Back

Flowmodoro Privacy Policy

Effective date: October 21, 2026

Overview

Flowmodoro is a local-first focus timer. Your sessions, settings, and timer state are stored on your device. They are never uploaded or shared unless you explicitly create a Pro account and turn on cloud sync.

To know how many people use the app, Flowmodoro sends a small anonymous usage ping once a day, described under "Usage statistics" below. There are no ads, no third-party analytics SDKs, and no trackers.

Data we store

All Flowmodoro data is stored on your device only: your focus sessions and history, your settings (rest ratio, theme, sounds, notifications preferences), and your current timer state. This data lives in the app's local storage on your device and never leaves it on its own.

Because this data never leaves your device, we do not receive, have access to, or make backups of it. Deleting the app deletes this local data.

Data we sync (Pro accounts)

Cloud sync is an optional feature exclusive to Pro. The app works fully without an account; signing in is only offered through the Pro sync feature.

If you are a Pro user and choose to sync, Flowmodoro stores your sessions, settings, and timer state in a Supabase-hosted database associated with your account, so they can be restored or kept in step across your devices.

Accounts are created with an email magic link, Sign in with Apple (iOS), or Google sign-in (Android), and are handled by Supabase authentication. We receive only the account identifier (and, where the provider exposes it, your email address) — never your provider password.

You can sign out at any time from Settings → Account. You can also delete your account from Settings → Account → Delete account; this permanently erases your cloud data from our servers. Your previously stored local data stays on your device.

Purchases & subscriptions

Pro subscriptions are sold through a Stripe-hosted checkout on the web. When a payment completes, Stripe notifies our server, which records on your Supabase account until when your Pro plan is active; the app reads that date to unlock Pro.

Flowmodoro never sees or stores your payment card data. Card details are entered on the Stripe checkout page and processed by Stripe.

To restore a purchase on a new device, sign in with the same account you used at checkout; the app reads your Pro plan from that account.

Notifications

Flowmodoro's notifications (focus end and break end reminders) are scheduled locally on your device. They are delivered by your device's own notification system.

No push notifications are used and no push notification tokens are collected or sent to any server.

Usage statistics

Once a day, the app sends one anonymous ping with four values: the app version, the platform (iOS, Android, or web), your plan (free or Pro), and your device language (for example "es", without the region). Our server only adds one to a counter for that combination of values; it does not keep a record per device.

To count returning users, the ping also carries a random install ID created on your device. It is not linked to your account, your email, or your Pro purchase; the only things stored with it are the day of each ping and your plan (free or Pro). Install ID records are deleted after 13 months. You can turn it off at any time in Settings → Data → Anonymous Usage Stats, which deletes it from your device; the anonymous daily counter contains no identifier and stays on.

The ping never includes your sessions, statistics, settings, or account, and we do not store your IP address with these statistics. Nothing is sent before you have seen a one-time notice in the app explaining this. Aggregate totals from these statistics (never an install ID, groups under 5 combined, Pro only as a rounded share) are published on the telemetry page.

Flowmodoro includes no third-party analytics SDKs, no crash reporting, no advertising, and no third-party profiling.

See exactly what is sent and stored →

Service providers

Flowmodoro relies on a small number of processors, only for the features described above:

Supabase — account authentication and cloud storage of synced sessions, settings, and timer state (Pro sync only), and the anonymous daily usage statistics described above (all users).

Stripe — payment processing for Pro subscriptions (only when you start a checkout).

Vercel — hosting of this website, including this privacy policy.

None of these providers receive your data unless the corresponding feature is in use: Supabase receives the anonymous daily usage ping from every install and account data only for Pro users who sign in, Stripe only when you start a Pro checkout, and Vercel only for serving this site.

Data retention

Local data (sessions, settings, timer state) is retained on your device until you delete the app or reset the app's data from Settings.

Anonymous daily usage counters are kept as aggregate totals. Records of the random install ID are deleted after 13 months.

Cloud data for Pro accounts is retained while your account exists, so sync keeps working. When you delete your account in-app (Settings → Account → Delete account), your cloud data is permanently erased from our servers. Local data on your device is not removed by account deletion.

Your rights

Because your data is stored on your device, you are always in control of it: you can view it in the app, export or reset it from Settings, and delete it entirely by removing the app.

For Pro accounts, you can access your synced data in the app on any signed-in device, and you can exercise deletion at any time via Settings → Account → Delete account, which erases your cloud data. If you need help with an access or export request, contact us using the details below.

Children's privacy

Flowmodoro is a general-purpose focus timer and does not knowingly collect any personal information from anyone, including children under 13. The app is local-first, and its anonymous daily usage ping contains no personal information, so no child data is gathered by the app itself.

The only personal data that can exist is a Pro account (an email address) created voluntarily. If you believe a child has created a Pro account, contact us and we will delete it.

Changes to this policy

If this policy changes, the updated version will be published on this page with a new effective date. If a change materially affects how your data is handled — for example, a new service provider or a new data collection — it will be highlighted in the app before it takes effect.

Contact

Questions, requests, or concerns about this policy or your data? Reach us at:

Questions about this policy, your data, or a deletion request? Write to alvaldes.dev@gmail.com and we will answer as soon as we can.

Email: alvaldes.dev@gmail.com