← Back
Privacy Policy
Last updated · 2026-07-11
The short version: your financial data belongs to you. We store it so the
app works across your devices, we can't browse it, we don't sell it, and you can export or
permanently delete all of it yourself at any time from Settings.
What we collect
- Account: your email address and a password (stored hashed by our
authentication provider — we never see the password itself).
- Financial records you enter: accounts, transactions, budgets,
subscriptions, work shifts, and settings. This data exists because you typed it in.
- Crypto public addresses (optional): if you use the crypto feature, the
public wallet addresses you paste. Never private keys or seed phrases —
the app actively refuses them.
There is no advertising, no tracking pixels, and no sale or sharing of your data with
third parties for their own use.
Where it lives
- Supabase (database & authentication): stores your data, isolated
per account with row-level security — one user can never read another's rows.
- Vercel (hosting): serves the app itself.
- Price & balance services: crypto prices come from CoinGecko;
wallet balances are looked up via public blockchain APIs (Blockstream, publicnode).
These services receive only the public address being queried — never your identity,
email, or financial records.
Your controls
- Export: download all transactions as CSV from Settings, anytime.
- Delete: Settings → delete all data permanently removes your records.
- Sign out on any device from Settings.
Cookies & local storage
The app uses browser local storage for your session and device preferences (theme,
default job, dismissed hints). No third-party cookies.
Not financial advice
Flow is a record-keeping tool. Nothing it shows — including forecasts, insights, and
budget suggestions — is financial, investment, tax, or legal advice.
Contact
Questions, concerns, or a security issue to report:
emile.duplessis25@gmail.com.
Changes
If this policy changes materially, the "last updated" date above changes with it and
significant changes will be called out on the login page.