Privacy Policy

The short version

The content you create lives on your device, not on our servers - because we do not run servers that hold your data. We have no user accounts, we never sell your data, and we do not run ads or track you across other apps.

Most Flowstate apps are offline-first: everything you have already saved works with no connection. Some reach the network for one specific purpose, like searching Apple Maps for a place to add in Worldly, and a few, like HogWatch, are clients for a service you already use and connect to it directly with your own credentials. Either way, nothing routes through us.

Who we are

Flowstate Industries LLC is a one-person studio based in the United States. If you have any questions about your privacy, you can reach us at support@flowstateindustries.com.

What we store, and where

The information you create in our apps is stored locally on your device using Apple's on-device storage. It is not uploaded to us, and we do not run servers that hold it.

Some apps connect to a third-party service that you configure with your own credentials, such as an API key. Those credentials are stored in the iOS Keychain on your device, and we never receive them or the data they return.

Where an app blocks other apps, as Rizen does after you wake up, it is built on Apple's Screen Time framework. You choose which apps to block in Apple's own picker, and the app receives only anonymous tokens standing in for them. It cannot see which apps you open, how long you use them, or anything inside them.

Photos and other content you add stay in each app's local storage on your device. Where an app does reach the network for your content, it is to look a place up with Apple Maps - either searching for what you typed, or resolving the name of a place you picked. Apple handles those lookups under its own terms, and nothing about them reaches us.

Because this data lives on your device, it is included in your own device backup, so a new phone restores it. That backup belongs to you and, if you use iCloud Backup, to your iCloud account. We never receive it and cannot read it.

Anonymous analytics

To understand which features are used and to fix problems, some of our apps collect anonymous, privacy-preserving product analytics through PostHog. These analytics:

• Are tied only to a random, per-install identifier - never your name, email, or an account.
• Carry almost nothing you write. Notes and photos are reduced to a simple presence flag, or left out entirely, and the money you enter is reported only as a range, such as $100-200, never as an exact figure. The narrow exceptions are named below.
• Are never used to track you across other apps or websites, and involve no advertising identifier.

Three narrow exceptions are worth naming plainly. A short label you choose from or type to categorize your own entries, such as a job title like Server or Bartender, can be included so we know which parts of an app get used. In Worldly, the country a visit is in is included, so we can see which parts of the world the app is used for; your coordinates, notes, photos, search text, and any state or city name are not. And for purchases, some apps record the price, currency, product, Apple transaction identifier, the proceeds a purchase produces, and a running lifetime revenue total exactly, because those figures come from the App Store rather than from you; other apps record which plan you chose and no amount at all.

The analytics library also records the ordinary technical context that comes with any app event: which screen was opened, app launches and backgrounding, your device model, iOS version, app version, locale, and time zone. And as with any request to any internet service, PostHog's servers see your device's IP address at the moment an event arrives. None of it is joined to a name or an account, because there is no account to join it to.

Several of our apps collect no analytics whatsoever. Summit has never contained an analytics SDK, and Clocked had its one removed outright in a 2026 update - not disabled, deleted, along with every line of code that called it. Neither app has an analytics switch in Settings because neither has anything to switch off. Where an app does still collect analytics there is currently no in-app toggle either, and what is collected is described here on this page, which every app links to from its own Settings. If that matters to you, say so and it will move up the list.

Payments

Purchases and subscriptions are processed by Apple through the App Store. We never see or store your payment details. Apple's privacy policy governs that transaction.

Who else is involved

We keep third parties to a minimum:

• Apple - the App Store handles payments, and some apps use Apple Maps for place search and your own iCloud where you choose to use it.
• PostHog - receives the anonymous product analytics described above, for the apps that use them. In HogWatch, PostHog is also the service your own API key connects to; that is your data moving between your phone and your own PostHog account, and it never passes through us.

For completeness: PostHog's iOS library also links a crash-reporting component, PLCrashReporter. Crash capture is off by default in that library and none of our apps switch it on, so no crash data is collected or sent. Some apps bundle openly licensed datasets: map boundary data from geoBoundaries, used under CC BY 4.0, and GeoNames peak data. Those ship inside the app and are never contacted while you use it.

We do not share your information with anyone else, and we do not sell data to anybody.

Your control over your data

Because your content lives on your device, deleting an app removes its data from that device. There is no account to close and we hold no copy, so there is nothing for us to delete on our end. If you made a device backup before deleting, that backup still holds the data until you delete or replace it; that backup is Apple's and we have no access to it.

One exception is worth naming, and it contains nothing about you. In Checkout, a single marker recording that a one-time introductory offer was already shown to you stays in your device's Keychain after the app is deleted, so the offer is not repeated, and because the Keychain can sync through iCloud it may be present on your other devices. It holds no earnings, no content, and no identifier, and nothing in it reaches us.

One honest caveat about the anonymous analytics described above: events already sent are held by PostHog, tied only to that random per-install identifier, which disappears the moment you delete the app. Deleting the app therefore stops all future events immediately, but we have no way to find or remove the past ones, because nothing links them back to you.

Several apps also let you export your data directly, for example as a CSV file. Where export exists it is free, and it stays free after a subscription lapses. Some apps have no export yet - Worldly is one, where the only thing you can take out today is a single visit shared as an image - and each app's own page says so plainly.

Children

Our apps are not directed at children under 13, and we do not knowingly collect personal information from them.

Changes to this policy

We may update this policy as our apps change. When we do, we will update the date at the top of this page.

Questions about this policy?