Name: FlowE
Author: FlowE

1. Introduction

Welcome to FlowE ("FlowE," "we," "us," or "our"). FlowE is a productivity and task management application designed for college students, graduate students, and adult learners. Our app helps you organize tasks, sync academic calendars, coordinate with family or household members, and stay motivated through gamification.

This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use the FlowE mobile application and related services (collectively, the "Service"). Product analytics start when you first open FlowE and can be disabled at any time in Settings → Privacy. The change takes effect immediately for future events.

If you have any questions or concerns about this policy, please contact us at support@flowe.cc.

2. Information We Collect

We collect information in the following categories:

a) Account Information

When you create an account, we collect:

Email address
Full name
Profile information (e.g., school level, role selection)
Authentication credentials managed through our authentication provider (Clerk)

b) Canvas Integration Data

If you choose to connect a Canvas LMS account, you select your school or enter its Canvas address. FlowE first tries Canvas's mobile authorization flow. If that service is unavailable for the selected site, FlowE may open the school's Canvas sign-in page inside the app and use the resulting authenticated Canvas web session. Neither path requires you or your school to provide FlowE with an institution developer key.

Canvas mobile authorization for courses, assignments, submission state, and grades available to your Canvas account
An authenticated Canvas web session when mobile authorization is unavailable for the selected Canvas site
An optional read-only Canvas calendar feed for assignment and calendar dates; it does not provide grades or submission state

Depending on the connection method, we may access:

Course names, sections, and course metadata
Assignments, due dates, scheduling details, and calendar events
Submission status and related assignment state
Grade summaries, score information, and assignment grouping metadata

FlowE uses this data for academic planning inside the app, including task creation, calendar views, due date tracking, course organization, and grade-awareness features. Imported Canvas academic data stays in account-scoped storage on your device. FlowE does not upload Canvas courses, assignments, submission state, grades, or Canvas credentials to its backend, analytics provider, or AI provider. The exact data available depends on the connection type and your Canvas site's configuration.

c) Google Calendar Data

If you choose to connect Google Calendar, FlowE requests read-only access to the calendars you select and may access calendar names, event titles, descriptions, dates, times, locations, attendee details, recurrence information, and availability needed to show and organize your schedule inside FlowE.

FlowE's use and transfer of information received from Google APIs complies with the Google API Services User Data Policy, including its Limited Use requirements. We use Google Calendar data only to provide or improve the user-facing calendar import and planning features you request. We do not use Google Calendar data for advertising, cross-app tracking, data brokerage, creditworthiness or lending decisions, unrelated analytics, or training general-purpose AI models. We do not allow humans to read this data except with your affirmative consent for a specific support purpose, when necessary for security or abuse investigation, or when required by law. We do not sell Google user data or transfer it to third parties except service providers acting on our behalf to provide or secure the requested feature, or as otherwise permitted by the Limited Use requirements.

d) Task and Productivity Data

As you use FlowE, we store:

Tasks, projects, and events you create
Tags, categories, and organizational preferences
Focus timer session data
Schedule and routine preferences

e) Family Coordination Data

If you use family features, we collect:

Shared tasks and events between family members
Family member display names and roles
Family group membership information

f) Gamification Data

FlowPoints earned and spent
Achievement and badge progress
Levels, streaks, and leaderboard standings

g) Usage Analytics

Starting when you first open FlowE, we collect pseudonymous product analytics through PostHog unless you have disabled analytics in Privacy settings, including:

Feature usage patterns (e.g., which screens you visit, which features you use)
App lifecycle, version, operating-system, and device-model information
Performance and diagnostic context such as load times and error categories
Session duration and frequency

Before sign-in, analytics use a pseudonymous installation identifier. After sign-in, FlowE associates analytics with your FlowE account identifier so we can understand onboarding, reliability, and feature use across sessions. We do not send your name, email address, Canvas content, task content, or calendar content to PostHog, and we do not use analytics for advertising, data brokerage, or tracking you across other companies' apps or websites. You may opt out at any time through Settings → Privacy; future events stop immediately. FlowE resets the analytics identity when you sign out.

h) Device Information

We collect limited device information needed for compatibility, notifications, security, and debugging, including operating system version, device type, app version, and a push-notification token if you enable notifications.

i) AI Feature Data

When you choose an AI-powered feature, the text or structured context needed for that request and the generated response are processed by FlowE's backend and an AI model provider. Do not submit passwords, authentication codes, financial credentials, or other information you do not want processed for that feature.

