Your data in FlowNest
FlowNest holds some of the most personal things you can write down — unfinished worries, private reflections, life admin you haven't told anyone about. Here is exactly where that data lives, in plain language. No legal fog.
The short version
Your private writing stays in your browser
FlowNest is built local-first. Your vault loops, journal entries, daily alignment check-ins, and settings are stored in your browser's own database (IndexedDB) on your device. They are never uploaded to our servers. We cannot read them. They do not travel through analytics, error logs, or any third party.
| Data | Where it lives | Can we see it? |
|---|---|---|
| Vault loops & next steps | Your browser only | No |
| Journal entries | Your browser only | No |
| Daily alignment check-ins | Your browser only | No |
| App settings & preferences | Your browser only | No |
| Soul Alignment result | Your browser + cloud sync (if signed in) | Stored, not reviewed |
| Google account name, email, photo | Your browser + our records | Yes (account identity) |
| Purchase records (tier, order ID) | Our server + Lemon Squeezy | Yes (billing only) |
| Anonymous usage events | Our analytics database | Yes (no personal content) |
What syncs to the cloud
One thing: your Soul Alignment result
If you sign in and complete the Soul Alignment inquiry, your result (your roles, purpose statement, and related reflections) is saved to our cloud database, keyed to your email, so it can be restored when you change devices. That is the only piece of your personal content that leaves your browser — and only when you are signed in.
Your raw inquiry answers are used to compute the result on your device. The result summary is what syncs.
Third parties
Who else is involved
- Google Sign-In — handles authentication. We receive your name, email, and profile photo. We never see a password; FlowNest doesn't have passwords.
- Supabase — hosts our cloud database (Soul Alignment results and anonymous usage events).
- Lemon Squeezy — our merchant of record for payments. Your card details go directly to them and never touch our servers. We store the order ID, your email, and which tier you purchased.
What we don't do: we do not sell data, we do not run ads, we do not use session-replay tools that record your screen, and your content is never used to train AI models.
Analytics
What we measure
We record anonymous product events — things like "someone viewed the pricing page" or "someone completed the Alignment Reset." These events contain the event name, the page, and the referring site. They never contain your writing, your inquiry answers, your name, or your email.
Honest limitations
What local-first means in practice
- Clearing your browser data deletes your vault and journal permanently. There is no server backup of local content. This is the trade-off of genuine privacy.
- Changing devices: your Soul Alignment result follows you when you sign in. Your vault and journal do not — they live on the original device. Use the export tool before switching.
- We deliberately avoid words like "zero-knowledge" or "end-to-end encrypted" because they describe specific cryptographic guarantees FlowNest doesn't claim. What we can say truthfully: your private writing is never transmitted to us at all.
Your controls
Export and delete — built in, functional
- Export: in the app, open Settings → Data → "Export my data." You get a JSON file containing everything FlowNest holds on your device.
- Delete: Settings → Data → "Delete everything." This erases your local database, removes your synced Soul Alignment result from our cloud, and signs you out. It requires a typed confirmation and cannot be undone.
- Retention: synced results are kept until you delete them. Purchase records are retained by Lemon Squeezy and by us as long as legally required for tax and accounting.
Questions about any of this? Contact support — and please don't include journal content in support messages. See also the formal Privacy Policy and Terms of Use.