Flowting

Consumer Health Data Privacy Policy

Last updated: October 11, 2026
This policy is for people in Washington State, under the Washington My Health My Data Act, and for people in Nevada, under its similar law. It explains what "consumer health data" Flowting collects, why, who receives it, and how you can use your rights. Our Privacy Policy and our Biometric Notice give the full picture.
Flowting is run by VeriTek L.L.C-FZ, Meydan Grandstand, 6th floor, Meydan Road, Nad Al Sheba, Dubai, United Arab Emirates. Email: [email protected].

1. What consumer health data we collect

Flowting is a dating app, not a health service. The only consumer health data we collect comes from our face checks:
Face images
What it is
The photos you upload, and two or three still images from your selfie check
Face measurements (biometric data)
What it is
Numbers that describe a face, made from your selfie and your photos that show only you, during a check
Age estimates and face counts
What it is
How many faces a photo shows, and how old the face looks in a photo that shows only one face, made by our photo checks
Face code on the ban list
What it is
One face code of a person whose account we banned for safety
We do not collect other health data. We never ask about your health, and our code never treats your profile answers as health data.

2. Where it comes from

  • From you: the photos you upload and the selfie you take in the Flowting app or in your phone's web browser.
  • From our checks: face measurements, age estimates and face counts that our own tools and Google's Gemini AI service make from those images.

3. Why we collect it

  • To check that you are a real, live person and that your photos are of you.
  • To check that you look like an adult, and that photos do not show children.
  • To keep people we banned for safety from coming back.
We collect it only with your consent, which you give on its own screen before your first photo. We never use it for ads, and we never sell it.

4. Who receives it

We do not sell or "share" consumer health data as the law defines it. These service providers process it for us, only on our instructions and under contract:
Hetzner Online GmbH
What they do
Hosts our servers and database, including our own photo-check and face-match servers
Data they get
Face images and face measurements during a check; age estimates; ban-list face codes
Cloudflare (R2 storage, EU)
What they do
Stores photos and, for up to 30 days, selfie images
Data they get
Face images
Google (Gemini on Google Cloud Vertex AI)
What they do
Checks one selfie image for a live person, compares it with your photos, and gives a second opinion on unclear photos. Google may process it in any of its regions
Data they get
Face images
Our own team (James, or our contracted safety backup person) sees selfie images only when a check needs a person. We have no affiliates that receive consumer health data. We give data to authorities only when the law requires it, as our Privacy Policy explains.

5. How long we keep it

Face measurements
Destroyed
At the end of each check, within seconds
Selfie images
Destroyed
When the check ends; at most 30 days after the selfie if a person must review it
Age estimates and face counts
Destroyed
When you delete your account
Photos
Destroyed
When you delete them, or your account
Ban-list face code
Destroyed
24 months after the ban, or at once if the ban is lifted

6. Your rights

You can:
  • Know and access. Ask whether we collect or share your consumer health data, get a copy of it, and get the list of providers that received it.
  • Withdraw consent. Go to Settings, then Your permissions, then Washington consumer health data (or Face checks and the selfie check), then Withdraw. Both are withdrawn together. We stop face checks at once.
  • Delete. Delete your account in Settings, or ask us at [email protected]. We delete your consumer health data, and tell our providers to delete it, within 30 days. Encrypted backups are overwritten within 30 days. There are two exceptions:
    • If we banned your account for fraud, a scam, a fake profile, harassment, a threat, violence, sexual abuse or illegal content, we keep one face code for up to 24 months from the ban, so you cannot come back with a new account. Washington law allows data to be kept to prevent fraud and harassment (RCW 19.373.100(3)). If we keep it, our answer to your request says so and why.
    • If Google's automatic abuse checks flagged an image during a check, Google may keep that image for up to 90 days for its own safety review (see our Biometric Notice, section 7).
  • Not be treated worse for using these rights.
To use a right, write to [email protected] from your account email, or use the app. We may confirm it is you with a code sent to your account email. We answer within 45 days. If we say no, you can appeal by replying to our answer. If you still disagree, you can contact the Washington State Attorney General at atg.wa.gov.

7. Contact

VeriTek L.L.C-FZ, Meydan Grandstand, 6th floor, Meydan Road, Nad Al Sheba, Dubai, UAE [email protected]