Privacy Policy

Last updated: March 24, 2026

Flowt ("we", "us", or "our") is committed to protecting your privacy. This policy explains what information we collect, how we use it, and your rights regarding your data.

1. Information We Collect

When you use Flowt, we collect the following:

Account information — your name and email address when you register
Financial data — expenses, categories, budgets, and settlement records you enter into the app
Receipt images — photos you submit for AI-powered scanning (processed immediately, not stored)
Subscription information — managed via RevenueCat; we do not store payment card details
Device identifiers — used only for authentication (Face ID / Touch ID preferences stored locally on your device)

2. How We Use Your Information

To provide and operate the Flowt service
To sync expense data across your household members
To process AI receipt scanning (images are sent to Groq's API for text extraction and immediately discarded)
To send transactional emails (password reset, account notifications)
To manage your subscription via RevenueCat

3. Data Sharing

We do not sell, rent, or trade your personal information. We share data only with the following third-party services required to operate Flowt:

Groq — AI inference for receipt scanning (images processed in transit, not retained)
RevenueCat — subscription management and in-app purchase validation
Apple App Store — in-app purchase processing

4. Data Storage & Security

Your data is stored on secure servers hosted on Amazon Web Services (AWS) in the United States. We use industry-standard encryption for data in transit (HTTPS/TLS) and at rest. Passwords are hashed using bcrypt and never stored in plain text.

Authentication tokens are stored securely in your device's Keychain (iOS) and are never transmitted in plain text.

5. Data Retention

We retain your account and expense data for as long as your account is active. If you delete your account, your data will be permanently removed within 30 days. Password reset tokens expire after 1 hour and are invalidated after use.

6. Your Rights

You have the right to:

Access the personal data we hold about you
Request correction of inaccurate data
Request deletion of your account and associated data
Export your expense data (available via CSV export in the app)

To exercise any of these rights, contact us at the email below.

7. Children's Privacy

Flowt is not directed at children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, please contact us and we will delete it.

8. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by updating the "Last updated" date at the top of this page. Continued use of Flowt after changes constitutes acceptance of the updated policy.

9. Contact Us

If you have questions about this Privacy Policy or your data, contact us at:

gary.yong@yongai.ca

Or visit: gary-yong.com