Privacy Policy

Flomunis Inc. (“Flomunis”, “we”, “us”, “our”) operates the Flomunis platform, accessible at flomunis.com and through our mobile applications. We provide a verified community platform for sports enthusiasts to connect, schedule matches, and track performance.

Our Privacy Officer can be reached at privacy@flomunis.com.

We collect the following categories of personal information:

We collect information directly from you when you register, complete your profile, schedule matches, or interact with platform features. Technical data is collected automatically as you use the platform.

We use your personal information only for legitimate purposes consistent with the reason it was collected:

• Creating and managing your account
• Verifying your identity via phone OTP (Tier 1) or government ID (Tier 2)
• Enabling match scheduling, league participation, and community features
• Calculating rankings, awarding points, and displaying leaderboards
• Sending transactional notifications (match reminders, results, invitations) via email and SMS
• Sending marketing communications if you have opted in — you can opt out at any time
• Responding to support requests and safety reports
• Detecting and preventing fraud, abuse, and policy violations
• Meeting our legal and regulatory obligations

We do not sell, rent, or trade your personal information to third parties for their own marketing purposes.

We share personal information only with trusted third-party service providers who process data on our behalf, and only as necessary to provide the platform. All providers are contractually bound to protect your data.

We may also disclose your information if required by law, court order, or government authority, or to protect the safety of our users and the integrity of the platform.

We retain your personal information for as long as your account is active, or as necessary to provide our services and meet legal obligations.

• Active accounts: data retained for the duration of the account
• Deleted accounts: a secure, admin-only backup is retained for 7 years from the deletion date for regulatory compliance (PIPEDA, GDPR alignment) and then permanently purged
• Transaction records: retained for 7 years per Canadian tax and financial record-keeping requirements
• Server logs: retained for up to 90 days

When an account is deleted, your personal data is immediately removed from the live platform. Your posts and comments are also permanently deleted. Match history is retained with your identity replaced by a proxy ID (e.g., “Deleted User DEL-XXXXXXXX”) to preserve platform integrity.

Under PIPEDA, you have the right to:

• Access: request a copy of the personal information we hold about you
• Correction: request that inaccurate information be corrected
• Deletion: request deletion of your account and personal data (subject to retention obligations)
• Withdrawal of consent: withdraw consent to optional uses (e.g., marketing emails) at any time
• Complaint: file a complaint with the Office of the Privacy Commissioner of Canada if you believe your rights have been violated

To exercise any of these rights, contact our Privacy Officer at privacy@flomunis.com. We will respond within 30 days. You can also delete your account directly from Settings → Account.

We implement appropriate technical and organizational safeguards to protect your personal information, including:

• TLS encryption for all data in transit
• Encrypted database storage (Supabase AES-256 at rest)
• Row-level security policies enforced at the database layer
• OTP codes stored as hashed values — never in plaintext
• Access to production systems restricted to authorised personnel

No system is completely secure. If you believe your account has been compromised, contact us immediately at security@flomunis.com.

Flomunis uses essential cookies to maintain your authenticated session. We do not use third-party advertising cookies or tracking pixels.

• Session cookies: required for login and maintaining your session — cannot be disabled
• Preference cookies: store your theme preference (light/dark) — functional only

We may add analytics in the future. Any addition of analytics or advertising cookies will be disclosed through an updated Cookie Policy and will require your consent where required by law.

Flomunis is not intended for users under the age of 13. We do not knowingly collect personal information from children under 13. If we become aware that we have inadvertently collected such information, we will promptly delete it. Users between 13 and 18 must have parental or guardian consent to use the platform.

We may update this Privacy Policy from time to time. When we make material changes, we will notify you by email and display a notice on the platform. Your continued use of Flomunis after the effective date of the updated policy constitutes your acceptance of the changes.

Existing users will be prompted to re-consent when the Terms of Service or Privacy Policy are updated.

If you have any questions, concerns, or requests regarding this Privacy Policy or our privacy practices:

You may also file a complaint with the Office of the Privacy Commissioner of Canada.