Privacy Policy

RelationQ is operated by Flowin, a company registered in Latvia under registration number 40203053267, at Miera iela 97 - 26, Riga, LV-1013, Latvia.

Flowin is the data controller for the information described below. For anything about your data — a copy, a correction, a deletion — write to us and a person will answer.

If you read nothing else:

• We never sell your data, to anyone, for any purpose.
• We never send your relationship answers to advertising platforms.
• Analytics record which step you were on — not what you said on it.
• You can start anonymously, without an account.
• You can ask us to delete everything, and we will.

Depending on how far you go, we may hold:

• Assessment answers — your responses to the questions you chose to answer, including any you skipped.
• Derived results — your RQ profile, dimension scores and generated plan.
• Session data — an anonymous session identifier stored in a cookie so you can close the tab and return.
• Contact details — your email address, only if you choose to provide it.
• Payment data — handled by Stripe. We store a payment reference and subscription status. We never see or store your card number.
• Technical and attribution data — device type, approximate country, referring source and campaign, so we can see where people drop off.

We set a small number of cookies without asking, because the service cannot work without them: an anonymous session identifier so you can close the tab and return, a sign-in cookie once you have an account, and a record of any discount you were shown so the price does not change under you.

Everything else is optional and we ask first. The banner has two separate choices, because they are two different purposes and accepting one does not accept the other. Nothing is loaded or stored for either until you answer.

Measurement. If you accept this, we load Google Analytics, which stores its own identifiers (_ga and a second cookie named after our measurement property) and receives which pages you visited, which step you reached, and which buttons you pressed. It also receives your account identifier once you are signed in — never your email address. Web addresses are stripped to campaign parameters before they are sent, so nothing carried in a link reaches Google beyond where the visit came from.

Advertising. If you accept this, we store two Meta identifiers (_fbc and _fbp) and send Meta a record of four things: viewing your result, submitting your email, choosing a plan, and completing a purchase. Those events include your email address in hashed form, so that Meta can match the purchase to the ad that led to it. Hashing is one-way — we never send your address in readable form.

We never send your assessment answers, RQ scores, focus area or relationship status to Google, Meta or any other third party. This is enforced in code by an allowlist of the only fields permitted to leave, not by policy alone.

Both Google and Meta are based in the United States, and accepting either means your data is transferred there under the European Commission's standard contractual clauses and the EU–US Data Privacy Framework.

We also keep our own record of which step you reached, in our own database. That is first-party, is never shared, and is how the product knows where to resume you — it happens whatever you choose in the banner, and it never includes what you answered.

You can change your mind at any time using the Cookie settings link in the footer. Withdrawing a permission deletes the identifiers it allowed.

Some answers may reveal information about your health, sex life or beliefs. Under UK and EU data protection law this is special category data and requires your explicit consent, which we ask for before the assessment begins.

You can withdraw that consent at any time by contacting us, and we will delete the affected data.

• To generate your profile and plan — this is the service you asked for (contract).
• To improve the product by analysing aggregate drop-off and outcomes (legitimate interests).
• To process payments and meet our tax and accounting obligations (legal obligation).
• To send you your results or product emails, where you asked us to (consent).

Only processors that are necessary to run the service: our hosting provider, our database provider, Stripe for payments, and our email provider for transactional messages. Each is bound by a data processing agreement and may only act on our instructions.

Google Analytics and Meta receive data only if you accept the relevant option in the cookie banner, and only what is described above.

We do not share your data with advertisers, data brokers, insurers, employers, or anyone else — and we do not participate in data-sharing arrangements that would allow your answers to be matched to an advertising profile.

Anonymous sessions that are never completed are deleted after 12 months. Completed profiles are kept while your account is active, and for 12 months afterwards so you can return. Payment records are kept for as long as tax law requires, typically six to seven years.

You can request a copy of your data, correct it, delete it, restrict or object to processing, or ask for it in portable form. Email us and we will respond within 30 days. You may also complain to your local data protection authority.

Data is encrypted in transit and at rest, access is limited to staff who need it, and we log administrative access. No system is perfect; if a breach affecting you occurs, we will tell you and the relevant authority within the timescales the law requires.