Privacy Policy

This Privacy Policy explains how Flowstate ("we", "us", "our") collects, uses, and protects your information when you use useflowstate.ai and the Flowstate app (together, the "Service"). If anything here is unclear, email us at sandy@useflowstate.ai.

1. Information We Collect

Account information

When you create an account, we collect your email address and a password (stored as a hash, never in plain text). You may optionally provide your name, industry, and goals.

Subscription and payment information

Payments are processed by Stripe. We receive your subscription status, plan, and billing event history, but we do not receive or store full credit card numbers. Stripe's privacy practices are described at stripe.com/privacy.

Usage and product data

We collect the data you enter into the tracker (daily activity, metrics, notes, habits) and standard product telemetry such as pages viewed, features used, and error logs. This is how we make Sandy coach you and how we improve the product.

Device and log data

Like most web services, we automatically receive IP address, browser type, device type, and timestamps when you use the Service.

2. How We Use Your Information

• To provide and operate the Service (tracker, Sandy, course, dashboard).
• To process subscriptions, refunds, and cancellations.
• To send transactional emails (account confirmations, receipts, support replies, product updates you opted into).
• To improve the product, fix bugs, and develop new features.
• To prevent fraud, abuse, and unauthorized access.
• To comply with legal obligations.

3. Who We Share With

We do not sell your personal information. We share limited data with the following service providers, each of whom is bound by contract to use it only to provide services to us:

• Supabase (authentication and database hosting).
• Stripe (payment processing and subscription management).
• Vercel (web hosting and serverless infrastructure).
• Meta / Facebook and other advertising platforms (conversion tracking via pixel, only if you arrived from one of our ads).
• Analytics providers (aggregated, non-identifying product analytics).

We may also disclose information if required by law, court order, or to protect the rights, property, or safety of Flowstate, our users, or others.

4. Cookies and Tracking

We use cookies and similar technologies to keep you logged in, remember preferences, understand product usage, and measure the performance of our advertising. You can disable cookies in your browser settings, but parts of the Service may not work correctly.

5. Data Retention

We keep your account data for as long as your account is active. If you cancel and delete your account, we remove your personal data within 30 days, except where we are required to retain it for legal, tax, or fraud-prevention purposes.

6. Your Rights

Depending on where you live, you may have the right to access, correct, export, or delete the personal data we hold about you, and to object to or restrict certain processing. To exercise these rights, email sandy@useflowstate.ai.

7. Security

We use industry-standard safeguards (encrypted connections, hashed passwords, access controls) to protect your information. No system is perfectly secure, but we work hard to keep yours safe.

8. Children

Flowstate is not directed to anyone under 18. We do not knowingly collect personal information from minors. If you believe a minor has provided us information, email us and we will delete it.

9. International Users

Flowstate is operated from the United States. If you use the Service from outside the U.S., your information will be transferred to and processed in the U.S., which may have different data protection laws than your country.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We'll post the updated version here and change the "Last updated" date. Material changes will be communicated by email or in-app notice.