FluxTime Privacy Policy

This Privacy Policy explains how FluxTime ("FluxTime," "we," "us," or "our") collects, uses, discloses, and protects information when you use the FluxTime apps, website, cloud synchronization, Flux AI, connected apps, and related services (collectively, the "Services"). FluxTime is provided by the developer identified on its applicable Apple App Store product page.

By using the Services, you acknowledge the practices described in this Privacy Policy. Some optional features, such as calendar access, cloud sync, analytics where legally required, sending content to a third-party AI provider, or connecting a third-party AI app to your account, may also require a separate permission or choice.

1. Information We Collect

Account and authentication information

When you create or use a FluxTime account, we process your email address, an internal user identifier, authentication records, and account status. Password authentication is handled by Supabase. We do not store your plaintext password.

Content you create

Depending on how you use FluxTime, your content may include tasks, projects, goals, journals, notes, plans, categories, time and energy records, and related settings. Content is stored locally on your device. When cloud sync is available and enabled, synced content is also stored in our Supabase cloud database so it can be available across your devices.

Flux AI content

If you use Flux AI, we process your prompt, conversation context, and information returned by tools you ask Flux AI to use, such as relevant task or planning data. This information is transmitted through our Supabase Edge Function to the AI provider selected for the request. FluxTime does not use your prompts to train a FluxTime-owned AI model. AI providers process data under their own privacy terms and service settings.

Connected apps

If you connect a third-party AI app, such as Claude, to FluxTime through our MCP server, you sign in on our website and approve the connection. We record which app you approved, when you approved it, and the address it returns to, and we save your browser's time zone in your account so the app receives times in your local time. Each time the connected app makes a request, our server checks your Flux Pro status, reads your synced content with the access you approved, and returns the information the app asked for, such as goals, projects, tasks, events, reminders, journal entries, recorded time, and categories.

A connected app can only read your content unless you also let it make changes, either on the approval page or later in the FluxTime web app under Settings → General → Account. This is off by default and set separately for each app. With changes on, the app can create, change, complete, delete, and restore tasks, events, reminders, goals, projects, and journal entries in your synced content; it cannot change your categories or workflows. Changes are written only by our server on the app's behalf, never with the app's own access, and deleted items can be restored. Each time a connected app makes a change, we record which app made it, when, and which items it changed. This record is linked to your account and kept until you delete your account.

Calendar and reminder information

If you grant permission, FluxTime may access calendar or reminder information through Apple system frameworks to display, create, update, or synchronize events and reminders you request. You can revoke this permission in your device's system settings. We do not access this information without the applicable system permission.

Subscription and transaction information

Purchases are processed by Apple. We receive subscription product identifiers, status, purchase and expiration dates, transaction identifiers, environment information, and an app account token used to associate a subscription with a FluxTime account. We do not receive or store your full payment card details.

Analytics and diagnostic information

We use PostHog to understand product usage and improve the Services. Analytics may include an account identifier, email address after sign-in, subscription plan, feature interactions, app version, device and operating-system information, and approximate network-derived location. We use Firebase Crashlytics to receive crash reports and diagnostics, which may include crash logs, diagnostic identifiers, device model, operating-system version, app version, and technical information about the failure.

Communications and website information

When you register, we may provide your email address and internal user identifier to Loops so we can send account, service, support, and—where permitted—product communications. You can unsubscribe from optional emails using the link in those messages. When you visit our website, Vercel may process standard web request, analytics, and performance information, such as IP address, browser and device information, pages viewed, and timing data.

Website analytics and cookies

Our website also uses Google Analytics to understand how visitors find and use it. Google Analytics may collect pages viewed, referring sites, approximate location derived from your IP address, browser and device information, and interactions such as scrolls and outbound link clicks. With your permission, it stores first-party cookies (_ga and _ga_*) that distinguish repeat visits. We do not send your name, email address, or account content to Google Analytics, and we do not use it for advertising.

If you visit from the European Economic Area, the United Kingdom, or Switzerland, these cookies are not set unless you accept them in the cookie banner. Elsewhere, they are set by default and you can decline them in the banner. Until you accept, or after you decline, Google Analytics receives only cookieless signals without these identifiers. You can change your choice at any time in cookie preferences. Google Analytics event data is kept for 14 months.

