LAST UPDATED · SEPTEMBER 20, 2026

Privacy Policy

Flowlo is built to hold your work, not to turn it into advertising data. This policy explains what we collect, why we use it, and the choices you have.

What Flowlo stores

When you create an account, we store your name, email address, account identifier, and sign-in details managed by our authentication provider. Flowlo also stores the work you choose to create: spaces, projects, folders, notes, Flows, todo lists, comments, sharing permissions, theme preferences, and deletion/recovery metadata.

If you use Google to sign in, we receive the basic account information Google provides for authentication, such as your email address and profile name. We do not receive or use your Google password.

How we use your information

• Provide, secure, and maintain Flowlo.
• Sync your work across the web and desktop app.
• Apply the sharing permissions you choose.
• Recover recently deleted content and respond to support requests.
• Investigate abuse, security issues, or service failures.

Local and offline data

The Flowlo desktop app may keep a local cache of recently used work so it remains usable offline and can sync changes when you reconnect. This cache is stored in the app’s local data on that device. Signing out or removing the app may not immediately remove every operating-system backup or cache; use your device’s app-data controls if you need to remove local copies.

Sharing

Flowlo shares content only when you choose to share a space, project, or file. You can grant access by email, link, or code and can revoke access later. Anyone who receives a public view link can view the linked content, so only share those links with people you trust. Locked content cannot be shared.

Service providers

We use service providers to operate Flowlo, including Supabase for authentication and database services and Google when you choose Google sign-in. These providers process data only as needed to provide their services to us. We do not sell your personal information or use your Flowlo content for targeted advertising.

Retention and deletion

Content you delete is placed in Flowlo Trash for up to 30 days before permanent removal, unless you permanently delete it sooner. We retain account and content data while your account is active, subject to legitimate security, legal, and operational needs. You may request account deletion by contacting support@flowlo.me.

Security

We use access controls, encrypted connections, and row-level database permissions designed to limit access to your work. No service can guarantee absolute security. Flowlo’s optional four-digit lock is a convenience privacy wall on the interface; it is not end-to-end encryption.

Your choices

You can update account information, control sharing, export your work, delete content, and contact us to request access, correction, or deletion of personal information. Some features may be unavailable after deletion.

Children

Flowlo is not directed to children under 13, and we do not knowingly collect personal information from them.

Changes and contact

We may update this policy as Flowlo develops. Material changes will be reflected by an updated date on this page. Questions? Contact support@flowlo.me.