Privacy Policy

Last updated: April 15, 2026

This Privacy Policy explains how Flow Practice ("we", "us", "our") collects, uses, and protects your information when you visit flowpractice.io or use our services. We take privacy seriously - especially in mental health - and built Flow Practice to give you full control over your data.

Plain-English summary: We only collect what we need to contact you about our launch and process your payment. We don't sell your data. We don't use your notes to train AI. You can delete everything at any time by emailing hello@flowpractice.io.

1. Information we collect

When you interact with flowpractice.io, we collect:

Account information: your name, email address, and preferred contact method when you sign up for early access.
Payment information: if you choose to become an early adopter, Stripe (our payment processor) collects and processes your payment data. We never see or store your full card number.
Usage data: pages you visit, time spent, clicks, and referring source. Collected via Meta Pixel and standard web analytics.
Device information: browser type, operating system, screen size, and general location (country / region).

2. How we use your information

To email you when Flow Practice launches and keep you informed about early-access updates.
To process early-adopter payments and issue refunds.
To respond to your questions and provide customer support.
To understand which messages and features resonate, so we can build a better product.
To comply with legal obligations.

3. Who we share your information with

We share limited data only with service providers who help us run Flow Practice:

Stripe - payment processing (governed by Stripe's Privacy Policy).
Google - lead capture and analytics (Google Apps Script, Google Analytics).
Meta (Facebook) - advertising attribution via Meta Pixel.
Vercel - hosting of our website.

We do not sell your personal information to anyone. We do not share your data with data brokers or advertisers beyond standard attribution pixels.

4. Mental health data - our commitment

Flow Practice is being built for the mental-health space, which requires a higher bar:

We will never use your therapy notes, session recordings, or reflections to train AI models.
All in-app content (once Flow Practice launches) will be encrypted at rest and in transit.
You will always control what your therapist sees. Private entries stay private.
You will always be able to export or permanently delete your data.

5. Cookies and tracking

We use essential cookies to keep the site functional and analytics cookies to measure how visitors interact with the landing page. You can disable cookies in your browser settings. Meta Pixel is used for advertising attribution; you can opt out of interest-based ads via your Meta account settings.

6. Your rights (GDPR / CCPA)

Depending on where you live, you have the right to:

Access the personal information we hold about you.
Correct inaccurate information.
Delete your information (right to be forgotten).
Object to or restrict processing.
Data portability (receive your data in a machine-readable format).
Opt out of the sale or sharing of personal information (we don't sell, so this is already the case).

To exercise any of these rights, email us at hello@flowpractice.io. We will respond within 30 days.

7. Data retention

We keep your contact information until you ask us to delete it or until it's no longer needed for the purposes above. Payment records are kept for the period required by applicable tax and accounting laws (typically 7 years).

8. International data transfers

Your data may be transferred to and processed in countries other than your own, including the United States. We use service providers that comply with standard contractual clauses or equivalent safeguards where applicable.

9. Children's privacy

Flow Practice is not intended for children under 16. We do not knowingly collect personal information from children. If you believe we have inadvertently collected information from a child, please contact us immediately and we will delete it.

10. Security

We use industry-standard security measures to protect your data. However, no internet transmission is 100% secure. If you have reason to believe your data has been compromised, please contact us at hello@flowpractice.io.

11. Changes to this policy

We may update this Privacy Policy from time to time. When we do, we'll update the "Last updated" date at the top of this page. Material changes will be communicated to you by email where possible.

12. Contact us

Questions or concerns about privacy? Email us: hello@flowpractice.io