Privacy Policy
Last updated:
1. Scope and Controller
This Privacy Policy describes how Snowline LLC ("Snowline", "we", "us", or "our") handles information when you use Flow Keyboard and related services (collectively, the "Service").
Flow Keyboard is available on macOS, Windows, iOS, and Android. The Service is designed with a privacy-first architecture that minimizes the collection and retention of user voice content and generated text.
2. Data We Do Not Store
We do not intentionally store the following user content in Flow's account or application databases:
- Voice recordings or audio clips after processing is complete
- Transcriptions and polished output text after processing is complete
3. Data Processed to Provide the Service
We process the following limited data to operate, secure, and improve the Service:
- Account information -- Your email address and an internal account identifier are used for sign-in, account management, and subscription access
- Purchase information -- We receive product, subscription status, transaction, refund, and entitlement information from the applicable app store or payment provider. We do not receive your full payment-card details
- Voice input processing -- Audio is transmitted to our servers and converted into text output, then discarded after processing
- No default surrounding-text context -- By default, we do not collect nearby text context (for example, text before or after the cursor) from app input fields
- Voice editing of selected text -- When you select text and use voice editing, the selected text is sent to our servers along with your voice input to process the edit. Both the selected text and audio are discarded after processing is complete
- Service delivery metadata -- Minimal technical metadata (for example, request timing and operational status) may be processed to deliver and secure the Service
- Support feedback -- If you choose to submit feedback, we retain the information you submit, which may include your note, a transcript you choose to include, and app/device diagnostic metadata. The Android app does not attach the underlying audio recording to this feedback
- Diagnostics and limited analytics -- Product builds may send scrubbed crash and error diagnostics and limited app, device, feature, and product-interaction data to contracted service providers. Product-interaction analytics are sent only where the corresponding local preference was enabled; crash diagnostics and service-configuration requests may operate automatically
- Third-party processors -- Contracted cloud/AI subprocessors may process user content only to fulfill the request. Their handling is governed by our contracts and configured service terms
- Connectivity requirement -- Voice features require an active internet connection
Website analytics
We use Google Analytics on our website to understand visits and actions such as opening a guide, selecting a platform, clicking a download link or visiting an app store. Google Analytics loads automatically and may use cookies and browser identifiers, and process page URLs, referral information, browser/device details and approximate location. Our custom website events record page category, language, guide topic, button location and target platform; they do not include Flow voice recordings, transcriptions, dictionary entries or account credentials. Website analytics is separate from the analytics preference in the Flow app. A download click does not establish that an installation occurred.
Google privacy information · Google Analytics browser opt-out
4. Microphone and Keyboard Permissions
The Service requests microphone access to process voice input. On iOS, keyboard Full Access permission is required by the iOS extension model for microphone/network operation.
- Microphone use is user-triggered for voice input sessions
- Audio is sent for processing and discarded after completion
- Secure text fields are protected by platform-level controls
- You can revoke permissions at any time in device settings
5. Why Full Access Is Needed on iOS
iOS requires Full Access for keyboard extensions that need network connectivity and microphone-based functionality. Flow Keyboard uses this permission to process voice input and return output.
Full Access enables:
- Microphone capture for voice input in the keyboard extension
- Network requests required to process audio and return text
Full Access does not grant us:
- Access to secure/password fields restricted by iOS
- Blanket access to your device files or unrelated app data
- Retention of your voice content after processing
Flow Keyboard does not use Full Access for tracking or profiling.
6. Legal Basis for Processing
Where required by applicable law (including GDPR/UK GDPR), we process information under one or more of the following bases:
- Performance of contract -- to provide the voice-to-text service you request
- Legitimate interests -- to maintain security, reliability, and abuse prevention
- Legal obligations -- where processing is required by law
- Consent -- where consent is required (for example, microphone permission)
7. Data Retention
Flow's application services do not intentionally persist voice content or generated text in account or application databases after processing. The content is handled for the time needed to return the requested result; contracted cloud/AI processors handle it under their configured service terms and our agreements.
The app may store certain history items locally on your device (for example, local recordings or transcription history used for product features). This local data is under your control on your device and is not retained by us on our servers.
Account information, purchase records, support feedback, security records, and diagnostic or analytics data are retained only for the periods reasonably necessary for the purposes described above, provider configuration, dispute resolution, fraud prevention, and applicable legal obligations.
8. International Data Transfers
Your data may be processed in countries other than your own. Where required, we implement appropriate safeguards for cross-border transfers, including contractual protections with processors.
9. Third-Party Services
| Service | Purpose | Data Processed | Retention |
|---|---|---|---|
| Cloud AI subprocessors | Voice-to-text processing and text refinement | Audio; user-selected text in edit mode | Limited to request processing under configured service terms and contracts |
| App stores and payment providers | Subscriptions, entitlement, refunds, and fraud prevention | Account and purchase information; not full payment-card details | Financial, legal, support, and fraud-prevention needs |
| Diagnostics and product analytics providers | Reliability, service configuration, and limited product analytics | Scrubbed errors and limited app, device, account, and interaction data | Only as reasonably necessary for these purposes under our configured retention settings |
Service providers process information on our behalf under contractual controls. Network information may be used by providers to operate and secure their services and may yield an approximate region. We do not sell personal information, use advertising trackers, or use this information for cross-context behavioral advertising.
10. Security Measures
We use reasonable technical and organizational safeguards designed to protect data during transit and processing:
- In transit — All communication between your device and our servers uses encrypted connections (HTTPS/TLS)
- At rest (local) — Transcription history is stored on your device in a secure local database
- Server-side — Flow's application services are designed not to write voice content or generated text to account or application databases after processing
No method of transmission or processing is completely secure, but we continuously improve our controls.
11. Your Privacy Rights
Depending on your location, you may have rights including access, deletion, correction, portability, restriction, objection, and withdrawal of consent. The in-app Delete Account action deactivates your Flow identity and signs out its active sessions. You may also use our account deletion request page to request deletion of the account and associated personal information. We may retain limited account, transaction, security, or support records where reasonably necessary for legal obligations, fraud prevention, disputes, or enforcement of our agreements.
California residents may have rights under CCPA/CPRA, including the right to know and delete personal information and the right to non-discrimination. We do not sell personal information and do not share personal information for cross-context behavioral advertising.
12. Children's Privacy
The Service is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child submitted personal information to us, contact us and we will address the report promptly.
13. Changes to This Policy
We may update this Privacy Policy from time to time. We will post updates on this page and revise the "Last updated" date. Changes become effective when posted unless otherwise required by law.
14. Contact
If you have questions about this Privacy Policy or privacy rights requests, contact:
- Email: service@snowline.ai
- Operator: Snowline LLC