Privacy Policy — TimeFlow

1. Introduction

This Privacy Policy explains how TimeFlow ("we", "us", or "our"), based in Warszawa, Poland, collects, uses, and protects your personal information when you use the TimeFlow application and related services (the "Service").

For any privacy-related questions, you can reach us at support@timeflowapp.app.

2. What Data We Collect

Account data — your email address and name.
Profile information — optional details such as avatar, bio, and preferences you add.
Usage data — the content you create in the app (tasks, goals, notes, etc.) and basic activity needed to operate the Service.
Payment information — processed securely via Stripe. We do not store your full card details on our servers.

3. How We Use Your Data

To provide, maintain, and improve the Service.
To process payments and manage subscriptions.
To send you essential service-related emails (e.g., account, billing, and security notices).

4. Data Storage

Your data is stored securely in Supabase, hosted on servers located within the European Union. We apply appropriate technical and organizational measures to protect it against unauthorized access, loss, or misuse.

5. Third-Party Services

We rely on a small number of trusted providers to operate the Service:

Supabase — database and authentication.
Stripe — payment processing.
Cloudflare — hosting and content delivery.

Each provider processes data only as needed to deliver their function.

6. Your GDPR Rights

If you are in the EU/EEA, you have the right to:

Access — request a copy of the personal data we hold about you.
Rectification — correct inaccurate or incomplete data.
Erasure — request deletion of your data ("right to be forgotten").
Portability — receive your data in a portable, machine-readable format.
Objection — object to certain processing of your data.

To exercise any of these rights, contact support@timeflowapp.app.

7. Data Retention

We keep your personal data for as long as your account is active. If you delete your account, your associated data is permanently deleted within 30 days, except where we are required to retain certain records to comply with legal obligations.

8. Contact

If you have any questions about this Privacy Policy or how we handle your data, please contact us at support@timeflowapp.app.

TimeFlow — Warszawa, Poland