This policy is written in plain English for clarity and is not a substitute for legal advice.

Summary

Flows records the time you spend in each flow you've set up, nothing else. Your data is stored on your device and, if you have iCloud enabled, synced to your own iCloud account. We have no server of our own; we cannot see your data and we do not sell it. Flows does not track which apps you use, does not access your contacts or location, and does not include any analytics or advertising SDK. The only third-party service that touches your data is Apple, through iCloud sync and the App Store's built-in crash reporting.

1. What data Flows collects

Stored on your device

• Flow entries: the name of each flow you start, the time you started it, and the time you switched away from it.
• Corrections: a log of any manual edits you make (moving time between flows, reassigning segments).
• Your flow configuration: the names, colours, and order of the flows you've created.
• App settings and preferences.

Synced to iCloud (if you have iCloud enabled)

The same data listed above is synced to your iCloud account via CloudKit, Apple's sync framework. This data lives in your iCloud account, not ours. We have no access to it. Apple's handling of this data is governed by Apple's iCloud Privacy Policy.

Crash reports (via Apple)

If Flows crashes, Apple's App Store platform may send an anonymised, aggregated crash report to us through App Store Connect. These reports contain no personally identifiable information, only the device model, iOS version, and a stack trace of what the app was doing at the time of the crash. No third-party crash reporting SDK is installed in Flows.

Nothing else. See the next section for a full list of what Flows does not collect.

2. What data Flows does not collect

• Which apps you use or how long you spend in them (Flows has no screen-time permissions)
• Your location
• Your contacts
• Your calendar or reminders
• Any health or biometric data
• Your name, email address, or any account information (Flows has no sign-in of its own)
• Browsing history or web activity
• Any usage analytics from a third-party SDK. The only analytics we receive are the default, aggregated, anonymised metrics that Apple provides to all developers through App Store Connect (app installs, sessions, crashes, etc.); these are produced by Apple and do not identify you.

3. Where data is stored and for how long

On your device: Data remains on your device for as long as the app is installed. Deleting the app removes all locally stored data.

In iCloud: If iCloud sync is enabled, your data is stored in your iCloud account on Apple's servers. Apple operates iCloud and CloudKit on a global infrastructure that includes data centres in the United States, the European Union, and other regions; current locations and sub-processors are published by Apple in their privacy documentation. You can delete your Flows data from iCloud at any time by going to Settings → [your name] → iCloud → Manage Account Storage → Flows → Delete Data.

Retention: We do not have a server, so we do not set a retention period. Your data persists in iCloud for as long as your iCloud account is active and Flows data has not been deleted.

4. Third-party services

Flows uses the following third-party services:

Flows does not use Google Analytics, Firebase, Mixpanel, Amplitude, Segment, Sentry, or any other third-party analytics or crash reporting SDK.

In-app purchases

Flows is a paid app with subscriptions and a one-time lifetime purchase, all handled by Apple's App Store using In-App Purchase. We never see your payment card, your Apple ID, or your billing address. Apple processes the transaction and tells the app, on-device, whether you have an active entitlement.

Flows reads your purchase status from Apple's StoreKit framework on your device. This includes the product you bought, the purchase date, the expiry date (for subscriptions), and any revocation date. This information stays on your device and is used only to unlock the app for you. It is not sent to a server of ours, because we don't have one. Apple's handling of your purchase is governed by Apple's Apple Media Services Terms and Apple's privacy policy.

5. Your rights

Depending on where you live, you may have the right to:

• Access the data we hold about you
• Correct inaccurate data
• Delete your data
• Export your data in a portable format
• Withdraw consent at any time (where processing is based on consent)

Because your data is stored locally and in your own iCloud account, you can exercise most of these rights directly in the app or through Apple's iCloud settings without contacting us.

To make a formal privacy request, email hello@flowsapp.io. We will respond within 30 days.

6. Children

Flows is not directed at children under the age of 13 (or 16 in the European Economic Area). We do not knowingly collect personal data from children. If you believe a child has provided personal data through Flows, contact us at hello@flowsapp.io and we will delete it promptly.

7. Changes to this policy

If we make material changes to this policy, we will update the effective date at the top and, if the changes are significant, notify you through the app or by posting a notice on flowsapp.io. Continuing to use Flows after changes take effect means you accept the updated policy.

8. Contact

Privacy questions, data requests, or concerns:

Flows
hello@flowsapp.io
flowsapp.io

9. Governing law

This policy is governed by the laws of England and Wales. Any disputes will be resolved in the courts of England and Wales.

Effective date: 22 May 2026