Effective Date: October 15, 2026
This Privacy Policy explains how the independent developer of Flow Note (“Flow Note,” “Developer,” “we,” “us,” or “our”) processes information when you use the Flow Note mobile application, its features, and related services (collectively, the “App”).
By using the App, you acknowledge the practices described in this Privacy Policy. Your use of the App is also governed by the Flow Note Terms of Use.
Flow Note is an audio-note and transcription application. It can record audio, create speech-to-text transcripts, organize and search recordings, generate optional AI summaries and translations, export text or PDF files, and provide optional auto-renewable subscriptions.
Flow Note does not require you to create an account. Most persistent note content is stored within the App's local storage on your device. Some features necessarily disclose limited information to third parties:
Apple may receive audio and related information when Apple Speech performs recognition over the network.
OpenAI receives selected text and request information when you have enabled AI text processing and request a summary or translation.
Apple processes product, purchase, transaction, and entitlement information through StoreKit.
Meta/Facebook SDK services receive automatic app-event and related technical information. Advertising identifier collection is disabled.
Our startup network check discloses ordinary network metadata to flowainote.com.
Google may process technical information when you open legal pages hosted on Google Sites.
A destination selected by you receives content that you export or share.
We do not sell personal information for monetary compensation. We do not use the App to display third-party advertising. Depending on the law where you live, certain disclosures to analytics or platform providers may still be treated as a “share” or similar regulated activity even when no money is exchanged.
Depending on the features you use, the App may create and store the following information locally:
Recording titles, file names, dates, timestamps, durations, source-language selections, and audio-file paths.
Live and final speech-to-text transcripts.
Audio recordings and recording segments.
AI-generated summaries and translations.
Semantic paragraph groupings, transcript tokens, search indexes, and cached text used to organize and search your recordings.
Text or PDF export files generated at your request.
Recording-usage and quota information.
Subscription-entitlement and displayed-price cache information provided through StoreKit.
Local preferences, including whether you have enabled AI text processing.
This information is primarily stored in the App's sandboxed files, SQLite database, preferences, or Keychain on your device. We do not operate a server-side Flow Note account or a server-side library of your notes and recordings.
The App requests microphone access to capture audio notes and speech-recognition access to create transcripts. If you use transcription, the App processes:
Live microphone audio or prerecorded audio files.
The language or locale selected or resolved for recognition.
Recognition configuration, such as dictation and punctuation preferences.
Partial and final transcript results returned by Apple Speech.
The App does not require every recognition request to remain on-device. Apple Speech may therefore send and process live or prerecorded audio over the network, depending on device capabilities, language support, network conditions, and Apple's service behavior.
When you have enabled AI text processing and request a summary or translation, the App sends a request to the OpenAI API. The request may include:
Selected note or transcript text.
Instructions needed to perform the requested summary or translation.
The source or requested output language.
The requested OpenAI model and generation settings.
Generated output returned by OpenAI.
Ordinary network and technical information, such as IP address, device/network metadata, request time, and service logs generated by OpenAI.
The App sends text derived from your notes or speech transcripts to OpenAI for these features. It does not send audio files to OpenAI.
According to OpenAI's published API Data Controls, data sent to the OpenAI API is not used to train or improve OpenAI models unless the API customer explicitly opts in. OpenAI may generate abuse-monitoring logs containing prompts, responses, and related metadata. Under OpenAI's default API controls, those logs may be retained for up to 30 days, unless a different approved retention control applies or longer retention is required by law or reasonably necessary to protect OpenAI's services or third parties. We do not represent that this App uses Zero Data Retention unless we expressly state that such a control has been approved and enabled.
If you view, purchase, restore, or use a subscription, Apple StoreKit may make the following information available to the App:
Subscription product identifier and displayed localized price.
Purchase result and transaction identifier.
Original transaction identifier.
Purchase and expiration dates.
Renewal, entitlement, revocation, upgrade, trial, or offer status.
Other transaction information Apple makes available through StoreKit 2.
