Privacy Policy

This Privacy Policy describes how FlowPrompt ("we," "us," or "our") collects, uses, and protects information in connection with the FlowPrompt iOS application (available on the Apple App Store) and the FlowPrompt web platform located at flowprompt.app (collectively, "the Service"). This policy applies to all users of both the iOS app and the web platform, regardless of where in the world you access them. We built FlowPrompt with a strong privacy-by-default philosophy: the iOS app requires no account, stores all video and script data locally on your device, and never transmits your recordings to any external server. The web platform collects only the minimum information needed to send you product updates and communicate with you about the product. By using FlowPrompt — whether on iOS or on the web — you acknowledge that you have read and understood this Privacy Policy. If you do not agree with any part of this policy, please discontinue use of the Service. This policy was last updated on March 18, 2026. We will update this page when our practices change and will note the revision date at the top of this section.

We collect different categories of information depending on which part of the Service you use. **iOS App — Local Data Only** The iOS app does not require you to create an account or provide any personal information to use its core features. Scripts you type or paste into the app are stored exclusively in the app's local data container on your device. Video recordings are saved to the app's internal Documents folder or to your device's Photos library, depending on your settings. None of this content is transmitted to us. When you use the camera and microphone, the app processes all video and audio data in real time on your device using Apple's AVFoundation framework. No camera feed, microphone input, or recorded video is transmitted to FlowPrompt servers at any point. **Web Platform — Account Signup** If you sign up for access to the FlowPrompt web teleprompter tool or our newsletter, we collect your first name, last name, and email address through the web form. We may also ask how you plan to use the product (for example, YouTube content, corporate presentations, or personal use) to help us understand our user base and improve the product. This information is stored securely and used only for the purposes described in Section 3. **Device & Technical Information** When you visit flowprompt.app, standard web server logs may capture your IP address, browser type, operating system, and the pages you visit. This information is used for security monitoring and basic analytics and is not linked to your identity. **In-App Purchase Data** When you complete an in-app purchase on iOS, Apple's StoreKit framework handles all payment processing. We receive a purchase receipt confirming that a transaction occurred and which product was purchased. We do not receive your credit card number, billing address, Apple ID, or any other financial information.

We use the information we collect for a limited set of specific purposes. **To Provide the Service** Local data on your iOS device (scripts, recordings, settings) is used solely by the app itself to deliver the teleprompter and video recording features. We have no access to this data and therefore do not "use" it in any server-side sense. **To Communicate With You** If you provide your email address through the web platform, we use it to send you product updates, new feature announcements, creator tips, and occasional promotional content related to FlowPrompt. We do not send spam or sell your email to advertisers. You can opt out of marketing emails at any time. **To Improve the Product** Aggregate, anonymized data about how users interact with the web platform (such as which pages are visited most often) may be used to inform product decisions. This data cannot be linked to you personally. **To Confirm Purchases** Purchase receipts provided by Apple's StoreKit are used to verify that you have purchased Pro or Creator tier access and to unlock the corresponding features on your device. We do not store payment data. **To Respond to Inquiries** If you contact us by email, we use your contact information and the content of your message to respond to your question or request.

The FlowPrompt iOS app requests access to your device's front camera, rear camera, and microphone in order to provide its primary function: recording video of yourself while you read from a teleprompter overlay. **When Camera Access Is Used** Camera access is activated only when you tap the "Record + Prompt" button to begin a recording session. The live camera feed is displayed in the app as a real-time preview so you can see yourself while reading. The feed is also captured and saved as a video file when you are actively recording. The camera is never accessed in the background, while the app is closed, or at any time other than during an active recording session. **When Microphone Access Is Used** Microphone access is used simultaneously with camera access to capture audio during your recording sessions. The audio is encoded and saved as part of your video file on your device. We do not stream, analyze, or transmit microphone audio to any external service. **Revoking Permissions** You can revoke camera and microphone permissions at any time by going to Settings > Privacy & Security > Camera (or Microphone) on your iOS device and toggling off access for FlowPrompt. If camera access is revoked, the recording feature will be unavailable, but you can still use the Prompter Only mode to scroll through your script on screen without recording. **No Background Monitoring** FlowPrompt does not access your camera or microphone while the app is in the background or when you are not actively using it. iOS system-level indicators (the orange dot for microphone and green dot for camera) will appear whenever these sensors are active, providing you with a system-level privacy indicator independent of our application.

