Privacy Policy

1. Information We Collect

1.1 Information You Provide Directly

• Account Information: When you create a profile, we collect your name. This is stored locally on your device and is not transmitted to our servers.
• App Content: Goals, habits, flows, daily check-ins, and streak data that you create within the App are stored locally on your device. We do not upload, access, or store this content on our servers.
• Onboarding Responses: When you answer onboarding questions (such as your goals, struggles, or commitment level), your selections from the predefined options are sent to our analytics provider to help us understand and improve the onboarding experience. We do not send any free-text input — only metadata such as the length of text you entered and which predefined options you selected.

1.2 Information Collected Automatically

• Analytics Data: We use PostHog, a product analytics platform, to collect data about how you interact with the App. This includes event data such as which onboarding screens you view, how long you spend on each screen, which buttons you tap, which multiple-choice options you select, whether you complete or abandon onboarding, paywall interactions, subscription purchases, and notification permission responses. Each event is accompanied by an anonymous identifier, a per-session identifier, app version, platform (iOS or Android), device model, OS version, locale, and timestamp.
• Subscription Data: We use RevenueCat to manage subscriptions. RevenueCat receives transaction data including product identifiers, purchase dates, and subscription status. We do not receive or store your full payment card details — payments are processed securely by the Apple App Store or Google Play Store.
• Device Information: We collect non-personal device information such as device model, operating system version, and app version to ensure compatibility, diagnose technical issues, and include as context in analytics events.

1.3 Information We Do NOT Collect

• We do not collect your precise location.
• We do not access your contacts, photos, or other personal files.
• We do not track your activity across other apps or websites.
• We do not sell, rent, or trade your personal information to third parties.
• We do not send the contents of free-text fields (such as your name, goal titles, or flow names) to our analytics provider. Only metadata such as input length is transmitted.

2. How We Use Your Information

We use the information we collect for the following purposes:

• To provide and maintain the App: Ensuring the App functions correctly and delivers the features you expect.
• To improve the App and onboarding experience: Analyzing onboarding funnels, screen completion rates, option selections, and drop-off points to refine and enhance the user experience.
• To measure and optimize conversions: Tracking paywall impressions, plan selections, trial starts, and subscription purchases to understand which plans and messaging resonate with users.
• To conduct A/B testing: Assigning users to experiment variants to compare different onboarding flows and measure which performs better.
• To communicate with you: Sending notifications you have opted into (such as streak reminders and flow nudges). You can control these in Settings at any time.
• To ensure security: Detecting and preventing fraudulent or unauthorized activity, including monitoring for API errors and validation issues.

3. Data Storage and Security

3.1 Local Storage

Your goals, habits, flows, streaks, and profile data are stored exclusively on your device. We do not maintain a cloud database of your personal content.

3.2 Analytics Storage

Analytics events are sent to PostHog (hosted in the United States) and stored on their servers. PostHog retains event data according to their data retention policy. Your analytics data is associated with an anonymous identifier that persists across sessions, not with your name or email.

3.3 Subscription Data Storage

Subscription and transaction data is managed by RevenueCat and the respective app stores. RevenueCat stores this data on their servers to verify subscription status and enable features like cross-device restore.

3.4 Security Measures

We implement appropriate technical and organizational measures to protect your information against unauthorized access, alteration, disclosure, or destruction. However, no method of electronic storage is 100% secure, and we cannot guarantee absolute security.

4. Third-Party Services

4.1 PostHog (Analytics)

We use PostHog to collect and analyze product analytics data. PostHog receives event data (event name, timestamp, and properties) along with an anonymous identifier, session identifier, and device/app context. PostHog's privacy policy is available at posthog.com/privacy. We use PostHog to build funnels, retention reports, cohort analyses, and conversion dashboards. PostHog does not receive your free-text inputs, your name, your goals, or your habits — only structured event metadata.

4.2 RevenueCat (Subscriptions)

We use RevenueCat to manage subscriptions and process payments. RevenueCat may collect transaction-related data (product IDs, purchase dates, subscription status, and app user identifiers) as described in their privacy policy at revenuecat.com/privacy. We do not receive or store your full payment card details — payments are processed securely by the Apple App Store / Google Play Store. RevenueCat also receives paywall impression data so that conversion funnels and A/B tests function correctly.

4.3 Apple App Store / Google Play Store

Subscription payments are processed by Apple or Google through their respective store platforms. Their privacy policies govern the collection and use of your payment information.

5. Your Rights and Choices

5.1 Access and Control

• You can view and edit your profile information at any time within the App.
• You can delete any goal, habit, or flow you have created.
• You can reset or clear all local data by uninstalling and reinstalling the App.

5.2 Opting Out of Analytics

Analytics data collection is essential for improving the App and cannot be individually disabled within the App. However, because we do not link analytics events to your personal identity (they are associated with anonymous identifiers), the data collected cannot be used to identify you personally. If you wish to stop analytics collection, you may uninstall the App.

5.3 Notifications

You can manage notification preferences (streak warnings, flow reminders, goal nudges, quiet hours) in the App's Settings at any time.

5.4 Children's Privacy

The App is not intended for use by children under the age of 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, please contact us so we can delete it.

6. Data Retention

• Local data: Your goals, habits, flows, and profile data remain on your device until you delete them or uninstall the App.
• Analytics data: PostHog retains event data according to their configured retention period. Anonymous identifiers persist across sessions to enable funnel and retention analysis.
• Subscription data: RevenueCat retains transaction data for as long as needed to manage your subscription and enable restore functionality.

7. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new Privacy Policy within the App and updating the effective date. Your continued use of the App after any changes constitutes acceptance of the updated policy.

8. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy, please contact us at:

Email: app.flowstateofficial@gmail.com

We will respond to your inquiry as promptly as possible.