Privacy Policy · Flowwyn

1. Who we are

Flowwyn is a consumer AI workspace. This policy covers the website, beta applications, and consumer workspace at flowwyn.com. The private beta is by invitation for adults 18 or older who are physically located in the United States. The start date has not been confirmed.

Flowwyn is operated by an individual sole proprietor based in California, doing business under the name Flowwyn; it is not a separate company or legal entity. The operator decides how personal information is used to run Flowwyn. Business mailing address: 444 Alaska Avenue, Suite #CHT477, Torrance, CA 90503, USA. Contact support@flowwyn.com.

2. What we collect and why

Beta applications: Contact details, AI tools and spending, eligibility confirmations, and feedback preferences submitted through the linked Google Form. Used to select and contact beta participants. Google processes form submissions under its applicable terms.
Account information: Email, account identifiers, verification and sign-in records, settings, records of which Terms version you accepted and when, and invitation/eligibility information. Used to administer accounts and communicate with you.
Browser and security information: Session and random browser identifiers, request times, country code, and technical/security records. Used for sign-in, reliability, abuse prevention, and US eligibility. We do not collect precise GPS location for this check. Hosting providers receive connection information, which can include IP addresses and browser/request information.
Workspace content: Messages, AI replies, projects, notes, saved “About you” information, and reply context. Used to store and organize work and provide requested AI features.
Imports and files: Uploaded archives, supported attachments, filenames, metadata, retained source records, and extracted text. Used for imports, storage, and features you request. Importing alone does not send an archive to an AI model.
Usage and billing: Model choice and routing reason, task labels (including whether a conversation appears health-related), estimated and actual usage/charges, timing, outcomes, retries, balances, order references, refunds, and disputes. Used to bill accurately, resolve problems, improve estimates and model choice, and keep health-related conversations out of improvement copies.
Improvement copies and feedback: Messages, replies, context, associated usage information, ratings, and comments under the choices in section 4. Used to evaluate and adjust Flowwyn’s own rules, small classifiers, model choice, and estimates.
Support and safety: Communications, reports, relevant content, safety-check results, review/access records, and actions taken. Used for support, safety, review of decisions, and legal compliance.

Free-text content and archives can contain sensitive information or information about other people. Provide only information you are entitled to use. Avoid passwords, API keys, full payment details, government-work information, and unnecessary sensitive health or financial information. Health information is also covered by our Consumer Health Data Privacy Policy.

3. AI processing and recipients

For a reply, we send the AI model used for that request the material it needs. This may include your message, relevant earlier conversation and imported text, project notes, saved context, and extracted text from supported files. Changing models can send relevant earlier content to the new model’s provider. We do not need to send your entire archive for each reply.

OpenAI: OpenAI provides the beta’s reply models GPT-6.1-sol (our standard model) and GPT-6-luna, and its Moderation API. When used, OpenAI receives your request content and the technical information needed to process it. It also receives the text being safety-checked, even when another provider writes the reply. Its API terms and data controls apply.
Anthropic: Anthropic’s Claude Sonnet 5.5 is the planned backup reply model. When used, Anthropic receives your request content and the technical information needed to process it. Its commercial API terms and policies apply. Each reply shows the model that wrote it.
Waffo Prompt Sift: Before a request is sent to an AI model, the text being screened, which can include your message and context sent with it, is also sent to Waffo’s Prompt Sift service for content screening only. Waffo describes Prompt Sift as stateless: it screens the text without keeping it. Waffo is also the merchant of record for purchases (see section 5).
Automated moderation: The beta will check text before it is sent to an AI model and check each reply before it is shown. Before sending, your new message and any relevant context not already checked are checked by OpenAI’s Moderation API, by Waffo’s Prompt Sift, and against Flowwyn’s rules. Each AI reply is checked in full by Flowwyn’s own moderation, using OpenAI’s Moderation API and Flowwyn’s rules. These checks are not comprehensive scans of uploaded or stored files and are not a dedicated child sexual abuse material (CSAM) detection system. Paid AI access will remain unavailable until the checks are enabled and verified. This processing is separate from sharing for improvement.
DeepSeek, when enabled later: Off by default. Only after an active opt-in, relevant content is sent to DeepSeek's official service and processed in China. Accepting Terms alone does not enable it. You can turn it off for future requests; this does not recall content already sent.
Web search, when released: Queries and necessary context go to search services, initially planned to include Brave Search and appropriate model-provider search tools. DeepSeek search is only for opted-in users. Queries can contain information from your request. Opening results also sends page requests to the websites, normally from Flowwyn's systems. Search is not available in the initial release.

We do not sell chats or use them to train or fine-tune the general-purpose AI models that write replies. Improvement copies are used only to evaluate and adjust Flowwyn’s own rules and small classifiers, such as recognizing a message’s task type. Our policy is to use reply providers and improvement-review tools only under arrangements that do not permit training on your content, and we do not opt in to provider training.

