FlowKeep — Privacy Policy

Effective Date: February 12, 2026 · Last Updated: June 20, 2026
Developer: Legend Made (com.legend-made.FlowKeep)

1. Information We Collect

We do not collect any personal information.

FlowKeep does not ask for your name, email address, phone number, location, or any other personally identifiable information. There is no account creation or login process.

2. Data Stored on Your Device

FlowKeep stores the following data locally on your device to provide app functionality:

All of this data is stored in a local database on your device using Apple’s Core Data framework within the app’s sandboxed container.

3. iCloud Sync

If you are signed into iCloud on your device, FlowKeep can automatically sync your data across your Apple devices (iPhone and iPad) using Apple’s CloudKit service.

• Sync is handled entirely by Apple’s infrastructure.
• Data is encrypted in transit and at rest by Apple.
• Your project data goes from your device to your iCloud account — nowhere else. (The only data FlowKeep ever sends to a server we operate is the optional buddy-invite record described in Section 7.)
• If you are not signed into iCloud, your data remains on-device only.

For details on how Apple handles iCloud data, see Apple’s iCloud Privacy Overview.

4. Notifications

FlowKeep may request permission to send you local notifications. These are used to:

• Remind you about projects approaching their freshness threshold.
• Alert you when your queue needs attention.

Notifications are optional. You can enable or disable them at any time in the app’s settings or in iOS Settings. No notification data is sent to any external service.

5. Widgets & Siri Shortcuts

FlowKeep provides Home Screen widgets, Lock Screen widgets, and Siri Shortcuts integration. These features:

• Read your project data from a shared on-device container (App Group) to display your queue.
• Do not transmit any data externally.
• Are processed entirely on your device.

6. Template Sharing

FlowKeep allows you to share project templates via QR codes or links. When you share a template:

• The template data (title, description, structure) is encoded into the QR code or URL.
• No data is uploaded to FlowKeep servers (we don’t have any).
• Shared template links may be hosted on madebylegend.github.io/flowkeep-share as static GitHub Pages content. No user data or analytics are collected through these pages.

7. Accountability Buddy (Optional)

FlowKeep includes an optional Accountability Buddy feature that lets you connect with one partner so they can see your project titles and nudge you when a project goes stale. It is off until you choose to invite someone.

What is shared, and how

Invite delivery (our backend). When you create an invite, FlowKeep stores a small invite record on a lightweight backend we operate (hosted on Supabase). That record contains:

• A random invite code.
• The display name you enter for yourself.
• An anonymous device identifier (Apple’s identifierForVendor) — not your Apple ID, name, email, or phone number.
• A CloudKit share link used to establish the connection.
• The invite’s status and timestamps.

Invite records automatically expire after 14 days. This backend exists solely to deliver invites — it is never used for analytics, advertising, or profiling, and the data is never sold.

The connection and ongoing sync (Apple CloudKit). Once a buddy accepts, the actual sharing — your project titles, freshness status, and nudges — runs through Apple’s CloudKit/iCloud, not through our backend.

What stays private. Only project titles and freshness status are visible to a connected buddy. Notes, links, descriptions, time estimates, dependencies, and all other details remain private to you.

If you never use the buddy feature, no invite record is created and nothing is transmitted to our backend.

8. AI Features (Disabled)

FlowKeep contains code for optional AI-powered features (project advice via third-party AI providers). These features are currently disabled and no API calls are made to any AI service.

• No data is sent to Anthropic, OpenAI, Google, or any other AI provider.
• If AI features are enabled in a future update, any API keys would be stored securely in the iOS Keychain and never transmitted beyond the chosen AI provider’s API.
• This privacy policy will be updated before any AI features are enabled.

9. Analytics & Tracking

FlowKeep does not use any third-party analytics or tracking services.

• No Firebase, no Google Analytics, no Mixpanel, no Amplitude — nothing.
• No advertising identifiers are accessed.
• No user behavior data is transmitted off your device.

FlowKeep maintains a minimal, privacy-safe local event log (last 100 events) stored entirely on your device for internal diagnostics. This log contains no personally identifiable information, is never transmitted anywhere, and is automatically pruned to the most recent 100 entries.

10. Third-Party SDKs & Services

FlowKeep bundles zero third-party SDKs. No external code from any third party runs inside the app. It is built entirely with native Apple frameworks: SwiftUI, Core Data, CloudKit, WidgetKit, UserNotifications, App Intents, Foundation, OSLog.

One third-party service is used, and only for the optional buddy-invite feature in Section 7: Supabase, which hosts the backend that stores and delivers invite records. No Supabase code or SDK is embedded in the app — FlowKeep simply makes network requests to that backend when you create or accept a buddy invite. No project content, notes, or links are sent to it. See Supabase’s privacy practices at supabase.com/privacy.

11. Data Retention & Deletion

• All your project data is stored on your device and in your iCloud account (if enabled).
• To delete all data: Delete the FlowKeep app from your device. This removes all locally stored data.
• To remove iCloud data: After deleting the app, you can manage iCloud storage through iOS Settings > [Your Name] > iCloud > Manage Storage.
• Buddy invites: The only data FlowKeep keeps on a server it operates is the optional buddy-invite record (Section 7), which expires automatically after 14 days. To remove an invite sooner, revoke it from the app or contact us at the address below.

12. Children’s Privacy

FlowKeep does not knowingly collect any information from children under the age of 13. Since the app collects no personal information from any user, it is compliant with COPPA (Children’s Online Privacy Protection Act).

13. Privacy Nutrition Label (App Store)

Based on the current implementation, FlowKeep’s App Store privacy label states:

• No tracking: FlowKeep does not track you across apps or websites, and uses no advertising identifiers.
• For users who never use the buddy feature: No data is collected.
• For users who use the optional Accountability Buddy feature: A minimal amount of data is collected solely to deliver invites and is not linked to your identity and not used to track you:
  • Identifiers — an anonymous device identifier (identifierForVendor).
  • User Content — the display name you enter and the project titles you choose to share with a buddy.

14. Apple Privacy Manifest

FlowKeep includes a PrivacyInfo.xcprivacy file declaring the following Apple-required API usages, all for app functionality only:

NSPrivacyTracking is set to false.

15. Changes to This Policy

If we make changes to this privacy policy — particularly when the Accountability Buddy or AI features become fully implemented — we will update this document and the effective date at the top.