Privacy Policy
Last updated October 19, 2026
Flowglass is built to know as little about you as possible. You can use it without an account: your sessions, XP, levels and settings then stay on your device and we never receive them. If you choose to sign in, a private copy is kept in your account so it syncs across your devices.
No account needed. Without one, your focus data stays on your device (browser local storage or app storage).
Optional account: only your email address, plus a synced copy of your sessions and settings. Delete it anytime in Settings.
No cookies, no ads, no selling or sharing of personal data, no cross-site tracking.
On the website we use cookieless, anonymous analytics (Vercel Web Analytics), which you can turn off at any time.
You can export or delete everything yourself in Settings → Privacy & data.
Data stored on your device
Each focus session is saved as a small record (start and end time, focused minutes, planned length, technique, skill, whether it was completed), together with your settings and custom skill names. On the web this lives in your browser's local storage under the keys “@flowglass/sessions/v2” and “@flowglass/settings/v4”; in the apps it lives in the app's private storage. It is never uploaded to us.
XP, levels, streaks and quests are calculated from these records on your device.
Optional account and sync
Signing in is optional. If you do, we use your email address to send you a one-time sign-in code or link — there is no password — and we store a copy of your session records and settings (including custom skill names) in your account so they sync across your devices. Pro status and your analytics choice are not synced.
Accounts are run on Supabase (Supabase Inc.), which hosts the database and sends the sign-in emails on our behalf. Each account’s data is protected by row-level security: only you, signed in, can read or change it. We do not use it for marketing and never sell or share it.
Legal basis (EU/UK GDPR): performance of a contract — providing the sync you asked for. Sign out anytime; to remove the cloud copy use Settings → Account & sync → Delete account, or Settings → Privacy & data → Delete all my data.
To understand which features are useful, the website uses Vercel Web Analytics. It does not use cookies and does not store identifiers on your device. It records page views (page address, referring site, browser, operating system, device type and an approximate country derived from the IP address) and four product events:
session_completed — the technique and the built-in skill (or simply “custom”)
level_up — the new level number
quest_completed — which quest and whether it was daily or weekly
pro_interest_clicked — where the “I’m interested” button was pressed
Custom skill names and other text you type are never sent. Analytics are not linked to you, and we cannot use them to identify you. You can decline or turn analytics off at any time in the privacy notice or in Settings → Privacy & data; after that, nothing is sent. The native apps send no analytics at all.
Legal basis (EU/UK GDPR): our legitimate interest in improving the product with minimal, non-identifying statistics, or your consent where the law requires it.
The website is hosted by Vercel Inc. Like any web host, Vercel processes technical data such as IP addresses and request logs to deliver and protect the site. Vercel may process data in the United States and other countries; see Vercel’s privacy policy for details and the safeguards it uses.
Pro is planned as a monthly subscription. No payments are taken on the website. If in-app subscriptions become available in the iOS or Android apps, Apple or Google will process the payment under their own privacy policies, and a purchase-verification service (RevenueCat) will receive an anonymous app user ID and the purchase receipt to confirm your subscription. We never see your card details.
Vercel — website hosting and cookieless analytics (web only).
Supabase — optional accounts: sign-in emails and the synced copy of your data (only if you sign in).
Apple App Store / Google Play — app distribution and, in future, payments.
RevenueCat — purchase verification, only once in-app purchases are switched on (not active today).
Flowglass contains no advertising, social-media or tracking SDKs.
Flowglass is suitable for students of all ages and works fully without an account, so nobody has to give us personal information to use it. The optional account is for users aged 13 or older (or the minimum age in your country, up to 16 in parts of the EEA); younger users should keep using Flowglass signed out or ask a parent. We do not knowingly collect personal data from children below that age. If you believe a child has created an account, contact us and we will delete it.
Depending on where you live (for example under the GDPR, UK GDPR or California law), you may have rights to access, correct, export, delete or object to the processing of personal data. You can exercise most of these directly in the app:
Export: Settings → Privacy & data → Export my data (a JSON file).
Delete: Settings → Privacy & data → Delete all my data (this device, and your account’s copy if you are signed in). Clearing your browser’s site data or uninstalling the app also removes the local copy.
Delete your account: Settings → Account & sync → Delete account removes the account, your email and everything synced to it.
Object to analytics: decline in the privacy notice or switch analytics off in Settings.
For anything else — or to complain about how we handle data — email hello@flowglass.app. You can also contact your local data protection authority.
Data on your device is kept until you delete it. If you have an account, its data is kept until you delete it or the account (deletion is immediate; provider backups roll off within their normal backup window). Analytics are kept in aggregate according to Vercel’s retention periods. Emails you send us are kept only as long as needed to answer them.
If this policy changes, we will update the date at the top of this page. Significant changes will be highlighted in the app.
Questions or requests: hello@flowglass.app.
Plain-language summary of how Flowglass works. It is not legal advice.