The App creates a persistent app-specific UUID and stores it in Keychain. When you start a purchase, the App supplies this UUID to Apple as a StoreKit appAccountToken to associate the purchase with this App installation or device context. The UUID is not a Flow Note login and does not contain your name or email address, but it is a persistent identifier and may survive App deletion and reinstallation according to iOS Keychain behavior.
Apple processes payment-card and Apple Account billing information. Flow Note does not receive or store your full payment-card number.
The App initializes the Meta/Facebook SDK and enables automatic app events. Depending on Meta's SDK behavior, configuration, and terms, Meta may receive information such as:
App identifier, App version, SDK version, and launch or session information.
Device type, operating-system version, language, time zone, and similar technical information.
IP address and other network information.
Automatic App interaction or event information.
URL or deep-link handling information when a supported Meta/Facebook flow is used.
Flow Note explicitly disables Meta/Facebook advertising identifier collection. The current App does not request App Tracking Transparency permission. Disabling the advertising identifier does not necessarily prevent Meta from receiving all non-advertising technical or automatic app-event information described above.
During cold start, the App sends an HTTP HEAD request to https://flowainote.com to determine whether a network path is reachable before continuing startup. The request does not intentionally attach recordings, transcripts, note text, AI content, purchase information, or the App's Keychain UUID.
Like any internet request, it necessarily exposes the device's public IP address and ordinary request metadata, which may include the request time, requested host and path, protocol information, and user-agent or similar network information. Hosting, network, or security infrastructure may generate logs from this request.
If you contact us by email, we receive your email address, message, and any other information or files you choose to provide. Do not include sensitive recording content unless it is necessary for your request and you are authorized to share it.
The current App does not require account registration and does not intentionally request or collect the following through its own interface:
Your name, postal address, phone number, or account email address.
Precise location.
Contacts or calendars.
Photo-library content.
Government identification numbers.
Health or biometric profiles.
Full payment-card numbers.
Your recordings or transcripts may nevertheless contain any category of information that you or another speaker chooses to say. You are responsible for deciding what to record and process.
We process information for the following purposes:
To record, play, organize, search, rename, export, and delete audio notes.
To create and display speech-to-text transcripts.
To provide optional AI summaries and translations after consent.
To display subscription products, complete and restore purchases, and determine premium entitlement.
To preserve local settings, consent status, usage quota, and App state.
To measure basic App operation through Meta automatic app events without collecting the advertising identifier.
To confirm network reachability during startup.
To diagnose errors, maintain security, prevent abuse, and improve reliability.
To respond to support, privacy, and legal requests.
To comply with applicable law and enforce the Terms of Use.
Where applicable law requires a legal basis, we process information as necessary to provide features you request or perform our agreement with you, based on your consent for optional AI text processing and protected-device permissions, to comply with legal obligations, and for legitimate interests such as securing, maintaining, and improving the App where those interests are not overridden by your rights.
Flow Note asks for your permission before enabling third-party AI text processing. The disclosure identifies the categories of text used for summaries and translations. The OpenAI request path is disabled unless the locally stored AI consent state is enabled.
You can decline AI processing and continue using non-AI features. You can also disable AI text processing later in Flow Note Settings. Disabling it prevents future OpenAI summary and translation requests from the App.
Withdrawal does not affect processing that lawfully occurred before withdrawal. It does not automatically delete summaries or translations already stored on your device, requests already processed by OpenAI, or information retained by OpenAI under its own terms or legal obligations. You can delete local output in the App.
For more information, review the OpenAI Privacy Policy and OpenAI API Data Controls.
Avoid submitting sensitive personal information, confidential business information, trade secrets, legally privileged content, or another person's information unless you have determined that the processing is lawful and appropriate.
Apple Speech processes audio and returns recognition results to the App. Recognition may occur on-device or through Apple's network services. Because the App's current recognition requests do not require on-device-only processing, you should assume that audio selected for transcription may be transmitted to Apple.
Apple controls its speech-recognition infrastructure and any service-side retention. For more information, review Apple's Privacy Policy and the privacy information provided with your Apple device and operating system.
