Privacy Policy

1. Information We Collect

We collect information that you provide directly to us when you use FlowMate:

• Account Data: Name, email address, and password when you create an account
• Financial Data: Income, expenses, budgets, categories, and financial records you enter
• Usage Data: How you interact with the service, features used, and preferences
• Payment Information: Processed securely through Stripe (we do not store credit card details)

2. How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve our services
• Process payments and manage subscriptions
• Generate financial insights and recommendations
• Send you notifications and updates (with your consent)
• Respond to your inquiries and provide customer support
• Detect and prevent fraud or abuse

3. Payments & Stripe

For Premium subscriptions, we use Stripe to process payments. Stripe handles all payment information securely and in compliance with PCI DSS standards. We only receive confirmation of successful payments and subscription status. We do not store or have access to your full credit card details.

4. Cookies & Local Storage

We use cookies and local storage to:

• Keep you logged in (session cookies)
• Remember your preferences
• Enable offline functionality (Progressive Web App)
• Improve service performance

You can control cookies through your browser settings. However, disabling cookies may affect some features of the service.

4a. Analytics & Usage Tracking

We use privacy-conscious analytics to understand how users interact with FlowMate and improve the service. We track:

• Page views and feature usage
• User actions (login, registration, exports clicked)
• Subscription status (free/premium)

We never track: Financial amounts, transaction notes, category names, budget details, or any sensitive financial data.

You can opt out of analytics tracking at any time through your account settings. Analytics are only enabled in production and are disabled in local/development environments.

5. Data Security

We implement industry-standard security measures to protect your data:

• All data is encrypted in transit (HTTPS)
• Passwords are hashed using bcrypt
• Database access is restricted and monitored
• Regular security audits and updates
• Secure session management

While we strive to protect your data, no method of transmission over the internet is 100% secure. We cannot guarantee absolute security.

6. Your Rights

You have the right to:

• Access: Request a copy of your personal data
• Correction: Update or correct inaccurate information
• Deletion: Delete your account and data at any time
• Export: Export your financial data (Premium feature)
• Objection: Object to certain processing of your data

To exercise these rights, contact us using the information below or use the account settings in your dashboard.

7. Data Retention

We retain your data for as long as your account is active or as needed to provide services. When you delete your account, we will delete or anonymize your personal data within 30 days, except where we are required to retain it for legal or regulatory purposes.

8. Third-Party Services

We use the following third-party services:

• Stripe: Payment processing (see their Privacy Policy)
• Hosting Provider: For secure data storage and service delivery

These services have their own privacy policies governing data handling.

9. Children's Privacy

FlowMate is not intended for users under the age of 18. We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new policy on this page and updating the "Last updated" date. You are advised to review this policy periodically.

11. Contact Us

If you have questions about this Privacy Policy or our data practices, please contact us:

• Email: privacy{{ parse_url(config('app.url'), PHP_URL_HOST) }}
• Through your account dashboard settings