Privacy Policy
Effective date: 2026-09-13
Controller: Younhee Han, California, USA ("we")
Contact: support@reflowplanner.com
Reflow (the "app" — the mobile app and the web app at reflowplanner.com) is a personal planner that helps you plan a day and recover when the plan slips. This policy explains what the app collects, why, and how you stay in control.
1. What we collect
Only what you enter, or what the app produces while you use it.
| Category | Data | When |
|---|---|---|
| Account | Email address, password (stored hashed; we cannot read it) | Email sign-up |
| Social sign-in | The email address and identifier of your Apple or Google account. With Apple's Hide My Email, only the relay address | Apple / Google sign-up |
| Profile | Name (optional), device time zone | Onboarding |
| Goals | The "what brings you to Reflow" statements you pick | Onboarding |
| Planning data | Names, notes, estimates, scheduled and actual start/finish times, importance, deadlines, repeat rules, and completion / postpone / reschedule history of your areas, projects, tasks and time blocks | As you use the app |
| Settings | Notification, sound, haptics, display and language preferences; which one-time hints you have seen | When you change them |
| Day feedback | One feeling per day (too packed / just right / time to spare) and an optional note | End of day |
| Timer sessions | Start and end of completed focus-timer work sessions | When you use the timer |
| Live Activity token | An Apple push token used to keep the running-task card in sync across your Apple devices | When you start a task on iOS |
The app does not collect location, contacts, photos, advertising identifiers or usage analytics, and contains no analytics or advertising SDKs. Reminders are local notifications scheduled on your device. The only emails we send you are sign-up confirmation and password-reset codes — never marketing or newsletters.
2. Why we use it
- To create your account, sign you in and sync your planning data between your devices.
- To suggest a duration for a new task from how long your own similar tasks took before. This uses only your history and is never combined with other users' data.
- To re-plan the rest of your day when it slips.
- To keep the iOS Lock Screen card for the running task in the same state on your other Apple devices.
- To keep your account secure and prevent abuse.
We do not use your data for marketing, advertising, profiling or sale to third parties.
3. How long we keep it
| Data | Retention |
|---|---|
| Account, profile, planning data, settings, feedback | For as long as your account exists |
| Areas, projects and completed tasks you delete | Kept 90 days (they still inform the duration suggestion), then purged automatically |
| Timer sessions | Rolling 28 days; older sessions are deleted automatically |
| Live Activity token | Discarded when that task's card ends |
| Backups | Our current hosting plan (Supabase Free) keeps no automatic backups, so deletion is immediate and complete. If we move to a plan with backups, their retention (typically 7 days) will be stated here |
Deleting your account deletes everything above immediately.
4. Sharing
We do not share your data with third parties, except where the law requires it.
5. Processors and international transfer
Your data is stored and processed on the infrastructure of these providers:
| Provider | Role | Location | Data |
|---|---|---|---|
| Supabase, Inc. | Database and authentication hosting (Amazon Web Services us-west-2, Oregon, USA) | United States | Everything in section 1 |
| Apple Inc. | Sign in with Apple; Live Activity push delivery (APNs) | United States | Apple account identifier, push token, the task name and times shown on the card |
| Google LLC | Google sign-in | United States | Google account email and identifier |
| Resend, Inc. | Sending sign-up confirmation and password-reset emails | United States | Email address, the message (a one-time code) |
| Netlify, Inc. | Hosting the web app (reflowplanner.com) | United States | IP address and request logs |
Transfers happen over encrypted connections (TLS) when you use the app. If you are in the EEA or UK, our legal basis is the performance of our contract with you (providing the app) and our legitimate interest in keeping it secure; you can delete your data at any time.
6. Your rights
- Access and correction: everything is visible and editable inside the app.
- Deletion: Profile → Account → Delete account removes your account and all data immediately.
- Questions or requests: write to support@reflowplanner.com; we respond without undue delay.
The app is not directed at children under 13 (under 14 in the Republic of Korea), and we do not knowingly collect their data.
California residents: you may ask what personal information we hold about you, ask for it to be deleted, and you will not be treated differently for exercising these rights. We do not sell or share personal information for cross-context behavioural advertising. Requests: support@reflowplanner.com or the in-app account deletion.
7. Data that stays on your device
- Your sign-in session token — in the mobile app encrypted in the device's secure store (Keychain / Keystore), in the web app in the browser's site storage
- Display, theme, language and autocomplete preferences; the hints you have seen
- Scheduled local notifications
- The Lock Screen card's action queue in the App Group storage shared with the iOS widget extension
Uninstalling the app removes all of it. On the web, signing out or clearing the site's data in your browser does.
8. Security
All traffic is encrypted with TLS. The database enforces row-level security so each user can only reach their own rows. Passwords are stored hashed. Server access is limited to the operator.
9. Changes
If this policy changes, we will show the change in the app's About & privacy screen and at the published URL at least 7 days before it takes effect.