Last updated: February 16, 2026
Responsible: Felipe Libreros — Flujo Conducido (phelipenn.com)
Privacy commitment: Your emotional data is extremely sensitive. We treat it with the highest level of protection. We do not sell it. We do not share it with advertisers. We do not use it for advertising. It is yours.
Important: Flujo Conducido is not a mental health service. The data you record (emotional states, journal, tests) are self-awareness tools, not clinical data or medical records.
1. Data Controller
Identity: Felipe Libreros
Activity: Flujo Conducido self-awareness platform
Web: flujoconducido.com / phelipenn.com
Contacto: Through the platform ticket system
Location: Spain — European Union
2. What Data Do We Collect?
2.1 Registration Data
- Full name and email
- Password (encrypted with bcrypt, never accessible in plain text)
- Registration date and last access
2.2 Platform Usage Data
- FC Tests: Answers, identified states (6 states, 16 sub-states), percentages, dates
- Emotional journal: Recorded emotions, intensity, described situations, reflections
- I.V.A. Adjustments: Situations, intentions, validations, applied adjustments, results
- E.R.C. Analysis: Stimuli, reactions, consequences, identified patterns
- Gamification: Points, levels, streaks, unlocked achievements
2.3 Payment Data
- Card data is NOT stored on our servers
- We process payments through Stripe (PCI-DSS), PayPal and LemonSqueezy
- We only store: payment date, contracted plan, subscription status, transaction ID
- LemonSqueezy acts as Merchant of Record for VAT management when applicable
2.4 Technical Data
- IP address (for security)
- Browser type and device
- Session cookies (strictly necessary)
3. Legal Basis for Processing
| Purpose | Legal Basis (GDPR Art. 6) |
|---|
| Account and subscription management | Contract execution |
| Payment processing | Contract execution |
| Platform functionality | Contract execution |
| Service improvement | Legitimate interest |
| Service communications | Contract execution |
| Email marketing (only if you accept) | Explicit consent |
| Tax and legal compliance | Legal obligation |
4. What We NEVER Do
- ❌ Sell your data to third parties
- ❌ Share your emotional data with advertisers
- ❌ Use your data for targeted advertising
- ❌ Train AI models with your personal records
- ❌ Share your data with insurers, employers or credit agencies
- ❌ Create psychological profiles for commercial purposes
5. Who Do We Share Data With?
Only essential providers:
- Stripe: Payment processing (billing data only)
- PayPal: Payment processing alternativo
- LemonSqueezy: Tax management and invoicing (Merchant of Record)
- Hosting: Servers in the European Union (encrypted data)
All with verified GDPR compliance. We will only share additional data if required by a valid court order.
6. Where and How Long Do We Store Data?
Servers in the European Union with SSL/TLS encryption in transit and at rest.
| Data Type | Retention |
|---|
| Active account data | While your account is active |
| Data after cancellation | 6 months (in case you return) |
| Data after deletion request | 30 days maximum |
| Billing data | 7 years (Spanish tax obligation) |
| System logs | 90 days |
7. Your Rights (GDPR)
You have the right to: access (request a copy of your data), rectification (correct inaccurate data), erasure (delete your account and data), portability (export your data), objection (unsubscribe from marketing) and restriction of processing.
How to exercise these rights?
- From your profile (to export, rectify, delete)
- Through the platform ticket system
- Response within a maximum of 30 days per GDPR
8. Cookies
We only use strictly necessary cookies: session (to maintain your login) and interface preferences. We do NOT use third-party cookies, advertising cookies or tracking cookies.
9. Minors
Flujo Conducido is NOT designed for anyone under 18 years of age. We do not knowingly collect data from minors. If we detect a minor account, we immediately delete it along with all their data.
10. Supervisory Authority
If you believe your rights have not been respected, you can file a complaint with the Spanish Data Protection Agency (AEPD): www.aepd.es — Tel: 912 663 517
11. Contact
For any questions about privacy or to exercise your rights, use the ticket system integrated in the platform ("Help and support" section in your profile).
Your privacy is our priority. Your emotional data is yours, not ours.