FluxTime Privacy Policy

This Privacy Policy explains how FluxTime ("FluxTime," "we," "us," or "our") collects, uses, discloses, and protects information when you use the FluxTime apps, website, cloud synchronization, Flux AI, and related services (collectively, the "Services"). FluxTime is provided by the developer identified on its applicable Apple App Store product page.

By using the Services, you acknowledge the practices described in this Privacy Policy. Some optional features, such as calendar access, cloud sync, analytics where legally required, or sending content to a third-party AI provider, may also require a separate permission or choice.

1. Information We Collect

Account and authentication information

When you create or use a FluxTime account, we process your email address, an internal user identifier, authentication records, and account status. Password authentication is handled by Supabase. We do not store your plaintext password.

Content you create

Depending on how you use FluxTime, your content may include tasks, projects, goals, journals, notes, plans, categories, time and energy records, and related settings. Content is stored locally on your device. When cloud sync is available and enabled, synced content is also stored in our Supabase cloud database so it can be available across your devices.

Flux AI content

If you use Flux AI, we process your prompt, conversation context, and information returned by tools you ask Flux AI to use, such as relevant task or planning data. This information is transmitted through our Supabase Edge Function to the AI provider selected for the request. FluxTime does not use your prompts to train a FluxTime-owned AI model. AI providers process data under their own privacy terms and service settings.

Calendar and reminder information

If you grant permission, FluxTime may access calendar or reminder information through Apple system frameworks to display, create, update, or synchronize events and reminders you request. You can revoke this permission in your device's system settings. We do not access this information without the applicable system permission.

Subscription and transaction information

Purchases are processed by Apple. We receive subscription product identifiers, status, purchase and expiration dates, transaction identifiers, environment information, and an app account token used to associate a subscription with a FluxTime account. We do not receive or store your full payment card details.

Analytics and diagnostic information

We use PostHog to understand product usage and improve the Services. Analytics may include an account identifier, email address after sign-in, subscription plan, feature interactions, app version, device and operating-system information, and approximate network-derived location. We use Firebase Crashlytics to receive crash reports and diagnostics, which may include crash logs, diagnostic identifiers, device model, operating-system version, app version, and technical information about the failure.

Communications and website information

When you register, we may provide your email address and internal user identifier to Loops so we can send account, service, support, and—where permitted—product communications. You can unsubscribe from optional emails using the link in those messages. When you visit our website, Vercel may process standard web request, analytics, and performance information, such as IP address, browser and device information, pages viewed, and timing data.

2. How We Use Information

We use information to:

• create, authenticate, maintain, secure, and support your FluxTime account;
• provide local storage, cloud synchronization, backup, restore, and cross-device access;
• provide Flux AI responses and carry out the actions you request;
• provide calendar, reminder, planning, and productivity features;
• process, verify, restore, transfer, and maintain subscription access;
• communicate about your account, support requests, service changes, and product updates;
• measure usage, diagnose crashes, prevent abuse and fraud, and improve reliability;
• comply with law, resolve disputes, and enforce our agreements.

3. How Flux AI Selects and Uses Providers

FluxTime currently routes Flux AI requests to DeepSeek for requests identified as coming from mainland China and to OpenAI for other regions. The routing decision may use country information supplied with the network request by our infrastructure. It is approximate and is not precise GPS location.

Only use Flux AI if you are comfortable with the relevant request content being processed by an external AI provider. The provider may retain or use information as described in its own policies and the service configuration applicable to FluxTime. FluxTime's other features remain subject to their own availability and access requirements.

4. When We Disclose Information

We disclose information only as needed to operate the Services, comply with law, protect rights and safety, or complete a business transaction. Our current service providers include:

We may also disclose information if reasonably necessary to comply with legal process; investigate fraud, abuse, or security incidents; protect users or the public; or as part of a merger, financing, acquisition, reorganization, or sale of assets, subject to appropriate confidentiality and notice requirements.

5. Legal Bases for Processing

Where applicable law requires a legal basis, we process information as necessary to perform our contract with you and provide the Services; based on your consent for optional permissions or processing; for our legitimate interests in securing, supporting, and improving FluxTime; and to comply with legal obligations. You may withdraw consent at any time, but withdrawal does not affect processing that was already lawful.

6. Data Retention and Account Deletion

We keep information only for as long as reasonably necessary for the purposes described here, including providing the Services, meeting legal obligations, resolving disputes, preventing fraud, and enforcing agreements. Retention varies by data type:

• Local content remains on your device until you delete it, erase app data, or uninstall the app.
• Account and synced content generally remain while your account is active or until you delete the content or account.
• Operational, security, analytics, diagnostic, and communication records are retained according to operational need and provider settings.
• AI providers may retain request information according to their policies and the service settings used by FluxTime.
• When you delete your FluxTime account, we delete the authentication account and associated synced customer content from our active systems. We may retain de-identified subscription lifecycle records and transaction identifiers where needed to process future Apple notifications, refunds, fraud controls, audits, or legal obligations. These retained records are no longer linked to your FluxTime user ID or app account token.

Deleting your FluxTime account does not automatically cancel an Apple subscription. You must separately manage or cancel the subscription through your Apple Account's subscription settings.

7. Security

We use reasonable administrative, technical, and organizational safeguards designed to protect information, including authenticated access and access controls for cloud data. However, no storage or transmission system can be guaranteed to be completely secure.

8. International Data Transfers

FluxTime and its providers may process information in countries other than the country where you live. Those countries may have different data-protection laws. Where required, we rely on recognized transfer mechanisms and contractual or organizational safeguards.

9. Your Choices and Rights

Depending on your location, you may have the right to:

• access, correct, export, or delete certain personal information;
• object to or restrict certain processing;
• withdraw consent for optional processing;
• revoke calendar and reminder access in Apple system settings;
• unsubscribe from optional emails;
• delete your FluxTime account using the in-app account-deletion control;
• complain to your local data-protection authority.

We may need to verify your identity before completing a request. To exercise a right that is not available directly in the app, contact us at support@fluxtime.io.

10. Sale, Advertising, and Tracking

We do not sell your personal information. FluxTime does not use your information for cross-company targeted advertising and does not display third-party advertising. We use service providers for analytics and operations as described in this Policy.

11. Children

FluxTime is not directed to children under 13, or a higher minimum age where required by local law, and we do not knowingly collect personal information from children below that age. If you believe a child has provided personal information, contact us so we can take appropriate action.

12. Changes to This Policy

We may update this Privacy Policy as the Services or legal requirements change. We will post the updated version at this location and revise the effective date. If a change is material, we will provide additional notice where required.

13. Contact Us

For privacy questions, requests, or complaints, email support@fluxtime.io.