Privacy Policy

This Privacy Policy explains what information FlowMode ("FlowMode," "we," "us," or "our") collects when you use our website, web app, and Android/iOS applications (together, the "Service"), why we collect it, who we share it with, and the choices and rights you have over it.

FlowMode is operated by Lifemaxxing LLC, a Florida limited liability company doing business as FlowMode. By creating an account or otherwise using the Service, you agree to the practices described in this policy. If you do not agree, please do not use the Service.

1. Information We Collect

Account information

• Email address, used for authentication and account-related communications
• Password, stored by our authentication provider (Supabase) as a salted hash — we never see or store your plain-text password
• If you sign in with Google, the basic profile information Google shares with us (name, email address, profile photo)
• An optional display name and any other profile settings you choose to provide

Productivity and usage data

• Tasks, categories, and time entries you create, including start/end times, durations, and any free-text notes you attach to a session
• Goals, timeblocks, checklists, habits, and streak/progress data
• Focus Mode and Pomodoro session data, including optional distraction counts you log
• App preferences and settings (theme, language, notification settings, and similar)

Wellness data (mood & energy tracking)

If you use FlowMode's optional mood and energy check-ins, we store your self-reported mood rating, energy rating, and any note you attach. This is information you choose to self-report inside a productivity app — it is not medical, clinical, or diagnostic data, and FlowMode is not a healthcare product. See Section 9 ("No Medical or Professional Advice") for important limitations on how this data is used.

AI Coach data (opt-in, Flow plan)

If you enable the AI Coach / Weekly AI Report feature, we send a summary of your activity — time totals, streaks, top task names, goal progress, mood/energy averages, distraction counts, and, if you use the coaching chat, the free-text messages you send — to Anthropic (the maker of the Claude AI models) so it can generate your report or chat response. See the dedicated section below for details.

Google Calendar data (opt-in)

If you connect Google Calendar, we request access limited to calendar events (not your full calendar or other Google data) so we can create, update, and remove calendar events that mirror your FlowMode timeblocks. We store the OAuth access and refresh tokens needed to maintain that connection. See the dedicated section below for details.

Biometric app-lock

If you enable fingerprint or face unlock to lock the app, that verification happens entirely through your device's operating system (Android Biometric API or WebAuthn in a browser). FlowMode never receives, transmits, or stores any biometric data. We only store a local yes/no flag on your device indicating that you've enrolled — nothing is sent to our servers.

Subscription and billing data

FlowMode's paid plans (Pro and Flow) are billed through Google Play Billing or the Apple App Store and processed via RevenueCat. We receive subscription status, plan tier, and purchase-event metadata from RevenueCat — we never receive or store your card number or other raw payment details; those are handled entirely by Google/Apple and RevenueCat under their own privacy and security practices.

Technical data

• Device and browser type, for compatibility and troubleshooting
• IP address, used only transiently for rate-limiting and abuse prevention — it is not written to any database or persistent log
• Minimal server request logs (HTTP method, path, status code, response time) — we do not log request bodies, headers, or IP addresses in these logs

2. How We Use Your Data

• To provide, operate, and maintain the Service — including your dashboard, reports, goals, and widgets
• To authenticate your account and keep it secure
• To generate the AI Coach reports and chat responses you opt into
• To sync your timeblocks with Google Calendar, if you've connected it
• To process subscription purchases, renewals, and cancellations
• To send transactional email (password resets, account confirmations, and — if you contact us — replies to your message)
• To diagnose technical issues, prevent abuse, and keep the Service secure
• To comply with legal obligations

We do not sell your personal information, and we do not use your data for advertising or share it with data brokers or marketing third parties. We only disclose data to the specific service providers described in this policy, strictly so they can help us operate the Service.

3. The AI Coach and Anthropic

FlowMode's AI Coach and Weekly AI Report features (available on the Flow plan) are opt-in — they only run if you turn the setting on. When they run, we send Anthropic a summary of your relevant activity for that period — which may include task names, time totals, streaks, goal progress, mood/energy averages, distraction counts, and (for the coaching chat) the messages you type — so Anthropic's Claude models can generate a report or reply.

Anthropic processes this data solely to generate the requested output on our behalf, under FlowMode's commercial API agreement with Anthropic, and does not use data submitted through that API to train its models. We do not send this data to any other AI provider, and we do not use it for advertising.

Weekly reports and coaching-chat history are stored in your account until you delete them yourself from within the app; deleting a conversation removes it from our systems.

4. Google Calendar and Google User Data

If you connect Google Calendar, FlowMode requests only the calendar.events OAuth scope — enough to create, read, update, and delete events we create on your calendar. We do not request access to your Gmail, contacts, files, or any other Google data.

We store your Google OAuth access and refresh tokens so the connection keeps working without asking you to sign in again. You can disconnect Google Calendar at any time from Settings, which stops any further sync and removes the stored tokens; you can also revoke FlowMode's access directly from your Google Account's third-party access page.

