Legal

Privacy Policy

Last updated: June 11, 2026

FlowLearn is built to be calm, focused, and respectful of your data. This policy explains who we are, what information we collect, why we collect it, how we store and share it, and the privacy rights and choices you have.

FlowLearn is operated by Jasper McEligott, an individual sole developer based in the United States ("FlowLearn", "we", "us", or "our"). For the purposes of data protection law, Jasper McEligott is the data controller responsible for your personal information. This policy applies to the FlowLearn iOS app and to our website at flowearn.app.

If you have any questions about this policy or your data, you can reach us at any time at [email protected].

Information we collect

We collect only what we need to run FlowLearn and give you a good experience. That includes:

• Profile information. The display name and avatar you choose to identify yourself in the app.
• Learning preferences and settings. Your choices such as your daily goal, appearance, and reminder settings.
• Learning activity. Your lessons, progress, streaks, XP, and which topics you study, so we can sync your progress and personalize what you see.
• Content you create. The topics and prompts you give FlowLearn to generate lessons, and your chat history with the app.
• Subscription status. Whether you have an active subscription and at what tier. We do not receive your card or payment details.
• Diagnostics. Basic, aggregated app performance, crash, and diagnostic information that helps us keep FlowLearn stable.
• Support correspondence. If you email us, we keep your messages and contact details so we can help you and follow up.

We do not sell your personal data, and we don't use it to build advertising profiles.

How we use your information

We use the information above to:

• Provide, sync, and personalize the Service — run the app, sync your progress through iCloud, and tailor what you see to your activity and preferences.
• Generate lessons and power chat — turn the topics and prompts you provide into lessons and conversational responses.
• Maintain streaks and track progress — keep your streaks, XP, and learning history accurate over time.
• Process subscriptions — confirm your subscription status and unlock the features you've paid for.
• Keep the app stable and secure — diagnose crashes, monitor performance, prevent abuse, and protect the integrity of the Service.
• Respond to support requests — answer your questions and resolve issues you report.

Legal bases for processing

If you are in the European Economic Area (EEA) or the United Kingdom, we rely on the following legal bases under the GDPR and UK GDPR to process your personal information:

• Performance of a contract. To provide the Service you sign up for, including syncing your progress, generating lessons, and managing your subscription.
• Legitimate interests. To keep the app stable and secure, prevent abuse, understand aggregate performance, and improve FlowLearn — balanced against your rights and freedoms.
• Consent. Where we ask for it, such as for optional features. You can withdraw consent at any time.
• Legal obligation. To comply with applicable laws and respond to lawful requests.

AI features and processing

When you generate a lesson or chat with FlowLearn, the topic or prompt you provide is sent to FlowLearn's server-side processing service — a Cloudflare Worker — and on to third-party AI providers solely to produce your result.

To protect that pipeline, requests are validated with Apple App Attest and are subject to rate limits and usage quotas, and the AI provider secrets are never shipped inside the app. We don't use your prompts to train third-party models beyond what's needed to return your result.

How your data is stored

Your progress is stored on your device and synced through your private iCloud account using Apple's CloudKit. We do not have access to your iCloud credentials, and the operator cannot read your private CloudKit data.

Requests to our processing service are protected by Apple App Attest so that only genuine, unmodified copies of the app can reach our server.

Sharing and disclosure

We share personal information only as needed to run FlowLearn, and only with service providers acting as processors or sub-processors on our behalf:

• Apple. Hosts your private CloudKit data and processes App Store purchases.
• Adapty. Manages and reports your subscription status.
• AI providers. Receive your topics and prompts solely to generate your lessons and chat responses.
• Cloudflare. Runs the Worker that brokers requests to those AI providers.

We may also disclose information where we believe in good faith it is necessary to comply with the law, enforce our terms, or protect the rights, safety, and security of our users, the public, or FlowLearn.

We do not sell your personal data.

Data retention

We keep your personal information while your account is active and while it remains in your iCloud. You can delete your account and associated cloud data at any time from Settings → Delete account in the app, which removes your data from FlowLearn. Some aggregated diagnostic information that does not identify you may be retained to keep the Service stable and secure.

Security

We use reasonable technical and organizational measures designed to protect your personal information — including App Attest verification, rate limiting, and keeping provider secrets off the device. However, no method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

International data transfers

FlowLearn is operated from the United States, and your information may be processed there and in other countries where our service providers operate. If you are in the EEA or the UK, we take steps to ensure appropriate safeguards are in place for such transfers, consistent with applicable data protection law.

Your privacy rights

GDPR / UK (EEA and UK users). If you are in the EEA or the UK, you have the right to:

• Access the personal information we hold about you.
• Rectify information that is inaccurate or incomplete.
• Erase your personal information ("right to be forgotten").
• Restrict processing in certain circumstances.
• Data portability — receive your data in a portable format.
• Object to processing based on our legitimate interests.
• Withdraw consent at any time where we rely on consent.
• Complain to your local data protection supervisory authority.

California (CCPA / CPRA). If you are a California resident, you have the right to:

• Know what personal information we collect and how we use it.
• Delete the personal information we hold about you.
• Correct inaccurate personal information.
• Opt out of the sale or sharing of personal information — note that we do not sell or share your personal information.
• Non-discrimination for exercising any of your privacy rights.

How to exercise your rights. You can exercise these rights by emailing us at [email protected] or by using the in-app controls: delete your account and cloud data from Settings → Delete account, edit your profile details, and toggle reminders, sounds, and haptics at any time.

Children's privacy

FlowLearn is intended for general audiences and is not directed to children under 13. We don't knowingly collect personal information from children where prohibited by law. If you believe a child has provided us personal information, contact us at [email protected] and we'll remove it.

Third-party links

FlowLearn and our website may contain links to third-party sites and services. We are not responsible for their content or privacy practices, and their own privacy policies apply to any information you provide to them.

Changes to this policy

We may update this policy from time to time. When we do, we'll revise the "Last updated" date above. Significant changes will be reflected in the app or on our website.

Contact

Privacy questions? Email us at [email protected].