FlowShield Privacy Policy

Last updated: 18 October 2026

Who we are

FlowShield is a field-testing app for backflow prevention assemblies, operated by Kanyon LLC, Arizona, United States.

For any privacy question or request, contact support@flow-shield.com.

Who uses FlowShield

FlowShield is a tool for backflow testing businesses and their certified technicians. Two kinds of people appear in it:

• Users. Technicians and company staff who create an account and sign in.
• Customers of those businesses. Property owners and site contacts whose

details a user records so they can service a device.

If you are a property owner and want to know what a testing company holds about you, contact that company. They control that data; we process it for them.

What we collect, and why

Everything below is entered by a user in the course of doing their job, or generated by the app to make that work. We do not buy data, and we do not collect anything for advertising.

| Data | Examples | Why | |---|---|---| | Email address | Your account email; customer contact emails you record | Sign-in, account recovery, contacting a site | | Name | Your display name and certification name; tester, customer and company names | Identifying who performed a test, which a certificate requires | | Phone number | Customer and site phone numbers you record | The in-app call and SMS actions | | Physical address | Customer and device service addresses | Finding the site, and the directions action | | Precise location | GPS coordinates saved on a device record during registration | Pinning where an assembly physically is, so the next technician can find it | | Photos | Device photos, tester avatars, signature images | Evidence on a test record, and signing a report | | Other user content | Valve readings, line pressure, pass or fail results, notes, repair parts | The test record itself, which is the purpose of the app | | User ID | Your Firebase authentication identifier | Linking you to your workspace and enforcing that only members can read it |

Location is only captured when you register a device and choose to use it. The app does not track you in the background and does not record your location during normal use. Denying location permission leaves the rest of the app fully usable.

We do not use advertising or cross-app tracking. We do not include a dedicated advertising or analytics SDK. Google Maps on Android nevertheless collects IP addresses, device/SDK metadata, a pseudonymous Maps identifier, SDK crash diagnostics and map interactions to provide, maintain and improve Google services. Address searches and selected map coordinates are sent to the mapping/address provider when those features are used. Firebase processes account identifiers, IP addresses and request metadata for authentication, security and service operation. These SDK data flows are included in our Google Play Data safety disclosure.

Subscriptions. Apple or Google handles purchases. We use subscription product and purchase status/history to provide paid access; we do not receive your card number or payment account details.

What we do not collect

No payment or card details. No government identifiers. No health data. No contacts, calendar or photo library scanning: when you attach an image, the system picker hands us only the image you chose. No background location. No device advertising identifier.

Legal basis

• Contract. Providing the app to the account holder and their company.
• Legitimate interests. Keeping the service secure and functioning.
• Legal obligation. Retaining completed test records where testing

regulations require it.

• Consent. Camera and location access, each requested at the moment of use

and revocable in iOS Settings at any time.

Where your data lives

FlowShield stores data in Google Firebase (Firebase Authentication, Cloud Firestore and Cloud Storage), project flowshield-7a0bd. Google acts as our processor. Data is stored and processed in the United States, in Google's nam5 multi-region.

The app also keeps a copy on your device so you can work without signal. That copy is removed when you sign out.

Who can see your workspace

Only signed-in members of your workspace. This is enforced on the server by security rules, not just in the app: every read and write checks that you hold a membership record for that workspace. A different company cannot read your data.

We access workspace contents only when you ask us to for support, or where the law requires it.

How long we keep it

While your account is active, we keep your workspace data so you can use it.

Completed test records are kept even after an account is deleted. A backflow test certificate has to name the technician and their certification number to be valid, and testing regulations require the testing company to retain those records. This means a completed report keeps the technician's name and certification number as part of the record, and it is retained for as long as the testing company's regulations require.

Everything that is not part of that regulatory record is deleted with the account.

Deleting your account

You can delete your account inside the app: More → Account → Delete account. You will be asked for your password to confirm it is you.

Deletion completes 14 days after you confirm. During those 14 days you can sign in and cancel it. This window exists so an accidental request can be undone, not to delay your request: nothing is deleted unless you asked for it. We email you when the deletion has completed.

What is removed:

• Your sign-in. You will not be able to sign in with that email again.
• Your profile: display name, saved signature, gauge details, avatar.
• Your workspace membership.

What happens to the workspace:

• If other members remain, the workspace and all its records carry on for

them. Only your account and profile go.

• If you are the last member, the workspace and its records are retained

under the company for the compliance reasons above, and app access ends with your account.

Completed test records are retained in both cases, as described above.

Your rights

Depending on where you live, you may have the right to access, correct, delete or export your data, to object to or restrict processing, and to complain to a supervisory authority.

Most of this is available directly in the app: you can edit your profile, customers and devices, export a customer record as a PDF, and delete your account as described above. For anything else, contact support@flow-shield.com and we will respond within 24 hours.

If you are a property owner rather than a FlowShield user, contact the testing company that holds your details.

Security

Data in transit uses HTTPS. Data at rest is encrypted by Google Cloud. Access is gated by Firebase Authentication and enforced by server-side security rules. Passwords are handled by Firebase Authentication and are never visible to us.

No system is perfect. If you believe your account has been compromised, contact support@flow-shield.com.

Children

FlowShield is a professional tool and is not intended for anyone under 16. We do not knowingly collect data from children.

Changes

If we change this policy we will update the date at the top and, for anything material, tell account holders in the app or by email.

Contact

Kanyon LLC Arizona, United States support@flow-shield.com