This Privacy Policy explains what data Flowstate collects and how we use it. We aim to collect as little as possible. Flowstate is operated by Virzy Guns.
1. Data we collect
- Account data: when you sign in, we store your email address and, if provided by Google sign-in, your name and avatar URL.
- Focus data: tasks, timer sessions, and focus analytics (such as session length, fidget counts, and focus ratio) that you generate while using the app, so we can sync them across your devices and show your history.
- Subscription data: your plan status and renewal dates. We do not store your card or payment details: those are handled entirely by our payment processor (see below).
- Technical data: standard server logs and security data (such as rate-limiting records) needed to operate the service securely.
2. How we use your data
We use your data to provide and sync the service, maintain your account and subscription, improve Flowstate, and keep the service secure. We do not sell your personal data, and we do not show third-party advertising.
3. Service providers
- Supabase: authentication and database hosting for your account and focus data.
- Lemon Squeezy, Inc.: our Merchant of Record, which processes payments and handles billing data and taxes. See Lemon Squeezy's privacy policy for details.
- Content delivery network: used to stream audio efficiently. CDN requests may include standard technical metadata such as IP address.
4. Cookies & local storage
We use essential cookies and browser local storage to keep you signed in and to remember your in-app preferences (such as volume, scene, and timer settings). We do not use advertising or cross-site tracking cookies.
5. Data retention & your rights
We keep your data for as long as your account is active. You can request a copy of your data or ask us to delete your account and associated data at any time by emailing us. Deleting your account removes your profile, tasks, and focus history.
6. Security
We protect your data with industry-standard measures, including row-level security on our database, encrypted connections (HTTPS), and strict access controls. No system is perfectly secure, but we work to keep your information safe.
7. International users
Flowstate is operated from Indonesia and uses service providers that may process data in other countries. By using Flowstate you consent to this transfer and processing.
8. Changes
We may update this policy; the "last updated" date above reflects the latest version. For questions or data requests, contact founder@virzyguns.com.