Privacy policy

Scope, controller, and contact

This Privacy Policy explains how FlowNotch handles personal information when you visit flownotch.com, create an account, download or use the FlowNotch Mac application, purchase a license, use the marketplace, contact support, or otherwise interact with FlowNotch.

FlowNotch is an independently operated software product operated by Rohit Kumar under the name FlowNotch, based in Germany. In this policy, “FlowNotch,” “we,” “us,” and “our” refer to Rohit Kumar as the operator of the FlowNotch product and services. FlowNotch is the controller for personal information it determines how and why to process. Certain providers, including Lemon Squeezy, may act as independent controllers for information they process under their own legal obligations and privacy notices. For privacy questions or requests, email support@flownotch.com.

Information we collect

We collect information in the following circumstances:

• Accounts: your email address, authentication records, account ID, and basic account activity required to provide your dashboard and marketplace library.
• Purchases and licenses: order identifiers, product or license type, purchase status, price, currency, billing country, customer email, activation limit, and a one-way hash of your license key. Lemon Squeezy collects and processes your payment details, billing name, tax information, and invoice data.
• License activation: a SHA-256 hash derived from an internal device identifier, an optional device name, macOS version, app version, activation instance ID, and activation and validation timestamps.
• Downloads and marketplace: app or marketplace item downloaded, version, time, country, user agent, and a daily-changing hash of your IP address. For account-based marketplace activity, we also record claims, purchases, refunds, downloads, and hashed device installations.
• Communications: information you provide in support requests, license-reset requests, emails, surveys, or other messages, together with our replies.
• Email preferences: subscription status, campaign delivery events, bounces, complaints, and unsubscribe choices.
• Website and session data: essential authentication and security cookies, request information, and limited technical logs needed to operate, protect, and troubleshoot the website.

Core app data and integrations

The core Mac app does not include behavioral analytics, advertising trackers, or third-party crash-reporting SDKs. Core productivity data such as clipboard history, timers, and local settings is intended to remain on your Mac unless a feature clearly asks you to connect or send data to an external service.

Optional integrations and third-party widgets may exchange information with services you choose to connect, such as calendar, task, music, developer, automation, or AI services. Those services process information under their own privacy policies. Review the permissions and privacy information shown by an integration before enabling it.

How and why we use information

We use personal information to:

• Provide accounts, downloads, licenses, marketplace access, and customer support.
• Process orders, issue invoices, handle legally required refunds or payment reversals, and prevent payment or license abuse.
• Operate, secure, troubleshoot, and improve the website and services.
• Send essential service messages and, where permitted, product or marketing updates.
• Comply with tax, accounting, consumer-protection, and other legal obligations.

Where the GDPR applies, our legal bases are performance of a contract, compliance with legal obligations, legitimate interests in operating and securing FlowNotch, and consent where required, including for optional marketing communications.

When we rely on legitimate interests, we consider the necessity of the processing and its impact on your rights. We do not use personal information for solely automated decisions that produce legal or similarly significant effects.

Service providers and sharing

We do not sell personal information. We share information only as needed with providers that help operate FlowNotch, including:

• Lemon Squeezy: merchant of record for checkout, payments, taxes, invoices, refunds, and license-key issuance.
• Cloudflare: website delivery, security, authentication, database, APIs, and file delivery.
• Email delivery providers: transactional, support, and marketing email.

We may also disclose information when legally required, to protect users or the service, to investigate abuse, or in connection with a business reorganization or transfer. Any successor must respect this policy or notify you of material changes.

Providers acting on our instructions may process information only for the contracted purpose and subject to appropriate data-protection obligations. Providers acting as independent controllers are responsible for their own processing under their privacy notices.

Data retention and security

We retain information only as long as reasonably necessary for the purposes described here. Account and marketplace records are generally retained while your account remains active. Purchase, invoice, tax, payment-reversal, fraud-prevention, and license records may be kept longer where required by law or needed to establish legal claims. Support records are retained as needed to resolve requests and maintain service history. We aim to delete or anonymize personal information when it is no longer required. We periodically review retained information and apply deletion or anonymization where appropriate.

We use technical and organizational safeguards designed to protect personal information against unauthorized access, loss, misuse, alteration, or disclosure. These safeguards include encrypted HTTPS connections, one-way hashing of license keys and device identifiers, database row-level access controls, limited service credentials, restricted administrative access protected by multi-factor authentication, validation and rate limiting of public requests, and audit records for administrative actions.

We limit collection to information reasonably needed to operate FlowNotch and review service providers before relying on them for personal-data processing. If we become aware of a personal-data breach, we will investigate, contain, and provide notifications to affected people and authorities when required by applicable law. No online service can guarantee absolute security.

International transfers

FlowNotch is operated from Germany and uses providers that may process information in other countries. Where required, we rely on appropriate transfer safeguards, such as adequacy decisions, standard contractual clauses, or another lawful transfer mechanism.

Your privacy rights

Depending on where you live, you may have rights to access, correct, delete, restrict, object to processing, or receive a portable copy of your personal information. You may withdraw consent at any time without affecting earlier lawful processing and may opt out of marketing using the unsubscribe link in an email.

To exercise a right, email support@flownotch.com. Describe the right you wish to exercise and the account or purchase concerned. We may need to verify your identity and may retain information where a legal obligation or overriding lawful basis requires it. We will respond within the period required by applicable law. If you are in the EEA, you may also complain to your local data-protection authority, including the competent German supervisory authority.

Children and policy changes

FlowNotch is not directed to children under 16, and we do not knowingly collect their personal information. Contact us if you believe a child has provided information so we can review and delete it where appropriate.

We may update this policy as FlowNotch changes. We will post the revised version here, update the effective date, and provide additional notice when required by law.

Contact

For privacy questions, requests, or complaints, contact support@flownotch.com. The controller is Rohit Kumar, operating under the name FlowNotch, based in Germany.