All video and audio recordings created with FlowPrompt are stored exclusively on your device. They are never uploaded to FlowPrompt servers, never transmitted over a network connection by the app, and never processed by any cloud-based service we operate. **Where Videos Are Stored** Depending on your app settings, completed recordings are saved either to the app's internal Documents folder (accessible only within the app) or exported to your device's Photos library. You can configure this preference in the app's Settings screen. Videos saved to Photos are accessible through Apple's Photos app and any other app you grant Photos access to. Videos saved only to the app's internal storage are accessible only through FlowPrompt's in-app gallery. **User Control Over Recordings** You have complete control over your recordings at all times. You can delete individual recordings from within the app's gallery, or delete all app data at once by uninstalling FlowPrompt from your device. If you have saved videos to your Photos library, you can delete them from Photos like any other photo or video. **Sharing Videos** If you choose to share a recording using the iOS share sheet — for example, uploading it to YouTube, posting it to TikTok, sending it via email, or saving it to iCloud Drive — the sharing action is initiated entirely by you. Once a video leaves your device through a sharing action, it is governed by the privacy policy of the destination platform or app. FlowPrompt has no involvement in, visibility into, or responsibility for how destination platforms handle your content after you share it. **No Cloud Backup by FlowPrompt** FlowPrompt does not operate any cloud storage infrastructure for user recordings. iCloud backup of app data (if any) is governed by Apple's iCloud privacy practices and your own iCloud settings — this is an Apple service, not a FlowPrompt service.

FlowPrompt offers optional one-time in-app purchases (Pro and Creator tiers) through the Apple App Store. All purchase transactions are processed entirely by Apple and are subject to Apple's App Store Terms of Service and Apple's Privacy Policy. **What Apple Handles** Apple collects and processes all payment information, including credit card numbers, billing addresses, and Apple ID credentials. FlowPrompt never receives, stores, or has access to any of this financial data. **What We Receive** When you complete a purchase, Apple's StoreKit framework provides our app with a cryptographically signed receipt confirming that a specific product was purchased by a user on this device. We use this receipt to verify your purchase and unlock the corresponding tier of features within the app. The receipt contains product identifiers and a transaction ID, but does not contain your identity, payment method, or contact information. **Restoring Purchases** Your purchases are tied to your Apple ID. You can restore your purchases on any device signed in with the same Apple ID by using the "Restore Purchases" option in the app. This process re-validates your purchase receipts with Apple — no FlowPrompt account is required. **Refund Policy** FlowPrompt does not process refunds directly. All refund requests for App Store purchases must be submitted to Apple through reportaproblem.apple.com. Apple's refund policies govern all transactions.

If you provide your email address through the web platform at flowprompt.app, you are opting in to receive communications from FlowPrompt. We take this trust seriously and commit to using your email address only in ways that benefit you. **Types of Emails We Send** We may send product announcements when new features are released, creator tips and tutorials on how to get better results with FlowPrompt, occasional promotional offers related to FlowPrompt upgrades, and responses to any support or inquiry emails you send us. **Frequency** We do not send high-frequency email blasts. Most users receive no more than a few emails per month, and often less. **How to Unsubscribe** Every marketing email we send includes an unsubscribe link at the bottom. Clicking that link will immediately remove you from our marketing list. You can also request removal by emailing us directly at jackenhaiti@gmail.com with the subject line "Unsubscribe." We will process your request within 5 business days. Note that unsubscribing from marketing emails will not affect transactional communications (such as responses to your support inquiries). **No Third-Party Sharing** Your email address is never sold, rented, traded, or shared with any third-party marketing services. We do not use your email to target you with ads on other platforms.

FlowPrompt does not sell, rent, or trade your personal information to third parties. We do not share your data with advertisers, data brokers, or analytics companies. **Apple (In-App Purchases)** We use Apple's StoreKit framework for in-app purchases. Apple processes all payment transactions and is an independent data controller for that data. Apple's privacy practices are governed by Apple's own Privacy Policy. **Email Service** If we use an email service provider to deliver newsletters or product updates, that provider processes your email address solely for the purpose of delivering the emails we send. They are contractually prohibited from using your data for their own marketing purposes. **Legal Requirements** We may disclose information if required to do so by law, in response to a valid court order, subpoena, or government request, or when we believe in good faith that disclosure is necessary to protect our rights, protect your safety or the safety of others, investigate fraud, or comply with a legal obligation. **Business Transfers** In the event of a merger, acquisition, or sale of substantially all assets, your personal information may be transferred as part of that transaction. We will notify you via email and/or a prominent notice on our website of any change in ownership or control of your information. **No Third-Party Analytics SDKs** The FlowPrompt iOS app does not currently embed any third-party analytics or advertising SDKs. We do not use Google Analytics, Firebase Analytics, Mixpanel, Amplitude, or similar tracking services in the iOS app. The web platform may use basic server-side logging but does not use client-side tracking scripts tied to your identity.