You can disable Microphone or Speech Recognition permission in iOS Settings. Doing so prevents the corresponding Flow Note recording or transcription features from working until permission is restored.
Subscriptions are offered and processed through Apple StoreKit 2. Apple controls the purchase confirmation interface, Apple Account billing, payment credentials, taxes, refunds, and subscription-management systems. Flow Note receives only the product, transaction, entitlement, status, and related information Apple makes available to the App.
Flow Note uses subscription information to show localized offers, initiate purchases, restore eligible purchases, determine whether premium features are available, and maintain a local entitlement cache. The app-specific UUID used as appAccountToken helps associate a purchase with the App's local installation context and reduce entitlement ambiguity; it is not used to create a Flow Note profile.
Apple retains purchase and subscription records under its own legal obligations and policies. Review Apple's Privacy Policy and your Apple Account subscription information for available controls.
Flow Note uses Meta/Facebook SDK automatic app events for limited App measurement and operational insight. Flow Note has configured the SDK not to collect the advertising identifier and does not request ATT permission in the current version.
Meta may independently process automatic app-event, device, and network information under its applicable terms. Flow Note does not control Meta's independent retention periods or all inferences Meta may make from information it receives.
For more information and available controls, review the Meta Privacy Policy.
Flow Note does not currently provide a separate in-app switch that disables all Meta automatic app events. If this integration or its controls change, we will update this Policy and, where required, obtain appropriate permission.
The startup request to flowainote.com is used only to check network reachability and coordinate startup timing. It is not used to upload your recordings, transcripts, summaries, translations, or export files.
Network and hosting infrastructure may create server or security logs containing IP address, timestamp, requested path, protocol details, and similar technical metadata. We retain any such logs under our control only for as long as reasonably necessary for security, reliability, abuse prevention, troubleshooting, and legal obligations. The exact period may vary based on the nature of the log, an active security event, and applicable law.
When you generate a text or PDF export, the App creates the file on your device. When you choose a destination through the iOS share sheet, that destination receives the exported content. The destination may be another app, cloud-storage provider, person, or service, and its own privacy policy applies after transfer.
The App displays its Terms, Privacy Policy, and Membership Terms in a web view using pages hosted on Google Sites. When you open those pages, Google may receive your IP address, browser or web-view information, cookies or similar identifiers, page-request details, and other information described in the Google Privacy Policy.
Flow Note does not control a third-party destination selected by you or Google's independent processing of Google Sites visits.
We disclose information only as described in this Policy, including to:
Apple, for speech recognition, App Store distribution, StoreKit purchases, subscription management, device services, backups, and user-selected sharing.
OpenAI, for optional AI text summaries and translations after you enable AI text processing.
Meta/Facebook, for automatic app events and related SDK operation, with advertising identifier collection disabled.
Network, hosting, and security providers, to deliver the startup reachability endpoint and protect connected infrastructure.
Google, when legal-policy pages hosted on Google Sites are opened.
Destinations you select, when you export or share content.
Professional advisers or authorities, where reasonably necessary to comply with law, protect rights and safety, investigate abuse, or establish or defend legal claims.
A successor or transaction participant, if responsibility for the App is transferred through a merger, acquisition, financing, asset transfer, reorganization, or similar transaction, subject to applicable law.
We select and use providers under applicable platform, contractual, and legal requirements intended to protect information. Providers may also act independently under their own terms for parts of their processing. Their official privacy information is linked throughout this Policy.
Retention depends on the category and who controls it:
Local recordings and note content: Retained on your device until you delete the recording, delete generated content through available App controls, delete the App, or remove the data through device or backup management.
Export files: Retained in App storage or a destination selected by you until removed by the App, operating system, destination, or you.
AI consent and preferences: Retained in local preferences until you change them or the relevant App data is removed.
App-specific UUID: Retained in iOS Keychain and may survive deletion and reinstallation until removed by iOS, device reset, Keychain management, or a future App action designed to remove it.
Local subscription state: Retained as long as reasonably necessary to display and restore entitlement state, subject to refresh from StoreKit and removal of App data.
