Flow

Privacy Policy

Effective date: October 12, 2025
App: Flow
Company: Friday Lunch LLC ("we," "us," "our")

Flow helps you stretch better without collecting much personal data. This policy explains what we collect, how we use it, and the choices you have.

Summary (quick read)

  • No accounts. You don't need to sign up.
  • On-device by default. Your name and age are stored on your device and are not sent to our servers (we don't run any).
  • Analytics only. We send pseudonymous usage analytics to our processors (PostHog and Google Firebase) to improve the app.
  • No HealthKit. We do not access HealthKit or other sensitive Apple frameworks.
  • No ads & no sale/sharing. We don't run ads, sell personal data, or "share" it for cross-context advertising.
  • Kids. Flow is not for children under 13.

What we collect

You provide (stored on your device only)

  • Name, Age. Used for personalization inside the app. We don't transmit these to our servers (we don't have any).

Automatically collected (sent to analytics processors)

  • App usage & diagnostics: Screens viewed, buttons tapped, feature usage, app version, device model/OS version, and coarse context like country/region inferred from IP by the provider.
  • Providers: PostHog and Google Firebase Analytics.
  • We don't intentionally send your name/age to analytics.

We do not collect: Health data (HealthKit), motion/fitness, location, contacts, photos, microphone, camera, calendars, reminders, or precise identifiers beyond what analytics providers generate (e.g., an app-scoped device identifier).

How we use data

  • Provide & improve Flow. Understand which features work, fix issues, and guide product decisions.
  • Paywall performance. We use Superwall to render the paywall and measure general conversion (pseudonymous events only).
  • Support & safety. Detect abuse and maintain app integrity.

Processing & storage

  • No backend. Friday Lunch LLC doesn't run its own servers for Flow.
  • On-device storage. Name and age live on your device until you delete them or uninstall the app.
  • Analytics processors. PostHog and Google Firebase process usage data on their infrastructure, which may be located in the United States and/or other countries.

Disclosures & third parties

We don't sell personal data and we don't "share" it for cross-context behavioral advertising.

We disclose data only to:

  • Analytics: PostHog; Google Firebase Analytics (usage/diagnostics).
  • Paywall tooling: Superwall (events about paywall views/presses).
  • Legal: If required by law, to comply with legal process, or to protect rights, safety, and security.

We do not give HealthKit data to any third party (and we don't collect HealthKit in the first place).

Ads & tracking

  • No IDFA today. We do not use the Advertising Identifier (IDFA) or track you across other companies' apps/websites.
  • If this changes: We will show Apple's App Tracking Transparency (ATT) prompt and update this policy before enabling cross-app tracking.

Children's privacy

Flow is not intended for children under 13. We do not knowingly collect personal information from children under 13. If you believe a child provided data, contact us and we'll delete it.

Data retention

  • On-device data (name, age): Kept on your device until you delete it or uninstall the app.
  • Analytics data: Retained by our processors for the period necessary to provide analytics and improve the app (they may keep aggregated or de-identified data longer per their policies).

Security

We use reasonable technical and organizational measures, including transport encryption (TLS) for analytics transmissions and platform protections provided by iOS. No method of transmission or storage is 100% secure.

Your choices

  • Delete local data: You can uninstall the app (and optionally clear any app data within iOS settings).
  • Analytics: If you'd like to request that we minimize analytics associated with your device, contact us and we'll work with our providers to honor the request as feasible.

Because Flow has no accounts and stores your name/age on-device, typical access/correction/portability requests may be limited.

International users

Our analytics and paywall processors may process data outside your country. By using Flow, you understand your usage data may be transferred to and processed in these locations.

Changes to this policy

We may update this policy as the app evolves (for example, if we add AI-generated routines or IDFA). We'll post the new policy in-app or on our website with a new "Effective date."

Contact us

Questions or requests? Email privacy@fridaylunch.com

Apple App Store "Privacy Nutrition Label" (draft guidance)

  • Data Not Collected (Linked to You): Contact Info (Name, Age) — not collected because it remains on device and isn't transmitted.
  • Data Not Linked to You (Collected): Usage Data (product interaction), Diagnostics (app performance/crash telemetry if enabled by providers).

Final labels depend on your exact analytics event schema and provider settings. If you later add AI or IDFA, you'll need to update the label accordingly.

Optional future-proof sections

  • AI features (planned): If we introduce AI-generated routines later, we'll disclose the provider, what is sent (if anything), and whether prompts/outputs are used to train models. By default, we'll require an in-app notice/update to this policy before enabling it.
  • IDFA/tracking (planned): If enabled in the future, the ATT prompt will appear and you can deny tracking.
Built with v0