We take reasonable and appropriate measures to protect your information from unauthorized access, alteration, disclosure, or destruction. **Local Device Security** All video recordings, scripts, and app data on the iOS app are stored within the app's sandboxed container on your device. iOS enforces strict app sandboxing — other apps cannot access FlowPrompt's data unless you explicitly share it. The security of data on your device is also protected by the device's own lock screen and encryption (which Apple provides at the hardware level when you use a passcode). **Web Platform Security** The FlowPrompt web platform is served exclusively over HTTPS, meaning all data transmitted between your browser and our servers is encrypted in transit using TLS. Web form submissions (such as your email signup) are transmitted over this secure connection. **No Cloud Database for User Content** Because FlowPrompt does not store your scripts or recordings on any server, there is no cloud database for user-created content that could be breached. The only personal data we hold server-side is the email list from web signups. **Limitations** No method of data transmission or storage is 100% secure. While we use commercially reasonable security practices, we cannot guarantee the absolute security of any data. If you believe your data has been compromised, please contact us immediately at jackenhaiti@gmail.com.

We retain different types of data for different periods depending on the nature of the data and our operational needs. **Local Device Data** Scripts, recordings, and settings stored by the iOS app on your device persist until you delete them manually, clear the app's data through iOS Settings, or uninstall the app. We have no control over or visibility into data stored on your device. Uninstalling the app from your device removes all locally stored app data from that device. **Email List** If you provide your email address through the web platform, we retain it in our email list until you unsubscribe or request deletion. Upon your request, we will remove your email address within 5 business days. We do not retain email addresses beyond the point at which they are no longer useful for communication. **Web Server Logs** Standard web server logs (IP address, pages visited, timestamps) may be retained for up to 90 days for security and diagnostic purposes, after which they are purged. **Purchase Receipts** We retain purchase receipt data (product identifier, transaction ID) as long as necessary to support your purchase history and to process restore-purchase requests. We do not retain financial data.

FlowPrompt is not directed at children under the age of 13. The Service is intended for users who are 13 years of age or older. We do not knowingly collect personal information from children under 13 through the web platform or through any other means. If you are a parent or guardian and you believe your child under the age of 13 has provided personal information to us — for example, by signing up for the web newsletter — please contact us immediately at jackenhaiti@gmail.com. We will take prompt steps to delete that information from our systems. For users between the ages of 13 and 18, we encourage parental involvement in their use of the Service. Although the iOS app does not collect personal data in the course of normal use, parents and guardians should be aware that the app has access to the camera and microphone when recording features are used. We comply with the Children's Online Privacy Protection Act (COPPA) to the extent applicable. Because our web platform requires an email address for signup, and because we do not have a mechanism to verify the age of web visitors, we rely on users to confirm they are 13 or older when they provide their information. If we become aware that we have collected information from someone under 13 without verifiable parental consent, we will delete that information immediately.

Regardless of where you live, you have certain rights regarding the personal data we hold about you. We are committed to honoring these rights. **Right to Access** You can request a copy of the personal data we hold about you. For most users, this consists solely of your email address and the name you provided at signup. To make an access request, email us at jackenhaiti@gmail.com with the subject "Data Access Request." **Right to Correction** If any information we hold about you is inaccurate or incomplete, you have the right to request that we correct it. Contact us and we will update your information promptly. **Right to Deletion** You may request that we delete your personal information at any time. For web platform users, this means we will remove your email address and any associated profile information from our systems. We will process deletion requests within 30 days. Note that deletion of your email address will remove you from all communications. **Right to Opt Out of Marketing** You can opt out of marketing emails at any time using the unsubscribe link in any email we send or by contacting us directly. Opting out of marketing communications does not delete your account data. **Right to Data Portability** Upon request, we will provide you with a copy of your personal data in a commonly used machine-readable format. To exercise any of these rights, contact us at jackenhaiti@gmail.com or call 407-409-8836.

If you are a California resident, you have specific rights under the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA). **Right to Know** You have the right to know what personal information we have collected about you, the categories of sources from which we collected it, the business or commercial purpose for collecting it, and the categories of third parties with whom we share it. Based on the information in this Privacy Policy, the personal information we collect is limited to email addresses and names provided through the web signup form, and purchase receipt data from Apple's StoreKit. **Right to Delete** You have the right to request deletion of your personal information. We will honor deletion requests within 45 days of receipt (or notify you if we need an extension, which we may take up to an additional 45 days). Certain information may be exempt from deletion under CCPA if we need it to complete a transaction, maintain security, or comply with a legal obligation. **Right to Opt Out of Sale** We do not sell your personal information and we have not sold personal information in the preceding 12 months. Therefore, there is no sale to opt out of. If this practice ever changes, we will update this policy and provide a prominent "Do Not Sell or Share My Personal Information" link on our website. **Right to Non-Discrimination** We will not discriminate against you for exercising any of your CCPA rights. We will not deny you the Service, charge you different prices, or provide a different level of service because you exercised a privacy right. **How to Submit a Verifiable Consumer Request** To exercise your CCPA rights, contact us at jackenhaiti@gmail.com or call 407-409-8836. We may need to verify your identity before processing your request by asking you to confirm your email address or provide other identifying information we already have on file.

