Flowa Privacy Policy Last updated: July 3, 2026

1. Introduction Welcome to Flowa. We respect your privacy and are committed to protecting your personal data. This policy explains how we collect, use, and safeguard your information when you use our application and browser extension.
2. Data We Collect If you create an account and use cloud synchronization, we securely store the following data:

Identity & Profile Data: Email address, name, and onboarding preferences.
Workspace Data: Projects, tasks, subtasks, notes, and calendar events.
Productivity Data: Pomodoro sessions, timer logs, streaks, and analytics.
App Preferences: Your settings, custom plugins, and notification preferences.
Technical & Security Data: Login metadata and audit logs for account security.
We do NOT track your keystrokes, sell your data to third parties, or use your workspace data for advertising.

1. How We Use Your Data Your personal data is used only to:
   Provide and maintain the Flowa service, including cloud sync.
   Personalize your experience based on your focus preferences.
   Notify you about updates, features, and security issues (with your consent).
   Monitor service health and prevent fraud or abuse.
2. Data Storage & Security All data is stored securely on Appwrite Cloud infrastructure with end-to-end encryption at rest and in transit. Access to your data is strictly controlled via document-level permissions — no other user can access your data.
3. Third-Party Services We use a minimal set of trusted third-party services:
   Appwrite Cloud: Backend infrastructure and secure data storage.
   Razorpay: Payment processing for subscriptions (for Indian users). We do not store your card or payment details; all payment data is handled by Razorpay under their own PCI-DSS compliant systems.
4. Your Rights (GDPR) Under the General Data Protection Regulation (GDPR) and other applicable privacy laws, you have the right to:
   Right to Access & Portability (Art. 20): Access and export your personal data in a structured format.
   Right to Rectification (Art. 16): Request correction of inaccurate personal data.
   Right to Erasure (Art. 17): Request permanent deletion of your account and all associated data ("Right to be Forgotten").
   Right to Withdraw Consent (Art. 7): Withdraw consent for optional data processing at any time.
5. Flowa Browser Extension If you use the optional Flowa Focus browser extension, the following additional privacy terms apply:
   Website Permissions: The extension requires permissions to view URLs solely to detect when you navigate to a distracting website so it can block the page locally during focus sessions.
   No Browsing History Collection: We do NOT track, collect, transmit, or store your browsing history, the URLs you visit, or your search queries. The domain blocking happens entirely locally on your device.
   Data Transmitted: The extension only transmits your timer status (start, pause, skip) and your chosen blocklist preferences to the Flowa servers in order to sync your focus sessions across your devices.
6. Cookies and Local Storage
   We use essential cookies and browser Local Storage to keep you securely logged in and to remember your environment preferences (such as theme and layout). We do NOT use third-party tracking, analytics, or advertising cookies. Because our cookies are strictly necessary for the application to function, we do not require a complex consent manager, though we do display a notification on your first visit.