Support email: Retained as long as reasonably necessary to respond, maintain support records, resolve disputes, prevent abuse, and comply with legal obligations.
Startup infrastructure logs: If generated, retained according to the purpose-based criteria in Section 8.
Third-party information: Apple, OpenAI, Meta, Google, share destinations, and infrastructure providers retain information under their own policies, contracts, and legal obligations.
Deleting a recording is intended to delete its local database record and associated audio files. File cleanup may be best-effort if the operating system reports an error. Backups created before deletion may retain an older copy until the backup is overwritten or deleted under Apple's backup behavior.
Flow Note does not provide app-managed cloud synchronization. Apple device or computer backups may include files stored in the App's local container unless the operating system or the App excludes a particular file or directory from backup.
Because Flow Note does not maintain user accounts, we generally cannot remotely identify or delete content stored only on your device. You control that content through the App, device, and backup controls.
Third-party providers may process information in countries other than the country where you live. OpenAI may process API information in the United States or another region available to and configured for the applicable OpenAI API project. Apple, Meta, Google, and network or hosting providers may also process information through facilities located in multiple countries.
Where applicable law requires it, we and our providers rely on recognized transfer mechanisms, contractual protections, adequacy decisions, consent, or other lawful safeguards. The laws and privacy protections in another country may differ from those in your country.
You can control Flow Note processing in the following ways:
AI processing: Decline or disable AI text processing in Flow Note Settings to block future OpenAI requests.
Microphone and Speech Recognition: Change either permission in iOS Settings.
Local content: Delete recordings and associated content in the App, or delete the App to remove its local container, subject to backups and Keychain behavior.
Exports: Choose whether, where, and with whom to share an export, and delete copies from the selected destination where that destination permits it.
Subscriptions: Manage or cancel subscriptions through your Apple Account and use the App's restore function for eligible purchases.
Advertising identifier: Meta/Facebook advertising identifier collection is disabled in the current App, and the App does not request ATT permission.
Depending on where you live, you may have rights to request access, correction, deletion, restriction, objection, portability, withdrawal of consent, or information about disclosures. You may also have the right to appeal a decision or complain to a privacy regulator.
To exercise a right concerning information controlled by Flow Note, email us using the address below. We may need enough information to understand and verify your request. We cannot retrieve or inspect content that exists only in your device's local storage. For information controlled independently by Apple, OpenAI, Meta, Google, or a share destination, you may need to contact that provider directly.
We will not discriminate against you for exercising a privacy right. Rights may be subject to verification, legal exceptions, and the law that applies to your request.
We use reasonable technical and organizational measures appropriate to the current App, including Apple's app sandbox, iOS permission controls, Keychain storage for the app-specific UUID, and encrypted HTTPS connections to configured network services.
No storage system, internet transmission, third-party service, or security measure is completely secure. You are responsible for protecting access to your device, reviewing what you record, and avoiding sensitive content in AI requests or support email unless necessary and lawful.
If we learn of a security incident affecting information under our control, we will investigate and provide notices where required by applicable law.
Flow Note is not directed to children under 13, and we do not knowingly collect personal information from children under 13 through a Flow Note account because the App has no account system.
Recordings, Apple Speech, OpenAI, Meta automatic app events, and other connected services may still process information if a child uses the App. A parent or guardian should not permit a child to use these features unless the use and required consents are lawful in their jurisdiction.
If you believe a child has provided information to a connected Flow Note service in violation of applicable law, contact us. We will take reasonable steps within our control and may direct you to the relevant provider.
We may update this Privacy Policy to reflect changes to the App, providers, data practices, law, or security requirements. We will post the revised Policy at the in-app Privacy link and update the effective date. If a change materially affects processing that requires consent, we will provide additional notice or request consent where required.
We encourage you to review this Policy periodically. If you do not agree with an updated Policy, stop using affected features and delete the App as appropriate.
Questions, privacy requests, or complaints concerning Flow Note may be sent to:
Email: zhaodingchao19620516@outlook.com
Provider: Independent developer of Flow Note
We will review privacy requests and respond within the period required by applicable law.