FlowMode's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

5. Accountability Partner (Public Sharing Links)

The Accountability Partner feature (Flow plan) lets you generate a shareable link that shows a snapshot of your progress — your display name, current streak, tracked hours for the period, a top goal, and your average mood — to anyone you send it to.

• This feature is entirely opt-in. Nothing is shared unless you generate a link yourself.
• The link uses a long, unguessable token. Anyone who has the link can view the page — it does not require them to log in or have a FlowMode account. Treat the link like you would any other unlisted-but-not-private URL: don't post it somewhere public if you don't want a wider audience to see it.
• You can generate a new link at any time, which immediately invalidates the old one, or revoke sharing entirely from Settings — both take effect immediately.

6. Data Storage and Security

Your account and productivity data is stored via Supabase (PostgreSQL), encrypted at rest (AES-256) and in transit (TLS). Our backend runs on Railway and our web frontend on Vercel.

We take reasonable technical and organizational measures to protect your information, including encryption in transit, hashed passwords, and access controls on our infrastructure. No system is 100% secure. If you believe your account has been compromised or you suspect a security issue, please contact us immediately at the email below.

7. Third-Party Service Providers

We work with a small, deliberately limited set of service providers, each acting as a processor strictly to help us run the Service:

• Supabase — database and authentication infrastructure
• Railway — backend server hosting
• Vercel — frontend hosting
• Google — Sign-In (authentication) and, if you connect it, Calendar sync (see Section 4)
• Anthropic — AI Coach report and chat generation, opt-in only (see Section 3)
• RevenueCat — subscription and purchase management
• Resend — transactional email delivery (account emails and replies to feedback you send us)
• Google Fonts — font delivery, which may log your IP address per Google's own privacy practices

Each provider has its own privacy policy governing how it handles data on our behalf. We do not permit any of these providers to use FlowMode user data for their own advertising or marketing purposes.

8. Cookies and Local Storage

FlowMode does not use third-party advertising cookies, tracking pixels, or cross-site analytics of any kind. We use your browser's or device's local storage to keep the app working smoothly:

• Your authentication session (so you stay signed in)
• Interface preferences — theme, language
• A randomly generated device identifier used only to enforce single-device sign-in on paid plans — this is not an advertising or cross-app tracking identifier and is never used to profile you
• A hashed PIN and/or a flag indicating biometric app-lock is enrolled (see Section 1)

9. No Medical or Professional Advice

FlowMode, including the mood/energy tracker and the AI Coach, is a personal productivity tool. It is not a medical device, and it does not provide medical, mental-health, psychological, financial, or legal advice or diagnosis. AI-generated content may be incomplete or inaccurate and should not be relied on as professional guidance. If you are experiencing a mental-health crisis, please contact a qualified professional or your local emergency services rather than relying on the app.

10. Your Rights

Regardless of where you live, you can ask us to access, correct, delete, or export your personal data, or to stop processing it, by contacting us at the email below. We'll respond within 30 days.

If you're in the EEA, UK, or Switzerland (GDPR/UK GDPR)

We process your data on the following legal bases: performance of a contract (running the Service you signed up for), your consent (for opt-in features like the AI Coach, Calendar sync, and Accountability Partner), and our legitimate interests (security, fraud prevention, and improving the Service). Because our service providers are based in the United States, your data is transferred internationally; each provider maintains its own safeguards for these transfers (such as Standard Contractual Clauses) under its respective Data Processing Agreement. You have the right to lodge a complaint with your local data protection supervisory authority.

If you're in California (CCPA/CPRA)

You have the right to know what personal information we collect, to request its deletion, and to request correction of inaccurate information. FlowMode does not sell or share personal information as those terms are defined under the CCPA/CPRA, so there is nothing to opt out of. We will not discriminate against you for exercising any of these rights.

Exporting your data

You can export your time-tracking data as a CSV at any time from the Reports section of the app. For other data (mood entries, checklists, coaching history, calendar connections, etc.), contact us and we'll provide a full export within 30 days.

11. Data Retention and Account Deletion

We retain your data for as long as your account remains active. To delete your account, email us at the address below from the email associated with your account. Once we've verified the request, we will delete your account and associated personal data from our systems within 30 days, except for information we're required to retain for legal, tax, or fraud-prevention purposes. (We're working on adding a self-serve "delete my account" option directly in Settings; until then, this email process is the way to do it.)

12. Children's Privacy

FlowMode is not directed at children under 13, and we do not knowingly collect personal information from children under 13. If you are between 13 and 18, you may only use FlowMode with the consent of a parent or legal guardian. If you believe a child has created an account without appropriate consent, contact us and we will delete it promptly.

13. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we'll update the "Last updated" date above, and for material changes we'll make reasonable efforts to notify you (such as by email or an in-app notice). Continued use of FlowMode after changes take effect constitutes acceptance of the updated policy.