Privacy Policy

Overview

InFlow is a notes and capture app that stores your vault on this device. Google Drive backup is optional. If you connect Drive, files go into your Google account under InFlow/, using the drive.file scope (only files InFlow creates). The developer does not run an InFlow server, does not sell data, and does not use ads or analytics SDKs.

You can use the app without signing in (Continue without Drive).

This website

This marketing site is a static Next.js export. It does not create accounts, does not include an analytics SDK in the source we ship, and does not receive your vault. Downloadable skill-pack files are public documents, not a telemetry channel.

Information the app handles

Content you create — notes, links, tasks, lists, media. Without Drive this stays in app-private storage. With Drive it is uploaded to your InFlow/ folder.

Profile fields you enter (display name, email, avatar choice) are stored in the local vault JSON and included in inflow-db.json if Drive is connected.

Google account details (only if you connect Drive) — display name, email, profile photo URL from Drive about.get, used to show who is connected. Not sent to an InFlow backend (there is none).

Link previews — if you save a web URL and the device is online, InFlow may GET that page for public Open Graph / Twitter metadata. Preview images stay as remote URLs; they are not copied into Drive.

Device permissions

Requested only when a feature needs them:

• Internet / network state — Drive sync, link previews, optional Wi-Fi-only upload
• Camera — photo or video for an entry
• Microphone — voice note (foreground service with a visible notification if the screen turns off)
• Notifications — reminders and the voice-recording notification
• Exact alarms / boot completed — fire and reschedule reminders you set

InFlow does not request location, contacts, SMS, call log, all-files access, or the advertising ID. Photo and file attach uses the system picker or camera.

What we do not collect

No advertising, analytics, crash-reporting, or third-party tracking SDKs. Android backup of app data is disabled (allowBackup="false"). The developer does not receive your notes, media, or Google token on a developer-operated server.

Where data is stored

This device
  files/inflow-vault-cache.json
  files/media-local/
  files/media-cache/

Your Google Drive (optional)
  InFlow/inflow-db.json
  InFlow/attachments/

Sync uses HTTPS to Google APIs. Files in Drive are covered by Google's privacy policy.

Skill pack and AI tools

The public skill pack is documentation. If you attach inflow-db.json to Claude, ChatGPT, or another model, that transfer is between you and that provider. InFlow does not perform it.

Sharing

InFlow does not sell personal information and does not share vault content with advertisers. Data leaves the device when you connect Drive, when you save a URL and the app fetches public preview metadata, or when you export a backup you chose to save.

Retention and deletion

• In the app: soft delete (Trash). Restoring keeps media. No permanent purge button in this version.
• On the device: uninstalling InFlow, or clearing the app's storage, removes the local vault cache and media cache.
• On Drive: InFlow does not delete your folder when you stop using the app. Delete InFlow in Drive and revoke access under Google Account → Security → Third-party access.

Children

InFlow is not directed at children under 13. Do not use it to collect information from children. Play listing targets 18+.

Contact

Privacy questions: thisisganesh353@gmail.com. See also FAQ and Support.