FuaFlow Market privacy notice

Effective November 4, 2026

What matters, in four lines

• FuaFlow Market shows you what verified businesses sell and, only if you ask, takes your contact details to one of them so they can help you. There's no account and no password: your identity is a key that lives on your phone.
• When you ask for help, your name, phone, area and what you write are sealed on your phone for the person who will help you and their leader. Our server, the relay, carries that envelope and can't open it.
• What reaches a business is received to help you, and from then on that business answers for that data. Every business agrees to use it only for that and to protect it as this notice says.
• No ads, no usage analytics, no trackers, and we don't sell data.

Who answers for this data

FuaFlow Market is developed and run by José Arturo Ornelas Brand, at Calle San José de los Reynoso 115, Col. Bosques del Prado Sur, C.P. 20130, Aguascalientes, Ags., Mexico. He personally handles everything about your personal data, including requests to exercise your rights: [email protected].

We answer for what the relay keeps and for what you send us by email. The business you ask for help answers for what reaches it: it receives it to help you, its people keep it on their phones (in FuaFlow CRM and FuaFlow Teams), and we don't see it. Every business has its own privacy notice, which the app shows you in the form before you send (the model they all use).

Every business on FuaFlow Market agrees, in the FuaFlow Teams terms:

• to use what reaches it only to help you and for any sale you make together;
• not to use it for advertising without your permission, and not to pass it on to anyone else;
• to keep it safe, and to stop contacting you or delete it if you ask.

It's the same protection this notice gives you.

What's on your phone

• The businesses you opened with their link or QR code: their name, their catalog (products, prices, deals, areas and photos), what they say about themselves (their hours, how they take payment and their privacy notice) and the keys the app uses to check that the catalog belongs to that business. Also which ones you blocked and since when. Photos stay saved on the phone so you can see them without signal.
• Your requests: the product (or the ones from your list), the business, what you sent and where each one stands (sent, taken, helped or canceled), with the name of who will help you once the business confirms it, and their WhatsApp if that person allows it, while the request is open. If you rated how you were helped, also the stars you gave.
• How many times you've asked each business and how many times you answered “Yes, and I bought”. Your phone counts it.
• What you save, the last products you opened and your list. With that, your phone lets you know if something you saved dropped in price or is back in stock: the phone works it out, and the relay doesn't know what you saved.
• Your name, phone, area and how you prefer to be contacted, so you don't have to type them again on your next request.
• What's waiting for signal: if you ask for something offline, the request waits sealed on your phone until it can be sent.
• How you want the app to look: language, theme, notifications and the date of the terms you accepted.
• Your key: its secret half lives in the phone's keychain (on iPhone, only on that iPhone: it isn't copied to iCloud), and the public half is given to the relay.

What reaches the business

Only when you tap “Send”, and only to the business of that product:

• your name, your phone, your area (ZIP code or town), how you want to be contacted (WhatsApp or call) and when, what you write in “What are you looking for?”, the product (or the products on your list) with the option you picked (for example, the size) and the price you saw, and the date you accepted this notice;
• if you asked them before, how many times you've asked and how many times you bought from them: just the numbers, never what you bought;
• an identifier of your app, so the business can answer you inside the app (for example, who will help you).

Only the phones of the person who will help you and their leader can open it. If you opened a salesperson's link, it reaches that salesperson and their leader. If that person is no longer with the business, your request is sealed again for the business and someone else helps you.

If you later cancel, or answer “Have you been helped?” (“Yes”, “Yes, and I bought” or “Not yet”), that reaches the same people, with no other data.

If you rate how you were helped (1 to 5, with a comment if you like), the rating reaches, sealed, only the person who passed your request to whoever helped you, never the person who helped you, and it's never published anywhere.

Your identifier is the same with every business you ask. None of them sees which others you asked, but two businesses that compared it could tell you're the same person.

Don't write health data in “What are you looking for?”, or anything you don't want the business to read. If you ask about a health product, the business will know which one you asked about.

What the relay keeps

The relay runs on Railway, Inc. (United States) and is reached through Cloudflare, Inc. (United States), which protects it from attacks: Cloudflare sees your IP address and each request to the relay, but not what the envelopes say, because they're sealed. The relay keeps:

