Última actualización: 8 de abril de 2026
Avamosa LLC ("Avamosa," "we," "us," or "our") operates the Flourish Academy learning platform (the "Service"). This Privacy Policy explains what personal information we collect, why we collect it, how we use and share it, and the choices you have.
We believe privacy should be simple and transparent. We collect only what we need to provide the Service, retain it only as long as necessary, and do not sell your personal information.
Data Controller / Business:
Avamosa LLC
Louisiana, USA
Email: support@flourish-academy.org
For users in the European Economic Area, United Kingdom, and Switzerland, Avamosa LLC is the data controller responsible for your personal information.
| Category | Examples |
|---|---|
| Account information | Email address, password, display name |
| Profile information | Profile photo, language preferences, learning goals |
| Payment information | Subscription plan selection; payment processing is handled by our payment processor (we do not store full card numbers — see Section 2.3) |
| User content | Audio recordings from speaking practice exercises; written responses to writing exercises |
| Communications | Emails or messages you send to our support team |
When you use the Service, we automatically collect:
| Category | Examples |
|---|---|
| Usage data | Lessons accessed, exercises completed, assessment scores, study session duration, progress milestones |
| Device and technical data | Device type, operating system, app version, unique device identifiers, IP address, language settings |
| Crash and diagnostic data | Error logs, crash reports used to identify and fix bugs |
| Analytics data | Feature usage patterns used to improve the Service |
| Source | Information Received |
|---|---|
| Payment processors (Stripe / Apple App Store / Google Play) | Subscription status, transaction ID, last-4 digits of card, billing country; we do not receive full payment credentials |
| Authentication providers (Google Sign-In, Apple Sign-In, if enabled) | Email address, name, and profile photo from the OAuth token you authorize |
| Firebase (Google) | Authentication tokens, Firestore database operations, Storage of user content, Analytics events, Crashlytics reports |
We use your information for the following purposes:
| Purpose | Legal Basis (GDPR) |
|---|---|
| Create and manage your account | Performance of a contract |
| Provide the learning Service, including AI-powered feedback on your recordings and writing | Performance of a contract |
| Process subscription payments and manage billing | Performance of a contract |
| Send transactional communications (receipts, account updates, security alerts) | Performance of a contract / Legal obligation |
| Personalize your learning experience and track your progress | Performance of a contract / Legitimate interests |
| Improve the Service (analyze usage patterns, fix bugs, develop new features) | Legitimate interests |
| Ensure security and prevent fraud | Legitimate interests / Legal obligation |
| Comply with legal obligations (e.g., retaining consent records) | Legal obligation |
| Send marketing communications about Flourish Academy (with opt-out) | Legitimate interests / Consent (where required) |
We do not use your audio recordings or writing submissions to train machine learning models without your separate, explicit consent.
The Service uses artificial intelligence to provide feedback on your speaking recordings and writing responses. When you submit a recording or writing exercise:
We do not sell your personal information. We share it only in the following circumstances:
We share information with vendors who process data on our behalf and are bound by data processing agreements:
| Vendor | Purpose |
|---|---|
| Google Firebase | Authentication, database, file storage, analytics, crash reporting |
| Stripe (if applicable) | Payment processing |
| OpenAI (via Cloud Functions) | Speaking and writing feedback generation |
| Email service provider | Transactional and marketing email delivery |
We may disclose information if we believe in good faith that disclosure is required to:
If Avamosa is involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you via email or a prominent in-app notice before your information is transferred and becomes subject to a different privacy policy.
We will share your information with third parties when you explicitly authorize it.
We may share aggregated or de-identified data (e.g., "X% of users completed the reading module") that cannot reasonably identify you.
The Flourish Academy mobile app does not use traditional browser cookies. We use:
If you access the Service via a web browser, we use:
| Cookie Type | Purpose | Consent Required |
|---|---|---|
| Required | Authentication session, security tokens, user preferences | No |
| Analytics | Usage patterns to improve the Service (Firebase Analytics) | No (legitimate interest) / Yes (EU — opt-in) |
We do not use advertising cookies or sell browsing data to ad networks. We honor the Global Privacy Control (GPC) browser signal as a valid opt-out request for any data sharing that constitutes a "sale" or "share" under applicable law.
The Service is not directed to children under 13. We do not knowingly collect personal information from children under 13.
If you are under 13, do not create an account or use the Service.
If we learn we have collected personal information from a child under 13 without verifiable parental consent, we will delete that information promptly. If you believe we may have inadvertently collected such information, contact us at support@flourish-academy.org.
If you are between 13 and 17, you may only use the Service with the knowledge and consent of a parent or legal guardian.
