Privacy Policy

Last updated: June 2026 · Prefer plain language? Read Your Data in FlowNest — it covers the same ground without the formality.

1. Who we are

FlowNest ("we," "us") operates the website flow-nest.org and the FlowNest web application. For privacy questions, contact hello@flow-nest.org.

2. Data we collect

• Account data: when you sign in with Google, we receive your name, email address, and profile photo. We do not receive or store passwords.
• Synced content: if you complete the Soul Alignment inquiry while signed in, the resulting summary is stored in our cloud database, keyed to your email, so it can be restored across devices.
• Purchase data: if you buy a paid tier, we store the order ID, your email, the tier purchased, and payment status. Card details are processed entirely by Lemon Squeezy, our merchant of record, and never reach our servers.
• Usage events: anonymous product analytics (event name, page, referrer, timestamp). These never include your written content, inquiry answers, or identity beyond an internal identifier.

3. Data we deliberately do not collect

Your vault loops, journal entries, daily check-ins, and app settings are stored only in your browser's local database (IndexedDB) on your device. They are not transmitted to our servers, our analytics, our error logs, or any third party. We cannot access them.

4. How we use data

• To operate the service (authentication, sync, payments).
• To understand aggregate product usage and improve FlowNest.
• To respond to support requests.

We do not sell personal data, serve advertising, share data with data brokers, or use your content to train AI models.

5. Third-party processors

• Google (sign-in authentication)
• Supabase (cloud database hosting)
• Lemon Squeezy (payment processing, merchant of record)

Each processes only the data needed for its function, under its own privacy terms.

6. Retention

Synced Soul Alignment results are retained until you delete them. Purchase records are retained as long as required for tax and accounting law. Anonymous usage events are retained for product analysis. Local data on your device is under your control at all times.

7. Your rights

You can export all locally stored data and delete your account and synced data at any time from within the app (Settings → Data). Deletion removes your synced results from our cloud and erases local data on that device. You may also request deletion by email at hello@flow-nest.org. Depending on your jurisdiction (e.g., GDPR, CCPA), you may have additional rights of access, correction, and portability — contact us to exercise them.

8. Security

Cloud data is stored with access controls and transmitted over HTTPS. Optional passkey (WebAuthn) protection adds a device-bound unlock to your session. No system is perfectly secure; we practice data minimization so that the most sensitive content never leaves your device in the first place.

9. Children

FlowNest is not directed at children under 13, and we do not knowingly collect data from them.

10. Changes

We will update this page when our practices change and revise the date above. Material changes will be announced in the app.