Privacy policy

Last updated [Effective date]

Short version: we keep what we need to run Flowday and to do what you ask: your account, the projects you share, and with Pro, what you sync between your devices. We don't sell your data, show ads or track you.

Who we are

Flowday is made by [Company legal name], [Registered address] ("we"). Questions about privacy: [privacy@yourdomain].

If you use Flowday without an account

Your tasks, notes, projects, habits and settings are saved in your browser or in the desktop app on your computer.

If you connect GitHub, the access token you enter stays on your device. If you add a calendar link, Flowday fetches that calendar directly.

If you create an account

Account details: your email address, your name if you give one, and your password, which we store only as a secure hash.

What you share or sync: on Free, the projects you share (their tasks, notes and money entries). With Pro, also what you sync between your devices: tasks, projects, notes and folders, tags, habits, money entries, calendar links and their events, settings and items in your trash. We keep earlier versions of these so we can restore them if something goes wrong.

Device: on Free, a random id for the one device that syncs your shared projects.

Shared projects: the people you share a project with can see its tasks, notes and money entries, and your name and email.

Feature votes: ideas and comments you post, and your name, are visible to other Flowday users. Your vote in a round is not shown to others.

Security records: we use your IP address to limit repeated sign-in attempts and to protect the service.

Payments

Payments are handled by our payment partner, Razorpay. They receive your payment details; we do not. We receive your plan, its renewal date, your country and the country of your card (to apply the right price). When you start a checkout, we check your IP address with a VPN-detection service for the same reason.

Who processes data for us

Hosting: [server and database provider, region] and Cloudflare (website, downloads and network). Payments: as above. Email: Resend, to send account emails (confirming your email, password resets, trial reminders). VPN check at checkout: proxycheck.io. Each acts only on our instructions.

How long we keep it

We keep your account data while your account exists. When you delete your account, we delete your data within 30 days, and it leaves our backups within a further 30 days. We keep payment records as long as tax law requires.

Your rights

You can export everything from Settings at any time. You can ask us to correct or delete your data, or tell you what we hold, by writing to [privacy@yourdomain]. We answer within 30 days. If you are in the EU, UK or India, you can also complain to your data protection authority.

Children

Flowday is not for children under 13, or under 16 in the EU.

Changes

If we change this policy in a way that matters, we will tell you in the app or by email before it takes effect.