Flow Sudoku — Privacy Policy

1. Information We Collect

1.1 Information You Provide

Account Information (Optional): If you create an account, we collect:

• Email address
• Password (stored in encrypted form, never in plain text)
• First name and last name (when you sign up)

Session Data: When you use the app, we store locally on your device:

• Puzzle difficulty and completion status
• Time spent on puzzles
• Notes written in the declutter section
• Session timestamps
• Mistake counts

If you sign in and enable cloud sync, this data may be synced to our servers.

1.2 Automatically Collected Information

Usage Analytics: We use PostHog to collect anonymous usage data to improve the app, including:

• App launches and lifecycle events
• Onboarding progress
• Feature usage (sessions, paywall interactions, navigation)
• Purchase events (product ID only, not payment details)
• Sign-in/sign-up completion (success or failure)

Before you sign in, this data is anonymous. After sign-in, it may be linked to your account for product improvement.

Device Information: Basic device information for app functionality (OS version, app version, screen size).

Local Notifications: The app schedules local notifications (timer alerts, daily reminders, subscription expiry reminders, streak milestones). These are stored on your device only and are not sent to our servers.

1.3 Information from Third Parties

Google Sign-In: If you sign in with Google, we receive your email address and basic profile information from Google, subject to Google's privacy policy.

Apple: When you make in-app purchases, Apple processes the transaction. We receive subscription status and expiry dates to provide Studio tier access. We do not receive your payment card details.

2. How We Use Your Information

We use the collected information to:

• Provide and maintain the app's core functionality (Sudoku, Pomodoro timer)
• Save and sync your session history across devices (when you are signed in)
• Track daily usage limits for Free tier users
• Improve app performance and user experience through analytics
• Provide customer support when requested
• Send subscription expiry reminders (if you have a Studio subscription)
• Link your in-app purchase to your account so you can access Studio on all your devices

3. Third-Party Services

Flow Sudoku uses the following third-party services:

• PostHog: Analytics to understand how users interact with the app. PostHog's privacy policy
• Supabase: Authentication and database for account management and cloud sync. Data is stored securely and transmitted over HTTPS.
• Google: OAuth for "Sign in with Google." Google's privacy policy
• Apple: In-app purchases and subscription management. Apple's privacy policy

These providers process data on our behalf under strict confidentiality. We do not sell your personal information to third parties.

4. Data Storage and Security

4.1 Local Storage

• All session data is stored locally on your device by default
• Data is saved using standard storage mechanisms (UserDefaults and file system)
• No data leaves your device unless you sign in and enable cloud sync

4.2 Cloud Storage

• If you create an account and sign in, your session data and profile may be synced to our servers
• All data transmission is encrypted using HTTPS
• Passwords are hashed and never stored in plain text

5. Data Sharing

We do NOT:

• Sell your personal information to third parties
• Share your session notes or declutter writing with anyone
• Use your data for advertising purposes
• Track you across other apps or websites for advertising

We MAY share information only in these circumstances:

• If required by law or legal process
• To protect our rights, safety, or property
• With service providers who help us operate the app (PostHog, Supabase) under strict confidentiality agreements

6. Your Rights

You have the right to:

• Access your personal data
• Delete your account and all associated data (see Section 7)
• Export your session history
• Opt out of cloud sync (use the app offline without signing in)
• Decline to create an account (use as a guest with local-only data)

To make a request, contact us at hello@flowsudo.co

7. Account Deletion

You can delete your account and all associated data at any time. To request account deletion:

• Open Flow Sudoku and go to Settings
• Sign in if you are not already
• Tap or click "Delete Account" and follow the prompts
• Alternatively, contact us at hello@flowsudo.co with the subject "Account Deletion Request" and include the email address associated with your account

We will process deletion requests within 30 days. After deletion, your account data, session history, and profile will be permanently removed from our systems.

Note: Deleting your account does not cancel active subscriptions. You must cancel subscriptions through your Apple ID settings. See Section 9.

8. Children's Privacy

Flow Sudoku is not directed to children under 13. We do not knowingly collect personal information from children under 13. If you believe we have collected such information, please contact us at hello@flowsudo.co to have it removed.

9. In-App Purchases and Subscriptions

Flow Sudoku offers a Free tier and a Studio tier via in-app purchase:

• Free: Limited sessions and Pomodoro cycles per day; data stored locally unless you sign in
• Studio: Unlimited usage via monthly or yearly subscription, with a 7-day free trial

Subscriptions are processed by Apple. Payment is handled entirely by Apple; we do not collect or store your payment information. Subscriptions auto-renew unless cancelled at least 24 hours before the end of the current period. You can manage and cancel subscriptions in your Apple ID settings.

Apple's terms apply to all in-app purchases: https://www.apple.com/legal/internet-services/itunes/

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by:

• Posting the new Privacy Policy at https://flowsudo.co/privacy
• Updating the "Last Updated" date above
• Sending an email if you have an account (for significant changes)

Continued use of the app after changes constitutes acceptance of the updated policy.

11. Data Retention

• Local session data: Retained until you manually delete it or uninstall the app
• Cloud data (if synced): Retained until you delete your account
• Account data: Deleted within 30 days of account deletion request
• Analytics data: Retained by PostHog according to their retention policy; we use it in aggregated form for product improvement

12. Contact Us

If you have questions or concerns about this Privacy Policy or your data:

Email: hello@flowsudo.co

Website: https://flowsudo.co

Privacy Policy URL: https://flowsudo.co/privacy

13. Technical Summary (App Store Privacy Labels)

For transparency, below is a summary of data types and purposes for App Store privacy disclosure:

14. Links to Other Websites

The app or website may include links to external sites. Flow Sudoku is not responsible for the privacy practices of those sites.

15. International Use

Flow Sudoku is available worldwide. Data may be stored or processed in regions where our providers (Supabase, PostHog) operate, in compliance with applicable laws.