2. How We Use Information

We use information to:

• create, authenticate, maintain, secure, and support your FluxTime account;
• provide local storage, cloud synchronization, backup, restore, and cross-device access;
• provide Flux AI responses and carry out the actions you request;
• provide connected apps you approve with access to read your synced content and, if you allow it, to make the changes you ask for, and keep a record of those changes;
• provide calendar, reminder, planning, and productivity features;
• process, verify, restore, transfer, and maintain subscription access;
• communicate about your account, support requests, service changes, and product updates;
• measure usage, diagnose crashes, prevent abuse and fraud, and improve reliability;
• comply with law, resolve disputes, and enforce our agreements.

3. How Flux AI Selects and Uses Providers

FluxTime currently routes Flux AI requests to DeepSeek for requests identified as coming from mainland China and to OpenAI for other regions. The routing decision may use country information supplied with the network request by our infrastructure. It is approximate and is not precise GPS location.

Only use Flux AI if you are comfortable with the relevant request content being processed by an external AI provider. The provider may retain or use information as described in its own policies and the service configuration applicable to FluxTime. FluxTime's other features remain subject to their own availability and access requirements.

4. When We Disclose Information

We disclose information only as needed to operate the Services, comply with law, protect rights and safety, or complete a business transaction. Our current service providers include:

When you connect a third-party AI app, we disclose the information it requests to that app at your direction. The app's provider, for example Anthropic for Claude, is not our service provider: it receives that information because you chose to connect it, and it processes the information under its own terms and privacy policy, which we do not control. See the Anthropic Privacy Policy for Claude.

We may also disclose information if reasonably necessary to comply with legal process; investigate fraud, abuse, or security incidents; protect users or the public; or as part of a merger, financing, acquisition, reorganization, or sale of assets, subject to appropriate confidentiality and notice requirements.

5. Legal Bases for Processing

Where applicable law requires a legal basis, we process information as necessary to perform our contract with you and provide the Services; based on your consent for optional permissions or processing; for our legitimate interests in securing, supporting, and improving FluxTime; and to comply with legal obligations. You may withdraw consent at any time, but withdrawal does not affect processing that was already lawful.

6. Data Retention and Account Deletion

We keep information only for as long as reasonably necessary for the purposes described here, including providing the Services, meeting legal obligations, resolving disputes, preventing fraud, and enforcing agreements. Retention varies by data type:

• Local content remains on your device until you delete it, erase app data, or uninstall the app.
• Account and synced content generally remain while your account is active or until you delete the content or account.
• Operational, security, analytics, diagnostic, and communication records are retained according to operational need and provider settings.
• AI providers may retain request information according to their policies and the service settings used by FluxTime.
• A connected app keeps its access until you remove it or delete your account. Information already sent to a connected app is retained by that app's provider according to its own policies.
• When you delete your FluxTime account, we delete the authentication account and associated synced customer content from our active systems. We may retain de-identified subscription lifecycle records and transaction identifiers where needed to process future Apple notifications, refunds, fraud controls, audits, or legal obligations. These retained records are no longer linked to your FluxTime user ID or app account token.

Deleting your FluxTime account does not automatically cancel an Apple subscription. You must separately manage or cancel the subscription through your Apple Account's subscription settings.

7. Security

We use reasonable administrative, technical, and organizational safeguards designed to protect information, including authenticated access and access controls for cloud data. However, no storage or transmission system can be guaranteed to be completely secure.

8. International Data Transfers

FluxTime and its providers may process information in countries other than the country where you live. Those countries may have different data-protection laws. Where required, we rely on recognized transfer mechanisms and contractual or organizational safeguards.

9. Your Choices and Rights

Depending on your location, you may have the right to:

• access, correct, export, or delete certain personal information;
• object to or restrict certain processing;
• withdraw consent for optional processing;
• accept or decline website analytics cookies at any time in cookie preferences;
• revoke calendar and reminder access in Apple system settings;
• turn off a connected app's ability to make changes, or remove its access, in the FluxTime web app under Settings → General → Account;
• unsubscribe from optional emails;
• delete your FluxTime account using the in-app account-deletion control;
• complain to your local data-protection authority.

We may need to verify your identity before completing a request. To exercise a right that is not available directly in the app, contact us at [email protected].

10. Sale, Advertising, and Tracking

We do not sell your personal information. FluxTime does not use your information for cross-company targeted advertising and does not display third-party advertising. We use service providers for analytics and operations as described in this Policy.

11. Children

FluxTime is not directed to children under 13, or a higher minimum age where required by local law, and we do not knowingly collect personal information from children below that age. If you believe a child has provided personal information, contact us so we can take appropriate action.

12. Changes to This Policy

We may update this Privacy Policy as the Services or legal requirements change. We will post the updated version at this location and revise the effective date. If a change is material, we will provide additional notice where required.

13. Contact Us

For privacy questions, requests, or complaints, email [email protected].