The short version: FlowTalk is built local-first. Your practice is yours — it lives on your device and syncs privately to your account. The business will be a Pro subscription — never your data.
Everything you do in FlowTalk — your streak, practice history, journal, saved discussions — is stored locally on your phone or computer first. The servers only ever hold what's needed for your account and sync, described below.
You sign in with an email code, Google, or Apple. Accounts and sign-in run on Supabase (our authentication and database provider): it stores your email and a synced copy of your progress so it follows you across devices, protected so only your login can read it. Sign-in code emails are delivered through our email provider. If you answer the occasional "how's FlowTalk going?" prompt, whatever you write is saved with your account so we can read it and act on it. We don't sell your data, share it for advertising, or profile you — ever.
When you ask for coaching or reply help, the text you typed is sent to our server and processed by our AI provider (Anthropic) to generate the feedback, then returned to you. Chat screenshots you choose to import work the same way: they're read once to pull out the messages, the text goes into your saved discussion, and the images themselves are never stored. Anthropic doesn't use any of these requests to train its models, and we don't use them to build a profile of you.
FlowTalk is hosted on Vercel, and we count anonymous, cookieless page views (Vercel Analytics) to see which parts of the app people use. No fingerprinting, and we never sell or share your data for advertising. On the website only, we also run TikTok's advertising pixel, so that when we pay to show FlowTalk to someone we can tell whether it worked. It records that a visit, a sign-up or a subscription happened, and for a subscription the amount. TikTok also collects general browsing signals from these pages — which pages you opened, what you clicked, how long you stayed — which it uses to target its own advertising. What it never receives from us is your name, your email, or anything you have typed into FlowTalk: not a practice answer, not a saved discussion, not a journal entry. The pixel is not in the iPhone app at all, and your browser's ad-blocker or tracking protection will stop it.
Settings → Delete account is the one that removes everything: your login, the copy of your progress on our servers, and the data on this device. If you have a Pro subscription it is also cancelled at the end of the period you've already paid for, so you're never charged for an account that no longer exists. If the cloud half can't be completed, the app tells you and stops rather than wiping your device and leaving the account alive — if you see that message, email flowtalkapp@outlook.com and we'll erase it by hand within 30 days, as UK data-protection law requires. Settings → Reset all progress is a different thing: it clears this device and signs you out, but your account and its synced copy stay, so signing back in brings your progress with it.
Questions about your data, a payment, or anything else — email flowtalkapp@outlook.com and a real person will reply. You can ask us for a copy of what we hold, to correct it, or to erase it — and Settings → Download backup hands you the whole lot as a file straight away. If you want your data deleted and can't reach the button in Settings, email us and we'll do it for you. If you think we've handled your data badly, you can complain to the UK Information Commissioner's Office at ico.org.uk.