Privacy notice

What we store about people

• Account: your email address, name, password hash, and sign-in times. Needed to run your account (contract).
• Activity: which member recorded which change to a batch, with a timestamp. This is the audit history your facility relies on (legitimate interest of the lab and its regulator).
• Website form: what you enter in the “stay informed” form, to contact you about ZebraFlow (consent, withdrawable by asking us).
• Technical: server logs with IP address and browser, kept briefly for security and debugging.

Fish data, racks, batches and breedings are not personal data, but they are your institution’s data and we treat them as confidential.

Where it lives

Data is hosted by Supabase (database and authentication) and Vercel (application) in the European Union, region Ireland. Transactional emails are sent through Resend. These providers act as our processors under data-processing agreements.

How long

Account data for as long as the account exists, and up to 30 days after deletion in backups. Website form entries until you ask us to remove them. Logs for at most 30 days.

Your rights

You can ask for access, correction, export or deletion of your personal data, and object to processing based on legitimate interest, by emailing us. You can also complain to the Belgian Data Protection Authority (Gegevensbeschermingsautoriteit / Autorité de protection des données).

Cookies

The application uses cookies only to keep you signed in and to remember your active lab. The website sets no cookies and uses no analytics.

Demo labs

Opening a demo creates an anonymous, temporary account with no personal data attached; it is deleted with the demo lab after 24 hours.