No training does not mean no retention. Providers may retain or review content for abuse prevention, legal compliance, or feature operation. Provider retention depends on the endpoint, account settings, contracts, and safety or legal exceptions. We do not promise zero retention or instant removal of every provider copy when you delete a chat. See OpenAI API data controls and Anthropic API retention.

Providers may independently block requests, investigate abuse, retain records, suspend access, or report suspected unlawful activity to authorities under their policies and law. Flowwyn does not control those decisions or promise that providers never report content. Our own responsibilities remain.

4. Sharing to improve Flowwyn, and ratings

When you create an account, a separate option reads “Share conversations to help improve Flowwyn.” It is checked by default. You can uncheck it before creating your account, and you can turn it off or back on at any time in Settings → Your data → Privacy & data. Your choice does not affect your access to Flowwyn or what you pay.

Conversations that Flowwyn’s automatic task labels identify as health-related are excluded from improvement copies. The labels can miss some health content, and other sensitive information, such as details about religion, finances, or sex life, is not automatically excluded. If you do not want a conversation used for improvement, turn the option off before you send it and do not rate replies in it. See the Consumer Health Data Privacy Policy.

While the option is on, Flowwyn keeps separate improvement copies that may contain messages, replies, context, task type, model choice and reason, cost, timing, ratings, and feedback. During the beta, Flowwyn’s founder and AI tools the founder uses for this work, currently Anthropic’s Claude and OpenAI’s Codex, may review them to improve Flowwyn’s rules, model choice, and estimates. Those tools are used with settings or agreements that do not permit their providers to train models on the copies; the providers may keep the material for a limited time for safety and legal purposes under their own terms. Identifying information such as your email address is removed before review. For approved analysis, selected batches may be copied, with identifying information removed, to encrypted storage controlled by Flowwyn. Access is limited to this purpose, and reviews and batch copies are logged.

Removing account identifiers does not remove names or other personal information written in a chat. Review copies are not necessarily anonymous.

Turning the option off stops future automatic improvement copying. It does not delete copies already made or your chat history. You can ask support to delete your existing improvement copies without deleting your account or chats. Otherwise, existing copies have no automatic expiry and remain until they are deleted with the associated chat or account. We continue collecting usage statistics without chat content. Necessary service, billing, safety, support, and legally required processing continues.

Rating a reply shares that whole conversation with Flowwyn for improvement, even when the option is off. The rating control says so before you submit. Feedback copies follow the same review, exclusion, and deletion rules. A rating does not permit training general-purpose AI models.

Email support@flowwyn.com to request deletion of a chat, your account, or your existing improvement copies. The initial beta does not offer Temporary Chat.

5. Other recipients and disclosures

For the planned beta, one OVHcloud server in the eastern United States will run the website, application, and background work. Supabase will provide database storage. Files will be stored on the OVHcloud server’s disk, with nightly encrypted backups to a private Amazon Web Services (S3) storage bucket. Vultr is a standby server and receives workspace content only if we have to switch to it. Amazon Web Services (SES) sends transactional email. Support email is forwarded to Gmail, operated by Google. These providers receive the information needed for their functions and act on our instructions.

When purchases open, Waffo and its payment providers will process payment information for checkout, taxes, fraud prevention, receipts, and refunds. Flowwyn will receive transaction information needed to credit accounts and provide support, rather than full card details. The legal seller and payment privacy notice will be identified at checkout.

We disclose information only where applicable law permits or requires it, for example in response to valid legal process. Emergency disclosure of private communications must meet the applicable legal emergency standard. When the reporting conditions in 18 U.S.C. § 2258A are met, we report apparent child sexual abuse material, child sex trafficking, or online enticement of a minor to the National Center for Missing & Exploited Children (NCMEC) as soon as reasonably possible, and we preserve the reported material and required context for one year after the report, or longer where the law permits or requires. Access to preserved material is restricted. We may not notify you where the law prohibits it or notice could interfere with an investigation. A safety flag alone does not establish wrongdoing or a reporting obligation.

A business transfer may include relevant information, subject to applicable law, existing commitments, and required notice.

We do not sell chats or other personal information, use chats for advertising, or share information for cross-context behavioral advertising. The separate Flowwyn business product does not receive your consumer workspace merely because it shares the brand.

6. Cookies, browser storage, and analytics

These public information pages use self-hosted fonts and contain no embedded application form, analytics scripts, or advertising scripts. If you apply through an external Google Form, Google’s processing applies to that form.

The application uses cookies for sign-in sessions, a random browser identifier, and short-lived confirmation for sensitive account actions. Current email-sign-in code sets session cookies for up to 30 days, browser-identification cookies for up to one year, and reauthentication cookies for up to 15 minutes. Server-side expiry may end access sooner.

Browser local storage keeps theme/sidebar preferences, sign-in and notice hints, and application state. Tab storage supports pending sign-in and request recovery, including drafts or pending-action information where needed. Local storage can persist until cleared; tab storage normally lasts for that tab session. Clearing or blocking storage can sign you out or remove preferences and recovery information.