3. How We Use Your Information

We use the information we collect for the following purposes:

Provide Core Functionality: To operate FlowE, including task management, calendar views, and focus timers.
Sync Canvas Academic Data: To import and update course, assignment, due date, calendar, submission-state, and grade-summary information supported by your Canvas connection.
Import Google Calendar Data: At your request, to read selected calendars and events and display them in FlowE's schedule and planning features.
Enable Family Coordination: To allow shared tasks and events between family members.
Track Gamification Progress: To calculate FlowPoints, achievements, levels, streaks, and leaderboard positions.
Improve the App: To understand onboarding and feature use, measure reliability, and fix bugs; you can opt out at any time in Privacy settings.
Send Notifications: With your permission, to send reminders and updates.
Provide AI-Powered Features: To offer task suggestions, time estimates, and schedule optimization.
Authenticate Your Identity: To verify your account and manage sessions.
Communicate With You: To respond to support requests and service announcements.

5. Data Storage & Security

Backend: Convex with encryption at rest and access controls.
Encryption in Transit: HTTPS using supported TLS connections.
Canvas Academic Data: Imported Canvas courses, assignments, due dates, submission state, grades, and related academic metadata stay in account-scoped app storage on your device. FlowE does not store this content in Convex.
Canvas Mobile Authorization: Canvas access tokens, refresh tokens, and per-site mobile authorization configuration stay in iOS Keychain. FlowE's backend does not receive them.
Canvas Web Sessions: When the mobile authorization service is unavailable, the authenticated session stays in WebKit website data and iOS Keychain on your device. FlowE does not collect your Canvas password.
Canvas Calendar Feed: If you choose the limited calendar-feed option, its private URL stays in iOS Keychain.
Google Calendar Credentials: Google access and refresh tokens are stored in iOS Keychain. Disconnecting Google Calendar or signing out removes FlowE's local Google credentials; you can also revoke FlowE from your Google Account permissions.
Authentication: Clerk with session management and OAuth 2.0.
Access Controls: Account data is protected by server-side authorization. A limited set of invitation, referral, support, or integration endpoints may be public and are separately restricted.

No method is 100% secure, but we use commercially reasonable safeguards.

6. Your Rights

You have the following rights regarding your personal data:

a) Access Your Data

View and export the portable app-data categories listed in Settings → Privacy & Data. For a broader privacy access request, including applicable provider-held analytics, support, security, or operational records, contact support@flowe.cc.

b) Delete Your Data

Disconnect Canvas to remove its imported academic data, tokens, and saved authenticated session from the device. Request FlowE account deletion via Settings → Account → Delete Account or contact support. We remove active account data through our deletion process; limited records may remain where required for security, legal compliance, dispute resolution, or a service provider's bounded backup cycle.

c) Export Your Data

The self-service file at Settings → Privacy & Data → Export My Data contains your portable FlowE content, settings, selected account records, and eligible account-owned on-device Canvas data. It is not represented as a complete statutory access-response package. Contact support@flowe.cc for a broader request.

d) Opt Out of Analytics

Disable via Settings → Privacy & Data → Data Collection.

e) Correct Your Data

Update profile in-app or contact support@flowe.cc.

7. Data Retention

Active accounts: Retained while needed to provide the Service and maintain your account.
Deleted accounts: Removed from active product systems through our deletion process; bounded backup, security, and audit records expire under provider retention schedules unless law requires longer retention.
Canvas academic data: Stored on your device until you disconnect Canvas or delete your FlowE account.
Analytics: Pseudonymous analytics are retained according to our configured analytics retention and are subject to your opt-out and applicable deletion rights.
Legal obligations: Limited records may be retained where required for legal compliance, fraud prevention, security, or dispute resolution.

8. Children's Privacy

FlowE requires account holders to be at least 18. App Store ratings may display differently by operating-system version or region. FlowE is not directed to children under 18. We do not knowingly collect information from anyone under 18.

If we learn that an ineligible minor provided personal information, we will take appropriate steps to remove it. Contact support@flowe.cc to report a concern.

9. Changes to This Policy

We may update this policy. For material changes:

We will update the effective date.
We will notify you via push notification or in-app notice.
We will provide at least 30 days' notice.

Continued use after changes constitutes acceptance.

10. Contact Information

Email: support@flowe.cc
Privacy: privacy@flowe.cc

We respond to privacy inquiries within 30 days.

Privacy Policy