Privacy Policy

Last updated: 25 August 2026

FlowMyBrain ("we", "us") is an AI planning app built for people with ADHD. This policy explains what personal information we collect, how we use it, who we share it with, and the choices and rights you have. We aim to collect as little as possible and to make deletion genuinely one tap.

The short version. We store your account email and the things you put into the app (your brain dumps, tasks, notes, and — if you use those features — meeting and coaching content). To turn your words into tasks and plans, we send that text to AI providers in the United States. We never sell your data. You can export or permanently delete everything from within the app at any time.

Who we are

FlowMyBrain is operated by an independent developer based in South Australia. For any privacy question or request, contact [email protected].

What we collect

Account information — the email address you sign up with, and an encrypted password (we never see your password in plain text).
Content you create — brain dumps, tasks, projects, saved notes, meeting notes, email drafts, learning items, and coaching interactions. Some of this is sensitive: coaching and "energy" features record how you're feeling, and you may self-identify as having ADHD by using the app.
Voice recordings — only if you use voice capture. Audio is sent for transcription and is not retained after the transcript is produced.
Usage metadata — records of which AI features you used and when, so we can enforce fair-use limits and keep the service running. We do not use third-party advertising or tracking cookies.

How we use it

To provide the core features — turning your input into organised tasks, daily plans, searchable notes, and coaching.
To keep your account secure and to enforce usage limits.
To fix bugs and improve the app.

We do not sell your personal information, and we do not use your content to train our own or anyone else's AI models.

Who we share it with

We use a small number of trusted service providers to run the app. Because some are located overseas (primarily the United States), using these features involves disclosing the relevant content to recipients outside Australia.

Supabase	Database, authentication and file storage. Data is hosted in the Sydney, Australia region.
OpenAI (USA)	Receives the text of your brain dumps, planning inputs, saved notes and search context, plus voice audio for transcription, to generate tasks, plans, tags and summaries.
Anthropic (USA)	Receives coaching prompts to generate Daily Coach and ADHD Mode responses (paid tiers).
Tavily (USA)	Receives your search queries when you use AI Search.
Cloudflare	Serves the website and app securely (content delivery).

These providers act on our instructions and are bound by their own privacy and security commitments. We may also disclose information if required by law.

Your rights & choices

You are in control of your data:

Access & export — Settings → Export my data downloads everything we hold about you as a JSON file.
Deletion — Settings → Delete account permanently and immediately erases your account and all associated data (tasks, dumps, notes, coaching history, streaks and usage records). This cannot be undone. If you can't access the app, email [email protected] from your registered address and we will delete your account within 30 days.
Correction — you can edit your content in the app, or ask us to help.

Depending on where you live, you may have additional rights under the Australian Privacy Act (Australian Privacy Principles) or the EU/UK GDPR, including the right to complain to your local data protection authority.

Retention

We keep your information for as long as your account exists. When you delete your account, the underlying records are removed immediately by database cascade; routine backups are cycled out shortly after.

Security

Data is encrypted in transit (HTTPS). Every account's data is isolated at the database level so that one user can only ever read or change their own records. No method of storage is perfectly secure, but we work to protect your information.

Children

FlowMyBrain is not directed at children under 16, and we do not knowingly collect their personal information. If you believe a child has provided us data, contact us and we will delete it.

Changes

We may update this policy as the app evolves. Material changes will be reflected by the "last updated" date above and, where appropriate, an in-app notice.