These pages and the application source contain no third-party advertising, session-replay, or marketing-analytics scripts. The application does collect the usage statistics described above; operational and hosting logs still exist.

Flowwyn does not track you across other websites and does not allow third parties to collect information about your activity on Flowwyn for that purpose. Because there is no such tracking to turn off, we do not change our practices in response to browser “Do Not Track” signals. We treat a Global Privacy Control signal as a request to opt out of any sale or sharing of personal information; we do not sell or share personal information in any case.

7. Retention and deletion

We retain account and workspace information to provide your account and keep the content you choose to store, subject to deletion and legal duties. Improvement and feedback copies, including local analysis copies, have no automatic expiry. They are deleted when the associated chat or account is deleted, or earlier at your request. Turning off the improvement option stops future automatic collection; it does not delete existing copies.

Original uploaded archives, imported chats, retained source records, attachments, and generated exports are separate copies. Deleting an archive alone does not erase imported conversations or improvement copies. An expired export download does not delete your workspace.

Chat attachments differ from imported archives. Original chat-attachment files are temporary. After a message is sent, Flowwyn attempts to delete its original files; included text and file information remain with the message. Unsent attachments expire after 24 hours and are cleaned up when you next use attachments. A failed file deletion may require later cleanup. During the beta, request attachment export content through support; automated account exports do not yet include it.

During the beta, request deletion of a chat, your account, or your existing improvement copies at support@flowwyn.com, preferably from your account email. We verify requests promptly and respond within 45 days of receiving them, explaining any extension the law permits. Deletion covers the relevant service content, attachments’ saved text and remaining original files, and associated improvement copies, including local analysis copies. Local analysis copies are reconciled with deletion records monthly and excluded from review as soon as a deletion is known. We send deletion requests to service providers that hold the content. Encrypted backups may stay protected from changes for a period, so deleted content leaves backups as they expire; if we restore from a backup, we re-apply recorded deletions before the restored data is used. Independently retained provider records may follow the provider’s own schedule.

Limited payment, tax, fraud, security, dispute, or legal records may be retained when required or justified for those purposes. Retained records are restricted to those purposes; a legal hold does not permit indefinite optional improvement use of all chats. Removing identifiers does not automatically make retained records anonymous.

Deleting Flowwyn data does not delete downloaded copies, material given to others, or independently held records at an original AI app. We cannot promise to control independent provider retention, but will meet our own deletion and assistance duties.

Safety-check records contain categories, scores, decisions, policy and model versions, digests, and timing, rather than the checked text. Our beta retention policy is to remove ordinary results after 30 days, resolved reports and their notes 90 days after the report is closed, and access-audit records after one year. Related access records may be removed earlier with a report or account. Account exports include your available moderation records, reports, notes, case events, and suspension history; they do not include internal access-audit records. Request other applicable records through support. Deletion remains subject to legal duties.

8. Security and locations

We use access restrictions and other safeguards intended to protect information. No internet service is completely secure. We do not claim end-to-end encryption, device-only processing, or that authorized reviewers cannot access chats.

US-only eligibility does not mean all processing or authorized access is US-only. Hosting, support, content screening, and provider operations may involve other countries. DeepSeek's planned opt-in involves China processing. Laws and safeguards can differ by location.

9. Choices and US state rights

You can turn off sharing for improvement, decline ratings, and choose whether to enable DeepSeek when offered. Some state privacy laws apply only to businesses above certain sizes; we offer the following rights to every user regardless of where you live: to know what personal information we hold about you and get a copy, to correct it, to delete it, and to withdraw consent you gave us. Send requests to support@flowwyn.com. Product exports may omit internal records; ask for those separately. Health information requests are described in the Consumer Health Data Privacy Policy.

We do not sell personal information, share it for cross-context behavioral advertising, use it for targeted advertising, or use it for profiling that produces legal or similarly significant effects. Where a state law gives you additional rights, such as limiting the use of sensitive information, we will honor them as that law requires.

We answer requests within 45 days of receipt and may extend once by 45 days if we tell you why. We may ask for information to verify your identity, or an authorized agent’s permission; do not send passwords, codes, or API keys. If we deny a request, you may appeal by replying to our decision or emailing support with the subject “Privacy appeal”; we answer appeals within 45 days and explain the result. If you disagree, you may contact your state Attorney General. We will not treat you differently for exercising these rights.

10. Children, changes, and contact

The beta is for adults 18 or older. We do not knowingly provide it to children. Contact support if you believe a child has supplied information so we can investigate and act.

We will update this policy when practices change and notify account holders by email and in-app notice at least 14 days before material changes take effect. Where a new use requires consent, we obtain it first. Changing this page alone will not authorize new uses of chats collected before the change, including training models on them.

Privacy and support: support@flowwyn.com.

Flowwyn 444 Alaska Avenue, Suite #CHT477 Torrance, CA 90503, USA

Related pages: Terms · Acceptable Use · Pricing · Consumer Health Data