Legal

Privacy Policy

Last updated: June 2026

1. Who we are

FlowPilot is a focus timer application developed and operated independently, based in Toulouse, France. If you have any questions about this policy, you can reach us at supportflowpilot@gmail.com.

2. Data we collect

We collect only what is necessary to provide the service:

  • Account data — your email address and, if you sign in with Google, your name and profile picture provided by Google OAuth.
  • Session data — timer sessions you record: title, category, duration, elapsed time, and completion status.
  • Planning data — schedule blocks you create: title, category, day of week, start time, and duration.
  • Preferences — categories, quick timers, sort order, and visual settings (theme, timer style) you configure.
  • Payment data — when you purchase Premium, Stripe processes your payment. We store only your Stripe customer ID; we never see or store your card details.

3. How we use your data

  • To provide and sync the app across your devices.
  • To display your session history and statistics.
  • To verify your Premium status after a one-time payment.
  • To respond to support requests you send us.

We do not use your data for advertising, profiling, or any purpose beyond operating the app.

4. Data processors

We use the following third-party services to operate FlowPilot:

  • Supabase (EU region) — database, authentication, and serverless functions. Your data is stored on Supabase infrastructure. See their privacy policy.
  • Stripe — payment processing for the Premium one-time purchase. Stripe handles all card data under PCI-DSS compliance. See their privacy policy.
  • Google — optional sign-in via Google OAuth. See their privacy policy.

5. Data retention

Your data is kept for as long as your account is active. Free plan accounts have session history limited to the last 7 days; Premium accounts have unlimited history.

When you delete your account, all your data (sessions, categories, schedule blocks, preferences, and profile) is permanently deleted from our systems.

6. Your rights

Under GDPR and applicable law, you have the right to:

  • Access the personal data we hold about you.
  • Request correction of inaccurate data.
  • Request deletion of your account and all associated data (available directly in the app under Account → Delete account).
  • Export your session data (available in the app as CSV for Premium users).
  • Object to or restrict processing of your data.

To exercise any of these rights, contact us at supportflowpilot@gmail.com.

7. Cookies and tracking

The FlowPilot mobile app does not use cookies or third-party tracking SDKs. This landing page does not use any analytics or tracking scripts.

8. Children's privacy

FlowPilot is not directed at children under 13. We do not knowingly collect personal data from children. If you believe a child has provided us with personal information, please contact us and we will delete it promptly.

9. Changes to this policy

We may update this policy from time to time. If changes are significant, we will notify you by email or through the app. The date at the top of this page always reflects the most recent revision.

10. Contact

For any privacy-related questions or requests, reach us at supportflowpilot@gmail.com.