. Essential cookies are required for the platform to function properly.

7. Data Sharing and Transfers

Bioflow does not sell your personal data to third parties. We may share information in the following cases:

  • Service providers: companies that help us operate Bioflow (hosting, analytics, support), who are bound by confidentiality agreements and only process data under our instructions.
  • Authentication providers: if you use “Sign in with Google” or another OAuth provider, we will receive basic profile information in accordance with their policies.
  • Legal compliance: we may disclose data when required by a competent authority or applicable law.
  • Corporate transactions: in the event of a merger, acquisition, or asset sale, data may be transferred, with prior notice to you.

We will never share your data with advertisers for personalized advertising without your explicit consent.

8. Data Retention

We retain your personal data for as long as your account is active. Once you delete your account, we will delete or anonymize your data within 30 days, unless the law requires us to retain it for an additional period (e.g., for tax or legal obligations).

Technical data about visitors to public profiles (IP, country, device) is retained for a maximum of 12 months and then permanently anonymized.

9. Security Measures

We implement technical and organizational measures to protect your data, including:

  • Password encryption using secure algorithms (bcrypt or equivalent)
  • Data transmission via HTTPS / TLS
  • Restricted access to personal data within the Bioflow team
  • Monitoring for unusual access and security alerts

While we take all reasonable measures, no system is 100% foolproof. In the event of a security breach affecting your data, we will notify you in accordance with the timelines established by applicable law.

10. Your Data Rights (ARCO)

In accordance with the Federal Law on Protection of Personal Data Held by Private Parties (LFPDPPP) of Mexico, you have the following rights over your data:

  • Access: know what personal data we hold about you and how we use it.
  • Rectification: request the correction of inaccurate or incomplete data.
  • Cancellation: request the deletion of your data when it is no longer necessary.
  • Opposition: object to the processing of your data for specific purposes.

To exercise any of these rights, send a request to:

privacy@bioflow.io

Your request must include: full name, email address registered with Bioflow, and a description of the right you wish to exercise. We will respond within a maximum of 20 business days.

11. Protection of Minors

Bioflow is not directed at children under the age of 13. We do not knowingly collect personal data from children under that age. If you are a parent or guardian and believe your child has provided data to Bioflow, please contact us at privacy@bioflow.io and we will promptly delete that information.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. When we make material changes, we will notify you by email and/or through a prominent notice on the platform before the changes take effect. Your continued use of Bioflow after notification constitutes your acceptance of the changes.

13. Contact

If you have questions, comments, or requests related to this Privacy Policy, you can reach us at:

© 2026 Bioflow. All rights reserved.