Effective date: October 9, 2026
 
Flow ("Flow," "we," "us," or "our") is a productivity app for iPhone, iPad and Mac that brings your email, notes, tasks, and calendar together in one place. This Privacy Policy explains what information Flow accesses, how it's used, and the choices you have.
 
THE SHORT VERSION: Flow is designed to work directly between your device and the accounts you connect (Google and Apple/iCloud). Flow does not operate its own servers that store your emails, notes, tasks, or calendar data. Your content stays with Google and Apple, governed by their own privacy terms, and Flow accesses it only with your permission to display and organize it inside the app.
 
1. INFORMATION FLOW ACCESSES
 
Google Account / Gmail: If you connect a Google account, Flow uses Google Sign-In and the Gmail API to display and let you manage your email inside the app. This may include reading, organizing, composing, or sending messages on your behalf, always at your direction. Your Gmail data is accessed directly from Google's servers to your device each time you use the app. Flow does not copy your email content to a server we operate. Authentication tokens are stored securely in your device's Keychain and are used only to access Google APIs on your behalf. Calendar events are read from and saved to the calendars on your device through Apple's EventKit (see below); Flow does not call the Google Calendar API. To deliver instant mail alerts on iPhone (described below), Flow asks Gmail to send change notifications to a Google Cloud Pub/Sub topic in Flow's own Google Cloud project. Each notification contains only your Gmail address and a change counter, never message content. This needs no Google permission beyond Gmail access and your email address, and Flow does not read your messages.
 
iCloud, Calendar and Reminders: Flow shows events from your device's Calendar app and can import reminders from the Reminders app through Apple's EventKit; an imported reminder becomes Flow's own copy of that task. Your tasks, tags and settings are stored on your device and synced between your devices through your own iCloud account (iCloud key-value storage, and CloudKit when you share a list). Your notes are plain Markdown files stored in Flow's folder in your iCloud Drive. This data is stored and synced under Apple's control, and Flow reads and writes it on your device only after you grant permission.
 
Account and Device Information: Flow may store app preferences and settings locally on your device (and synced via your own iCloud account, if enabled). This is not accessible to us.
 
Contacts, location, microphone and notifications: If you allow it, Flow uses your Contacts to autocomplete email recipients and event attendees, your approximate location to show local weather and (on iPhone) location-based reminders, and the microphone and Apple's speech recognition to turn your voice into a task or event. Flow can also send local notifications for reminders and events. Summaries and reply drafts are generated on your device with Apple Intelligence.
 
Other services your device contacts: To show weather, Flow sends your approximate coordinates to Apple WeatherKit and Open-Meteo. The Today page also fetches a daily quote from ZenQuotes, the featured article from Wikipedia and a word of the day from a free dictionary service. Mail shows sender pictures by requesting a website icon for the sender's domain from Google, and a profile picture from Gravatar and Unavatar using the sender's email address or a hash of it. Place search uses Apple's MapKit. These requests go directly from your device to those services, never include your email content, and are covered by their own privacy policies.
 
Instant mail alerts on iPhone: To wake the app when new mail arrives, Flow's Google Cloud (Firebase) project stores your Gmail address and a push token for your device in a Google Cloud database. When Gmail reports a change, a Google Cloud function looks up that token and sends a silent notification through Firebase Cloud Messaging and Apple's Push Notification service. The notification contains no message content, and Flow then fetches your mail directly from Google. Signing out of Flow deletes your stored address and token; if you are offline when you sign out, the token is removed automatically once it stops working. You can also ask us to delete it at any time at info@flowapp.day. Firebase also gives the app an installation identifier so it can deliver these notifications; Flow does not use Firebase Analytics or any crash-reporting or advertising service.
 
2. GOOGLE API SERVICES USER DATA POLICY
 
Flow's use and transfer of information received from Google APIs to any other app adheres to the Google API Services User Data Policy, including the Limited Use requirements. Data obtained through Gmail API scopes is used solely to provide and improve the user-facing features you see in Flow. We do not use Gmail data for serving advertisements. We do not allow humans to read this data except: with your explicit consent for support purposes, to comply with the law, or to investigate abuse. We do not transfer this data to third parties, except as necessary to provide the app's features, to comply with applicable law, or as part of a merger or acquisition (with notice to you). We do not use this data to train or improve generalized artificial intelligence or machine learning models.
 
3. WHAT WE DON'T DO
 
We don't run analytics or crash-reporting SDKs that collect your usage data. We don't sell your personal data. We don't build advertising profiles. We don't store your email, note, task, or calendar content on servers we control.
 
4. PAYMENTS
 
Flow is offered as a paid app/subscription through Apple's App Store. All payment information is collected and processed by Apple, not by Flow. We only receive limited, non-financial information from Apple needed to confirm your subscription status.
 
5. DATA RETENTION AND DELETION
 
Because your content lives in your Google and Apple accounts rather than on our servers, deleting the Flow app from your device removes any locally cached data. To revoke Flow's access to your Google account, visit your Google Account permissions page at myaccount.google.com/permissions. To revoke access to Calendar, Reminders, Contacts, location or the microphone, go to your device's Settings > Privacy & Security. The only information Flow's own Google Cloud project holds about you is the Gmail address and device push token described in section 1, plus the change notifications Gmail sends it; email info@flowapp.day and we will delete it.
 
6. YOUR RIGHTS
 
Depending on where you live, you may have rights to access, correct, or delete personal information, or to object to certain processing. Because Flow does not hold your content on its own servers, most of these rights are exercised directly with Google or Apple for the underlying data. For anything Flow does hold, such as your subscription status, contact us using the details below.
 
7. CHILDREN'S PRIVACY
 
Flow is not directed at children and is not intended for use by anyone under 13. We do not knowingly collect information from children.
 
8. INTERNATIONAL USERS
 
Flow is operated from Canada. Because your data is accessed directly from Google and Apple rather than routed through servers we control, most processing happens according to those providers' own regional infrastructure and safeguards.
 
9. CHANGES TO THIS POLICY
 
We may update this Privacy Policy from time to time. Material changes will be reflected by an updated effective date above, and where appropriate, we'll notify you in the app.
 
10. CONTACT US
 
Questions about this policy or your data? Email us at info@flowapp.day.