Privacy Notice

Incident Flow is operated by Nowetner Manufacturing. For the personal data described in this notice, Nowetner Manufacturing is the data controller — we decide why and how your data is processed.

• Account data — name, email address, login credentials, department, position, and phone number;
• Form content — the ICS forms, vehicle inspections, photos, and notes you enter or upload;
• Support messages — when you contact us;
• Usage and device data — basic telemetry, device identifiers, and IP address used to keep the service secure and working.

Payment card details are collected and processed by Paddle (our Merchant of Record), not by us.

• Providing the service — creating your account, storing and displaying your forms, sharing submissions with your department's supervisors (performance of our contract with you);
• Security and fraud prevention — protecting accounts and department data (legitimate interests);
• Product improvement — understanding how the app is used so we can fix and improve it (legitimate interests);
• Customer support — responding to your requests (performance of contract / legitimate interests);
• Legal obligations — where we must keep or disclose records by law.

• Service providers — hosting, database, authentication, and analytics providers that process data on our behalf;
• Paddle — our Merchant of Record, for the sale of subscriptions, payment processing, tax compliance, and invoicing;
• Your department — supervisors in your department can see submissions and membership as described in the app;
• Professional advisers — legal and accounting, where needed;
• Authorities — where required by law.

We keep your data for as long as your account or your department's subscription is active, and as long afterwards as needed for legal, accounting, or dispute purposes. When data is no longer needed, it is deleted or anonymised.

Depending on where you live, you may have the right to access, correct, delete, restrict, or port your personal data, to object to certain processing, and to withdraw consent where processing is based on consent. To exercise any of these rights, contact us via the support email shown in the app. You also have the right to complain to your local data protection authority.

We use appropriate technical and organisational measures to protect your data, including encryption in transit, access controls, and row-level access rules so departments can only see their own data.

The app uses essential cookies and local storage only — to keep you signed in and remember your session. We do not use advertising or marketing cookies.