We retain personal information only as long as necessary for the purposes described in this policy or as required by law.
| Category | Retention Period |
|---|---|
| Account information | Active until you close your account; deleted from active systems within 30 days of closure |
| Profile photos | Active until you delete them or close your account |
| Audio recordings (speaking practice) | Active until you delete them or close your account |
| Writing responses | Active until you delete them or close your account |
| Subscription consent records | 3 years from enrollment date (FTC regulatory requirement) |
| Payment transaction records | As required by applicable tax and financial regulation (typically 7 years) |
| Usage and analytics data | Aggregated within 12 months; de-identified data may be retained indefinitely |
| Crash / diagnostic logs | 90 days |
| Support communications | 3 years |
| Backup systems | All data deleted from active systems may persist in encrypted backups for up to 90 days, after which it is permanently purged |
We implement reasonable technical and organizational measures to protect your personal information, including:
No system is completely secure. If you believe your account has been compromised, contact us immediately at support@flourish-academy.org.
| Control | How |
|---|---|
| Update account information | Account settings in the app |
| Delete user content (recordings, writing) | In-app deletion within the relevant exercise or session |
| Upload or change profile photo | Profile settings |
| Opt out of marketing emails | Unsubscribe link in any marketing email, or contact support@flourish-academy.org |
| Limit device tracking | iOS: Settings → Privacy → Tracking; Android: Settings → Privacy → Ads |
| Close your account | Account settings → Delete Account, or contact support@flourish-academy.org |
| Exercise privacy rights | See Sections 11–13 below |
This section applies to California residents.
| Right | Description |
|---|---|
| Right to Know | Request the categories and specific pieces of personal information we have collected about you, our purposes for collection, and whether we have sold or shared it |
| Right to Delete | Request deletion of personal information we hold about you (subject to legal retention obligations) |
| Right to Correct | Request correction of inaccurate personal information |
| Right to Opt-Out of Sale/Sharing | We do not sell your personal information. We do not share it for cross-context behavioral advertising |
| Right to Limit Sensitive Data | Request that we limit use of sensitive personal information to what is necessary to provide the Service |
| Right to Non-Discrimination | We will not discriminate against you for exercising your privacy rights |
Email us at support@flourish-academy.org from the email address associated with your account. We will respond within 45 days. We will verify your identity before processing a request.
Authorized Agents: You may designate an authorized agent to submit requests on your behalf. We will require written proof of authorization.
If your browser or device sends a GPC signal, we honor it as a valid opt-out of sale/sharing as required by California law.
This section applies to users in the European Economic Area (EEA), United Kingdom, and Switzerland.
| Right | Description |
|---|---|
| Access | Request a copy of the personal information we hold about you |
| Correction | Request correction of inaccurate or incomplete data |
| Erasure | Request deletion of your personal information ("right to be forgotten") |
| Restriction | Request that we restrict processing in certain circumstances |
| Portability | Receive your personal information in a structured, machine-readable format |
| Objection | Object to processing based on legitimate interests or for direct marketing |
| Withdraw Consent | Where we rely on consent as a legal basis, withdraw it at any time without affecting the lawfulness of prior processing |
Email support@flourish-academy.org. We will respond within 30 days (extendable to 90 days for complex requests with notice to you).
Your personal information is processed and stored in the United States. When we transfer personal information from the EEA, UK, or Switzerland to the US, we rely on Standard Contractual Clauses (SCCs) as approved by the European Commission.
You have the right to lodge a complaint with your local data protection supervisory authority. In Spain, this is the Agencia Española de Protección de Datos (AEPD) at aepd.es. In other EEA countries, contact your national supervisory authority.
This section applies to users in Latin America.
We respect the privacy rights of users under applicable Latin American data protection laws, including:
| Country | Law |
|---|---|
| Mexico | Ley Federal de Protección de Datos Personales en Posesión de los Particulares (LFPDPPP) |
| Brazil | Lei Geral de Proteção de Dados (LGPD) |
| Colombia | Ley 1581 de 2012 |
| Argentina | Ley 25.326 de Protección de Datos Personales |
| Chile | Ley 19.628 sobre Protección de la Vida Privada |
Users in these countries have the right to access, correct, delete, and object to the processing of their personal information as provided by applicable local law. To exercise these rights, contact us at support@flourish-academy.org.
We may send you marketing emails about new features, promotions, and learning tips. You can opt out at any time by:
Transactional emails (receipts, security alerts, account notifications) are not subject to opt-out as they are necessary to provide the Service.
We comply with the CAN-SPAM Act. Our marketing emails will always include our physical mailing address and a working unsubscribe mechanism.
The Service may contain links to third-party websites or integrate with third-party services (e.g., app stores, payment processors). This Privacy Policy does not apply to those third parties. We encourage you to review their privacy policies.
We may update this Privacy Policy from time to time. If we make material changes, we will notify you at least 30 days before the changes take effect by email or in-app notice. The "Last Updated" date at the top of this policy reflects the most recent revision.
Your continued use of the Service after the effective date constitutes acceptance of the updated policy.
Avamosa LLC
Email: support@flourish-academy.org
Address: 513 Carnaby Ct, Bossier City, LA 71111
For privacy-specific requests, write "Privacy Request" in the subject line.