If you are located in the European Economic Area (EEA), the United Kingdom, or Switzerland, the General Data Protection Regulation (GDPR) and applicable local data protection laws apply to our handling of your personal data. **Legal Basis for Processing** We process your personal data only when we have a lawful basis to do so. For web signup data (email, name), our legal basis is your consent — you chose to provide this information when signing up. For purchase-related data, our legal basis is the performance of a contract (delivering the features you purchased). For server logs, our legal basis is legitimate interest in maintaining the security and functionality of our web platform. **Data Subject Rights** As an EEA, UK, or Swiss resident, you have the right to access the personal data we hold about you; the right to rectify inaccurate or incomplete data; the right to erasure ("right to be forgotten"); the right to restrict processing in certain circumstances; the right to data portability; the right to object to processing based on legitimate interests; and the right to withdraw consent at any time (without affecting the lawfulness of processing before withdrawal). **No International Transfer of Personal Data** FlowPrompt does not transfer your personal data to countries outside the EEA or UK except as necessary to deliver the email communications you have consented to. If we ever engage an email service provider outside the EEA, we will ensure appropriate safeguards are in place (such as Standard Contractual Clauses). **Data Protection Authority** If you believe we have not handled your data in accordance with GDPR, you have the right to lodge a complaint with your local supervisory authority. However, we encourage you to contact us first at jackenhaiti@gmail.com — we will do our best to resolve your concern directly. **Data Protection Officer** Given the limited scale of our data processing, we are not required to designate a formal Data Protection Officer. For all GDPR-related inquiries, contact: jackenhaiti@gmail.com.

FlowPrompt is available worldwide through the Apple App Store and the web platform at flowprompt.app. This Privacy Policy applies to all users regardless of their country of residence. **Data Location** The only personal data we hold on our servers is email addresses and names submitted through the web platform. This data is stored on servers in the United States. By using the web platform and providing your email address, users outside the United States consent to the transfer and processing of their data in the United States, where data protection laws may differ from those in their home country. **Video and Script Data** Because all video recordings and scripts are stored on your local device and are never transmitted to our servers, there is no international data transfer of your creative content. Your recordings stay on your device regardless of where you are in the world. **Applicable Law** While we respect applicable international privacy laws (including GDPR and CCPA as described above), this policy is primarily governed by the laws of the State of Florida, United States. If any provision of this policy conflicts with the mandatory privacy laws of your jurisdiction, those mandatory laws will take precedence to the extent required.

We may update this Privacy Policy from time to time as our practices evolve, as new features are added to FlowPrompt, or as legal requirements change. When we make material changes to this policy, we will take reasonable steps to notify you. **How We Notify You of Changes** For users who have provided an email address, we may send an email describing significant changes. For all users, the updated policy will be posted at flowprompt.app/privacy and the "Last Updated" date at the beginning of this document will be revised to reflect the date of the most recent changes. **What Constitutes a Material Change** Material changes include changes to what personal information we collect, changes to how we share or use personal information, changes that affect your rights, or changes in our contact information for privacy matters. Minor formatting changes, clarifications that do not alter the substance of the policy, or corrections of typographical errors are not considered material changes. **Your Continued Use** Your continued use of FlowPrompt after any changes to this policy have been posted constitutes your acknowledgment of and agreement to the updated terms. If you do not agree with a revised policy, you should discontinue use of the Service and, if applicable, request deletion of your personal data as described in Section 12. This policy was last updated: March 18, 2026.

If you have any questions, concerns, or requests related to this Privacy Policy or the way we handle your personal data, please reach out to us. We are committed to responding promptly and transparently. **Email** jackenhaiti@gmail.com **Phone** 407-409-8836 **Mailing / Registered Address** FlowPrompt is currently operated as an independent developer application. For formal legal correspondence, please contact us via email first and we will provide further address details if required. We aim to respond to all privacy-related inquiries within 5 business days. For GDPR data subject requests, we will acknowledge your request within 72 hours and complete it within 30 days (or notify you of a permitted extension). For CCPA verifiable consumer requests, we will acknowledge your request within 10 business days and complete it within 45 days.