• your public identifier, your public key and your envelope key (the one the business uses to seal what it answers you);
• for each request: the sealed envelope, which business it's for, who it's for (their identifiers, not their names), your identifier and when it was sent, picked up or canceled. Never your name, your phone or what you wrote: that's inside the envelope, like the product you asked about. To count you only once a day in each product's numbers, it keeps for one day a fingerprint made from your identifier, the product and the date, which is deleted the next day;
• if the person who helped you leaves the business and your request is deleted so it can be sent again, your identifier and the business, for one day, so the resend doesn't count toward your limits;
• your IP address, for up to a day in memory, to count how many requests come from the same network and stop abuse. It isn't written to disk or to the relay's logs. Railway and Cloudflare do log the address of each request in their own records;
• if you allow notifications, the token Apple (on iPhone) or Google (Firebase Cloud Messaging, on Android) gives your phone to send it notifications. When a business takes your request, the relay asks for “Someone will help you soon” to ring: a fixed text that doesn't say who or what. Apple or Google (United States) receive that token, that text and the kind of notification;
• if a business blocks you, that this business no longer receives your requests (your identifier and the business), until you delete your data;
• if you report a product: which one, the reason (from a fixed list), your identifier and when, so we can review it, until 30 days after that product is removed or expires. That product stops showing for you, and the business doesn't see who reported it;
• if you ask a business to delete your data, that notice (your identifier and the business) for 30 days, so it reaches its people's phones even if they're off;
• how many requests each product gets per day and how long the business took to take each one, without who asked. That's how the app says “Usually replies in about 15 min” and “Most requested”. The counts are deleted after 8 days, and the times after 30;
• the service logs, one line per thing that happens, with the time. For a request, only which business it's for and who it's for are logged, never who asked or what they asked for.

System permissions

• Notifications: for the notice that someone took your request and for next day's reminder, “Have you been helped?”, which your phone schedules. They're optional: if you don't allow them, you see it when you open the app.
• The clipboard: only when you tap “Paste a company's link”, to read the link you copied.

The app doesn't ask for your contacts, location, camera, microphone or photos.

What it's used for

• showing you the catalog of the businesses you open and checking it belongs to that business;
• taking your request, sealed, to the person who will help you, and bringing back their answer;
• letting you know when someone takes it and asking you the next day whether you were helped;
• telling you, only with numbers, how fast a business usually replies and what's most requested;
• letting us review the products you report;
• taking to a business your request that it delete your data;
• stopping abuse of the relay: there's a daily limit of requests per person, per product, per business and per network;
• working without signal wherever possible.

All of these are needed for what you ask. We don't sell or share data with anyone else, there are no ads, we don't build profiles, and it isn't used to train artificial intelligence. The app has no advertising, analytics or tracking libraries.

How long it lasts and how to delete it

• On your phone: until you delete it. “Delete all my data”, in Settings, deletes the businesses, their catalogs and photos, your requests, what you saved, what you viewed, your list, your saved contact details and your key, and asks the relay to forget you. Before that, the app lets you ask the businesses to delete what reached them from you. Uninstalling the app deletes what's on your phone, but not what the relay has or what already reached a business.
• On iPhone, if you back up your iPhone to iCloud or your computer, that Apple backup includes what FuaFlow Market keeps on the phone, except your key. On Android, the app doesn't let Google back it up.
• On the relay: a request is deleted once it's no longer needed, 7 days after the person helping you picks it up, or after 30 days if nobody does. So you can still answer “Have you been helped?” or leave a rating when your appointment is weeks away, it keeps which request it is and which company it's for, without what you asked for, for up to 30 days after someone takes it. If you cancel it, what belongs to that request stops passing an hour later. “Delete all my data” deletes your requests, your reports, the blocks and your notification token from the relay.
• At the business: what already reached it stays on its people's phones while they help you and sell to you. If you ask it to delete your data, its apps delete it on their own as soon as they connect, except what it needs for a sale or a payment that's still pending. If the person who helped you leaves the business, their app deletes what reached them from you.

Who else gets it

• The business you choose, when you ask it for help. That's what the app is for, and you do it.
• Railway and Cloudflare, which host and protect the relay, and Apple and Google, for notifications. They handle it on our behalf and only for that.
• Whoever hosts each business's photos: your phone asks for each photo at the web address the business gave, like any web page, and that server sees your IP address.
• If you tap “Message them on WhatsApp”, WhatsApp opens with the number of the person helping you. What you write there is handled by WhatsApp (Meta), under its own rules.
• An authority, only if a law or a court requires it, and only what the relay keeps, which is sealed.

If there's a security breach

If something breached the security of your data in a way that significantly affects your rights, we'll let you know right away, so you can protect yourself.

Your rights

You can request access, rectification, cancellation or objection regarding the data we have (the relay's and emails), or withdraw your consent:

• write to [email protected] with your name and how to reply to you, which data it's about and what you want us to do. Since there are no accounts, we'll tell you how to show the key is yours;
• we reply within 20 business days at most and, if it applies, we carry it out within the next 15 business days. It's free;
• in the app you already see everything you sent, in “My requests”, and you can cancel a request, block a business, ask it to delete your data and delete everything;
• we have no copy of what already reached a business: ask the business, from the app or through the contact in its privacy notice;
• if you disagree with our answer, you can file a data protection request with Mexico's Secretaría Anticorrupción y Buen Gobierno within the following 15 days; if we don't answer, once the deadline has passed.

Minors

FuaFlow Market is for people 18 and older. If you're the parent or guardian of a minor who used it, write to us and we'll delete what the relay has.

Changes

If this notice changes, we publish the new version on this page with its date before it takes effect, and the app lets you know the next time you open it.