Privacy Policy

Effective: May 30, 2026

The short version. Your notes, tasks, and calendar events stay on your computer. AI chat messages go to Anthropic to generate a reply. We store your email and license info if you buy Pro. Anonymous app-open counts and landing-page clicks help us see if anyone's using this. Nothing is sold or shared with advertisers.

What stays on your device

The following data lives in %APPDATA%\FlowSuite\ on your machine and is never sent to us:

Your notes, tasks, and calendar events
App preferences (window position, hotkey, suite size)

We don't back this up. If you uninstall the app, it's gone — export anything you want to keep.

AI chat

When you send a message in the AI chat:

Your message goes to Anthropic via our proxy, which adds your license key and forwards the request unchanged.
If the AI uses a tool (e.g. "search my notes"), the matching notes/tasks/events for that turn are included in the request.
Anthropic's privacy policy applies to anything they receive: anthropic.com/legal/privacy.

Our proxy logs only token counts and license keys — used for billing and free-tier limits. We do not log message content or replies.

Pro subscription

If you buy a Pro subscription:

Stripe handles payment — card details never touch our servers (stripe.com/privacy).
We store your email, license key, subscription status, and billing period to verify Pro in the app.
Resend emails your license key at purchase (resend.com/legal/privacy-policy).
Supabase hosts our license database (supabase.com/privacy).

After cancellation, license and usage records are kept up to 24 months for tax and dispute purposes, then deleted.

Anonymous usage telemetry (opt-out)

If the Send anonymous usage stats toggle in Settings is on (default: on), the app sends an app_opened event with a random install UUID, app version, and OS platform — to PostHog (posthog.com/privacy). No personal info, no note/task/chat content. Toggle it off in Settings to stop sending.

Website analytics

This website uses Vercel Web Analytics and Speed Insights for anonymous, cookie-less page-view counts and load timing (vercel.com/legal/privacy-policy). We also log download-button clicks (event name, button location, user-agent, referrer) to our Supabase database to see which CTAs convert. No cookies, no cross-site tracking. Stripe may set its own cookies on the checkout flow.

Your rights

Disable telemetry any time in Settings.
Cancel Pro any time from the Stripe customer portal link in your receipt.
Request a copy or deletion of your license record by emailing us — we respond within 30 days.

Children's privacy

FlowFloat isn't directed at children under 13 and we don't knowingly collect their information. If you believe a child has, contact us and we'll delete it.

Changes & contact

Material changes will be posted here with an updated effective date. Continued use means you accept the update.

Questions or data requests: roshaanthedev@gmail.com.