← Back

Privacy Policy

The short version: your financial data belongs to you. We store it so the app works across your devices, we can't browse it, we don't sell it, and you can export it or permanently delete it — or your whole account — yourself at any time from Settings.

What we collect

• Account: your email address and a password (stored hashed by our authentication provider — we never see the password itself). If you use Continue with Google, Google shares your email address and basic profile (name and picture) with us instead of a password.
• Financial records you enter: accounts, transactions, budgets, subscriptions, work shifts, and settings. This data exists because you typed it in.
• Crypto public addresses (optional): if you use the crypto feature, the public wallet addresses you paste. Never private keys or seed phrases — the app actively refuses them.
• Anonymous usage statistics: page views, referring site, country, device type, and page-load speed, collected by Vercel Web Analytics and Speed Insights. These use no cookies, don't identify you, and aren't linked to your account or financial data.
• Error reports: if the app crashes, your browser sends the error message, the page it happened on, and your browser version so we can fix it. No financial data, email, or account id is included.

There is no advertising, no tracking pixels, no cross-site tracking, and no sale or sharing of your data with third parties for their own use. We only collect what the app needs to work.

Who processes it

These services handle data on our behalf, only to run the app:

• Supabase (database & authentication): stores your account and records, isolated per account with row-level security — one user can never read another's rows.
• Vercel (hosting, anonymous analytics, error logs): serves the app. Like any web host, it sees your IP address when your browser loads a page.
• Google (only if you choose Continue with Google): verifies your sign-in.
• Price & balance services: crypto prices come from CoinGecko; wallet balances are looked up via public blockchain APIs (Blockstream, publicnode). These services receive only the public address being queried — never your identity, email, or financial records.

The app's fonts and code libraries are served from our own site, so loading a page doesn't contact Google Fonts or a third-party CDN. These providers may store data on servers outside your country; each is bound by its own data-protection terms.

Guest mode

If you use Flow without an account, your data is kept only in this browser's local storage and never sent to us. When you sign in or create an account on that device, it's copied into your account and removed from the browser.

How long we keep it

• Your account and records: for as long as you have an account. Delete a record and it's gone immediately; delete your account and everything goes with it.
• Backups: deleted data can remain in our database provider's routine backups for a short period until those backups are overwritten. Backups are never used to restore data you deleted.
• Error logs: kept only briefly by our host, then discarded automatically.

Your rights and controls

• Access & export: everything is visible in the app; download your transactions as CSV from Settings, anytime.
• Correct: edit any record directly in the app.
• Delete your data: Settings → Delete all my data removes your records but keeps your login.
• Delete your account: Settings → Delete my account permanently removes your login, email address, and all records.
• Ask us: for anything you can't do in the app — a copy of all your data, a question about how it's handled, or an objection — email us and we'll respond within 30 days. You also have the right to complain to the Office of the Privacy Commissioner of Canada, or to the data-protection authority where you live.

Cookies & local storage

Flow sets no cookies. It uses your browser's local storage only for things the app needs: keeping you signed in, guest-mode data, and device preferences (theme, default job, dismissed hints). Because nothing is used for tracking or advertising, no cookie banner is needed.

Children

Flow is not intended for anyone under 16, and we don't knowingly collect data from children. If you believe a child has created an account, email us and we'll delete it.

Security

Data travels over encrypted connections (HTTPS) and is encrypted at rest by our database provider. Access is restricted per account by row-level security. No system is perfectly secure; if a breach ever affects your data, we'll tell you without undue delay.

Not financial advice

Flow is a record-keeping tool. Nothing it shows — including forecasts, insights, and budget suggestions — is financial, investment, tax, or legal advice.

Contact

Flow is run by Émile Duplessis in Canada, who is responsible for your personal information under Canada's privacy law (PIPEDA). Questions, data requests, or a security issue to report: support@flownetworth.com.

Changes

If this policy changes materially, the "last updated" date above changes with it and significant changes will be called out on the login page.