Information we collect

Local-first data

DeepFlow stores some data locally in your browser or device. This can include timer history, workspace state, preferences, and local-only product data.

Local data may not be available on other devices unless cloud backup and restore are used. Clearing browser storage may remove local-only DeepFlow data.

Cloud backup and account data

Authenticated users may choose to save selected sessions, goals, and routines to their account for backup and restore.

DeepFlow does not claim that Notes Canvas is synced. If Notes Canvas remains local-only in the product, it should be treated as local browser data.

How we use information

Payment processing

Stripe processes payment information when paid subscriptions are enabled. DeepFlow should not receive or store full card numbers.

Billing details, invoices, subscriptions, and payment methods may be managed through Stripe and the Stripe customer portal when those billing features are active.

Third-party services

DeepFlow uses service providers to operate the product. These may include Supabase for authentication and database services, Stripe for payments and billing, Resend for emails, hosting providers such as Vercel if used to host the app, and Google Analytics when analytics is configured.

These providers process information according to their own terms and privacy policies.

Cookies and local storage

DeepFlow may use cookies, localStorage, and similar browser technologies for login sessions, preferences, local app data, account features, and analytics.

You can control cookies and site storage through your browser settings, but clearing storage may remove local-only DeepFlow data or sign you out.

Data retention

Account data is kept while your account is active or as needed to provide the service, comply with legal obligations, resolve disputes, and maintain security.

You may contact hello@deepflownow.com to ask about account or data deletion. Local browser data can also be cleared through your browser settings, but doing so may remove local-only DeepFlow data.

User choices

Children's privacy

DeepFlow is not intended for children under 13. DeepFlow does not knowingly collect personal information from children under 13.

If you believe a child has provided personal information to DeepFlow, contact DeepFlow so the issue can be reviewed.

Security

DeepFlow uses reasonable safeguards to protect information. No system is 100% secure, and DeepFlow cannot guarantee absolute security.

You can help protect your account by using a strong password, keeping your login credentials private, and signing out on shared devices.

International users

If you use DeepFlow from outside the United States, your information may be processed in the United States or other locations where DeepFlow's service providers operate.

Changes to this policy

DeepFlow may update this Privacy Policy from time to time. Updated policies will be posted on this page with a new Last updated date.

Contact

Questions about this Privacy Policy can be sent to hello@deepflownow.com.