Privacy policy

Responsible for processing personal data in this app is:

Wertwandler GmbH
Hofmattstrasse 6
4900 Langenthal
Switzerland
Email: hallo@wertwandler.ch

Please direct data protection questions to the email address above. We have not appointed a data protection adviser within the meaning of Art. 14 FADP.

FlowCheck is operated for client organizations. Several roles need to be distinguished:

• Wertwandler GmbH is the controller for the data arising from operating the platform itself (accounts, technical data) and the processor for the data entered by client organizations.
• Client organizations (who set up the survey) are responsible for processing employee data within the scope of their mandate. We process this data on their behalf.
• Employees / respondents answer for themselves. Their answers are anonymized; attribution to their person is not provided for.

Where a client organization involves people in the EU/EEA, the GDPR may additionally apply; we support our clients here through the data processing agreement.

a) Technical data (all users)

When you visit the app, the hosting provider automatically processes technical data (e.g. IP address, browser type and version, operating system, device type, referrer URL, date and time, pages visited). This serves technical operation, security and stability. The app is hosted on the Lovable platform (see section 6).

b) Account data (organizers and platform users)

If you create an account and use the platform, we process:

• name and email address,
• login and authentication data,
• your role and access permissions (e.g. administrator, facilitator, viewer),
• settings and activity data within the platform.

c) Organization and survey data (clients)

To set up and run surveys we process on behalf of the client organization:

• organizational structure (organizations, divisions, teams),
• questionnaire templates and their content,
• survey runs (period, target groups, status),
• personal invitation data (name and email address of respondents), where the client organization enters it.

d) Response data of respondents (anonymous)

Respondents answer surveys through a personal link without an account of their own. We process:

• the answers (Likert scale and, where applicable, free-text answers),
• a random personal token that links the submission to the relevant survey.

Answers are recorded anonymously: attribution to a person is not provided for, neither for the organizer nor for us. Reports show aggregate values only (averages, distributions, trends) and are released only once a defined minimum number of responses is reached, in order to protect confidentiality. Free-text answers are evaluated qualitatively and never attributed to individuals.

e) AI-assisted features

FlowCheck can use AI features (e.g. translation or copilot assistance) that run through providers such as Google Gemini. Content submitted for this purpose (e.g. questionnaire content or text answers) may be transferred to that provider for processing. This use is optional and happens when the feature is activated. Specifically, FlowCheck uses AI for the translation of questionnaire content and for the copilot (wording and quality support when writing questions). The privacy policies of the respective AI providers apply.

f) Sending email

To invite respondents and communicate with users, the app can send emails (e.g. invitation or reminder emails). Email addresses are transmitted to the sending service (e.g. Mailgun) for this purpose.

Legal bases: for operation and account management we rely on the usage relationship (contract) and on our legitimate interest in secure, functioning operation (Art. 6 FADP; where the GDPR applies: Art. 6(1)(b) and (f)). Processing data on behalf of client organizations is based on the data processing agreement with the respective client. AI features and email sending rely on consent or on contract.

We pass on data only to the extent necessary for operation:

• Lovable Labs Inc. (hosting) and Supabase (database): as processors (see section 6).
• AI providers (e.g. Google Gemini): only when the AI features are used (see section 3e). This may involve a transfer to the USA.
• Email service providers (e.g. Mailgun) for sending invitations.
• To other third parties only where legally required or with your consent.

The platform is hosted on Lovable and uses Supabase (PostgreSQL database and authentication) as its backend. These services process personal data on our behalf. We have concluded a data processing agreement (DPA) with Lovable. Lovable additionally processes so-called service data and log data as its own controller for security, analytics and product purposes in accordance with its privacy policy (lovable.dev/privacy). Supabase stores data in the EU by default. For questions about processing by Lovable: dpo@lovable.dev.

We store data only for as long as necessary for the stated purposes or as long as statutory retention obligations exist:

• Account data: until the account is deleted.
• Organization, survey and response data: for the duration of the collaboration with the client organization or as contractually agreed. After the mandate ends, this data is deleted at the client's request or once an agreed period has expired.
• Technical logs: as specified by the hosting provider (Lovable up to a maximum of 90 days).

FlowCheck currently uses only one functional cookie, which stores the state of the page navigation (sidebar). No tracking cookies are set and no consent banner is required.

Under the FADP (and where applicable the GDPR) you have the following rights:

• right of access to the personal data processed (Art. 25 FADP),
• right to rectification (Art. 32(1) FADP),
• right to erasure (Art. 32(2)(c) FADP),
• right to restriction of processing (Art. 32(2)(d) FADP),
• right to data portability,
• right to withdraw consent given,
• right to object (Art. 30 FADP).

Because answers are anonymized, we cannot provide person-related access or erasure for pure response data; this is intentional, in order to preserve the confidentiality of the surveys. Claims regarding data entered by client organizations must be directed to the respective organization.

An email to hallo@wertwandler.ch is enough to exercise your rights. We usually respond within 30 days. You may also lodge a complaint with the competent supervisory authority (FDPIC, edoeb.admin.ch).

We take appropriate technical and organizational measures, including encryption in transit (SSL/TLS), access control on the database (row-level security), separate invitation tokens and the confidentiality model with minimum response thresholds. Please note that data transmission over the internet can have security gaps; complete protection is not possible.

We may amend this privacy policy at any time. The current version is always available in the app under «Privacy».

As of: 18 August 2026.