Privacy Policy

Last updated: March 3, 2026

What We Collect

FlowSpace collects the minimum data needed to provide the service:

• Account info: Email address and display name when you sign up.
• Workspace data: Tasks, notes, documents, and calendar events you create.
• AI conversations: Messages sent to the AI assistant for generating responses. These are not stored permanently on our servers.
• Usage metrics: Basic rate-limiting counters (messages per day) and anonymous analytics (page views, feature usage via Vercel Analytics).

Focus Audio

Focus Room can generate optional audio tones using the Web Audio API entirely within your browser. No audio data or biometric data is collected, transmitted, or stored. All audio processing happens locally on your device. Your sound preferences are stored in your browser's localStorage only.

How We Store It

All data is stored in Supabase (hosted on AWS) with Row Level Security (RLS) enabled, meaning users can only access their own data. Authentication is handled by Supabase Auth with industry-standard encryption.

International Data Transfers

Your data may be transferred to and processed in the United States and other countries where our service providers operate (including AWS, Google, Stripe, and Vercel). By using FlowSpace, you consent to these transfers. We ensure appropriate safeguards are in place with each provider.

Third-Party Services

• Supabase: Database and authentication (data hosted on AWS).
• Google Gemini: AI assistant responses are processed via Google's Gemini API. Your messages are sent to Google's servers to generate responses. See Google's Privacy Policy.
• Stripe: Payment processing. We never store your card details. See Stripe's Privacy Policy.
• Open-Meteo: Weather data (no personal data sent, only approximate coordinates).
• Vercel: Hosting, deployment, and anonymous analytics.
• Formspree: Feedback form submissions (email and message content).

What We Don't Do

• We do not sell your data to anyone.
• We do not track you with advertising cookies.
• We do not collect biometric or health data.
• We do not share your workspace data with third parties beyond what's listed above.

Cookies & Local Storage

We use Supabase to store account workspace data and browser localStorage for selected preferences such as theme, focus audio settings, and local focus statistics. We use a session cookie from Supabase for authentication. Vercel Analytics uses a non-identifying cookie for anonymous page view metrics. We do not use advertising or tracking cookies.

Children's Privacy

FlowSpace is not directed at children under 13. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal information, please contact us at privacy@rodytech.net and we will promptly delete the information.

Data Retention

Your account and workspace data is retained as long as your account is active. Server access logs are retained for up to 30 days. You may request full deletion at any time (see below).

Your Rights

Depending on your location you may have rights under GDPR, CCPA, or other laws — including access, correction, deletion, and portability of your data. To exercise any right, or to delete your account, contact us at privacy@rodytech.net. We respond within 30 days.

Changes

We may update this policy from time to time. We will notify you of material changes by email or by posting a notice within the service.

Contact

Questions about this policy? Reach out to privacy@rodytech.net or visit rodytech.net.