Privacy Policy

1. Who we are

Flowy.keypad turns an iPad or iPhone into a control surface for your Mac. It is operated by Flowy Labs, Inc., a Delaware corporation with offices in Irvine, California. For any privacy questions, contact team@flowylabs.ai.

2. How Flowy.keypad is built

Flowy.keypad is local-first and does not require an account or login. The iOS app and the macOS app pair over your local network and talk directly to each other. The panels, keys, bookmarks, and shortcuts you set up stay on your devices. We do not collect them, and they are not uploaded to our servers.

3. Information we collect

Because there is no account, we collect far less than a typical app. What we do collect falls into these categories.

Your configurations

Your panels, keys, bookmarks, and shortcuts are stored locally on your devices and exchanged directly between your paired devices over your local network. We do not receive or store them.

Purchase data

If you buy Pro, the purchase is processed by Apple through the App Store. We do not receive or store your payment card details. We receive limited information from Apple needed to confirm and maintain your Pro entitlement, such as a purchase receipt or subscription status.

Usage and device data

Device type, operating system, app version, coarse region, log events, crash reports, and product interactions (such as which features you use). We use this to keep the apps working and to improve them.

Advertising data

The free plan shows ads served by third-party advertising partners. To serve and measure those ads, they may collect device identifiers and related data. See Section 5 for details and your choices. Upgrading to Pro removes ads.

Support data

When you email us or submit feedback, we keep the contents of that correspondence and any contact details you provide.

4. How we use your information

We use the data above to:

• Provide, maintain, and improve Flowy.keypad.
• Confirm and maintain your Pro entitlement.
• Show and measure ads on the free plan.
• Diagnose crashes and fix bugs.
• Respond to support requests.
• Detect, investigate, and prevent abuse, fraud, and violations of our Terms.
• Comply with legal obligations.

We do not train artificial intelligence or machine-learning models on your configurations.

5. Advertising and your choices

The free plan is supported by advertising. Ads are served by third-party advertising partners (such as mobile ad networks), who may collect device identifiers and similar data to serve, cap, and measure ads. We do not sell your personal information for money. Depending on the partner and your settings, the use of identifiers for advertising may count as a "sale" or "sharing" under some U.S. state laws.

You have these choices:

• Decline tracking when Apple's App Tracking Transparency prompt appears, or turn off "Allow Apps to Request to Track" in your device settings.
• Reset or limit your device's advertising identifier in your device settings.
• Upgrade to Pro, which removes ads.
• Email team@flowylabs.ai to ask us not to share your information for advertising.

6. Legal bases for processing (EU/UK users)

If you are in the EU, UK, or Switzerland, we process your personal data under one or more of these lawful bases:

• Contract: to provide Flowy.keypad and your Pro entitlement.
• Legitimate interests: to secure the apps, prevent fraud, and improve the product.
• Consent: for advertising and analytics that rely on consent, which you can withdraw at any time.
• Legal obligation: to comply with tax, accounting, and law-enforcement requirements.

7. Service providers we use

We rely on trusted vendors to run Flowy.keypad. Each is bound by a contract that limits how they may use your data. Our current providers include:

• Apple — app distribution and in-app purchases.
• Amazon Web Services, Google Cloud Platform, Cloudflare — hosting and content delivery for our website and back-end services (United States).
• Third-party advertising network(s) — serving and measuring ads on the free plan.
• PostHog, Google Analytics, and/or a crash-reporting provider — product analytics and crash diagnostics.

This list is current as of the effective date at the top of this page. We'll update it when it changes.

8. How we share your information

We share personal data only in these situations:

• With service providers and advertising partners — as described above, under a written contract or platform terms.
• For legal reasons — to comply with a lawful subpoena, court order, or other legal process; to protect our rights, safety, or property; or to investigate fraud.
• In a business transfer — if Flowy Labs is acquired, merged, or sells substantially all of its assets, your data may transfer as part of that transaction. We'll notify you first.

We do not sell your personal information for money. See Section 5 for how we handle data used for advertising and the choices you have.

9. Data retention

Your configurations live on your devices and are removed when you delete them or uninstall the apps. We keep usage, crash, and support data only as long as we need it for the purposes above, and purchase records for as long as required for legal, accounting, and fraud-prevention purposes.

10. Security

We use TLS for data in transit to our services and encryption for data at rest, along with access controls, logging, and regular security reviews. Communication between your paired devices stays on your local network. No system is perfectly secure; we cannot guarantee absolute security, but we work hard to protect your data and will notify you promptly of any breach that affects you, as required by law.

11. Your rights

All users

Because we hold very little about you, you can manage most of your data directly on your device by editing your configurations or uninstalling the apps. For anything else, email team@flowylabs.ai.

California residents (CCPA / CPRA)

You have the right to:

• Know what personal information we collect, use, and disclose about you.
• Request deletion of your personal information.
• Request correction of inaccurate personal information.
• Limit the use of sensitive personal information.
• Opt out of the "sale" or "sharing" of personal information. You can do this through the advertising choices in Section 5.
• Be free from discrimination for exercising any of these rights.

To exercise any of these rights, email team@flowylabs.ai. You may designate an authorized agent to submit requests on your behalf; we will verify the agent's authority before responding.

EU, UK, and Swiss residents (GDPR / UK GDPR)

You have the right to access, rectify, erase, restrict, port, and object to the processing of your personal data, and to withdraw consent where processing is based on consent. You also have the right to lodge a complaint with your local data protection authority.

Data we process is handled in the United States. We rely on the Standard Contractual Clauses approved by the European Commission (and the UK International Data Transfer Addendum, where applicable) for international transfers.

12. Cookies and similar technologies

The apps use device identifiers and similar technologies for analytics, crash reporting, and (on the free plan) advertising, as described above. Our website uses a small number of cookies: essential cookies needed for it to function, and analytics cookies you can decline. We honor Global Privacy Control ("GPC") signals on our website as an opt-out of analytics tracking.

13. Children

Flowy.keypad is intended for users who are 18 years of age or older. We do not knowingly collect personal information from anyone under 18. If you believe a minor has provided us with personal data, contact team@flowylabs.ai and we will delete it.

14. International users

Flowy Labs is based in the United States, and the data we process is stored and processed in the United States. If you are outside the U.S., please understand that you are transferring that data to the U.S. when you use Flowy.keypad.

15. Changes to this policy

We may update this policy from time to time. If we make material changes, we'll notify you in-product or on our website before they take effect. Your continued use of Flowy.keypad after the effective date constitutes acceptance of the updated policy.

16. How to contact us

For any privacy question, request, or complaint:

Flowy Labs, Inc.
Irvine, California, USA
team@flowylabs.ai