Flospace OS is operated as Flospaceos. For questions, requests, or complaints, contact flowspacesupport@gmail.com.

This policy applies to everyone who uses Flospace OS, wherever you are in the world.

Account information: email address, name (optional), password (hashed; we never store it in plain text) or, if you sign in with Google, your Google account ID, name, and profile email. Also: birth date (optional), and your device timezone.

Content you create: everything you enter into the app, including journal entries, mood logs, goals, habits, focus session history, rituals, notes, learning entries, saved links, and any custom media or themes you upload or select.

Optional usage analytics: if you choose to enable product analytics, we use a pseudonymous account identifier to understand aggregate feature use, retention, and upgrades. We do not use tracking cookies or build cross-site profiles, and we never send your journal text, notes, habit names, mood entries, tasks, or other personal content to our analytics provider.

Push notifications: if you enable them, we store the browser-provided subscription endpoint needed to deliver notifications.

Payment information: if you subscribe to a paid plan, payment is handled by Paddle.com Market Limited, our merchant of record. We never see or store your card details; we only receive confirmation of your subscription status.

Bot protection: when you sign up, request a password reset, or ask for a new verification email, we use Cloudflare Turnstile to check that the request comes from a person. To do this, Cloudflare receives your IP address and basic browser and device signals. We do not use it for advertising.

Crash and error reports: if the app crashes or errors, technical diagnostic information may be sent to our error-monitoring tool to help us fix bugs.

• To provide the app and display your tracked data back to you
• To authenticate you and keep your account secure
• To protect sign-up and account recovery from automated abuse
• To send transactional emails, such as email verification and password reset
• To process payments and manage subscriptions if you upgrade
• With your optional analytics choice, to understand aggregate feature use and improve the app
• To fix bugs and crashes

We do not use your journal entries, mood data, or personal tracked content for advertising, and we never sell your data.

For users in the EU/UK, we process your data under these legal bases: performance of a contract, consent for optional features, and legitimate interest in keeping the service secure and functioning.

We use service providers to run the app. These providers process data on our behalf to deliver the service:

• Google - if you use "Continue with Google" to sign in
• Neon (Postgres) - account and content data storage
• Cloudflare R2 - file storage
• Cloudflare Turnstile - bot protection on sign-up, password reset, and verification-email requests
• Vercel - application hosting and domain infrastructure
• Resend - transactional email delivery
• Paddle.com Market Limited - payment processing and subscription management
• PostHog - optional pseudonymous product-usage statistics

We may also disclose information if required by law, or to protect the rights, safety, and security of Flospace OS or our users.

Free accounts: your data is retained for 1 year from your last active date. If you have not used the app in over a year, your account and data become eligible for deletion.

Accounts that have upgraded to a paid plan: your data is retained to keep your paid entitlement and app history available, unless you request deletion.

Wherever you are, you can ask us to access, correct, delete, or export your data.

To exercise these rights, email flowspacesupport@gmail.com. We will respond within a reasonable time and within any timeframe required by applicable law.

Flospace OS is not intended for children under 13. We do not knowingly collect personal data from anyone under 13.

We use one essential cookie to keep you signed in. It is required for the app to function and is not used for tracking.

Because Flospace OS is used worldwide and our infrastructure providers operate internationally, your data may be processed in countries other than your own.

Passwords are hashed and never stored in plain text. Your session is authenticated via a secure, httpOnly cookie. No system is perfectly secure, but we take reasonable technical measures to protect your data.

We do not currently send marketing emails. If we introduce them in the future, we will only do so with opt-in consent and an unsubscribe option.

We may update this policy as the app evolves. We will update the "Last updated" date above when we do. Material changes will be communicated via email or an in-app notice.

Questions about this policy or your data? Email flowspacesupport@gmail.com.