Flowen
Security and safety information
An overview of mechanisms in the code, with limits. This page is not an independent security audit, certification or compliance attestation.
Authentication and access
The platform uses Supabase authentication and database row-level security policies. Privileged backend credentials can bypass those policies. The presence of controls in code is not proof of complete isolation or an independent penetration test.
Hosting and transport
The application uses Vercel and Supabase, with additional providers for enabled features. Do not infer UK-only storage or processing from a web deployment region. Detailed provider regions and transfer safeguards require a current operational review.
Clinical safety documents
Clinical safety documents and the hazard log are controlled drafts. Signed approval, DCB0129 compliance, DTAC assessment and DSPT completion are not claimed.
Audio and privacy
Live acoustic analysis runs in the browser. Depending on the feature, audio may also be transmitted to service providers or stored as a session recording. Read the privacy policy for the disclosed processing, recipients, retention and your choices. Do not assume that all voice data stays on your device.
Read the privacy policyReporting a concern
Report security concerns to hello@flowen.digital with reproduction steps. Do not include passwords, payment details or unnecessary personal data.