Privacy Policy

1. Who we are

Flowmodoro (“we”, “us”, the “Service”) is operated by Thibault Patrouillat. This Privacy Policy explains what personal data we collect, why we collect it, and the rights you have under the General Data Protection Regulation (GDPR). For any question, contact us at thibault@patrouillat.com.

2. Data we collect

We collect only the data needed to run the Service:

• Account email address (used for authentication and account recovery).
• Tasks you create.
• Time blocks you schedule on your calendar.
• Projects you create to organise your tasks.

We do not collect special categories of data, and we do not knowingly collect data from children under the applicable age of digital consent.

3. Purpose and legal basis

We process your account email to authenticate you and secure your account. We process your tasks, time blocks, and projects to provide the core functionality of the Service: planning, timeboxing, and tracking your focus sessions. The legal basis for this processing is the performance of our contract with you (Article 6(1)(b) GDPR) — providing the Service you signed up for.

4. Hosting

Your data is stored and processed by Supabase, our backend and database provider, in the European Union (AWS eu-north-1, Stockholm). Supabase acts as our data processor under a data processing agreement.

5. No selling, no advertising

We never sell, rent, or trade your personal data. We do not run advertising and we do not share your data with third parties for marketing purposes.

6. Data retention

We keep your data for as long as your account is active. When you delete your account from within the app, your personal data — including your email, tasks, time blocks, and projects — is deleted. Residual copies may persist in encrypted backups for a limited period before being permanently erased.

7. Your GDPR rights

You have the right to:

• Access the personal data we hold about you.
• Rectify inaccurate or incomplete data.
• Erase your data — you can do this yourself at any time by deleting your account from within the app.
• Receive your data in a portable, machine-readable format — you can do this yourself at any time with “Export my data” in the account menu, which downloads a JSON file of your projects, tasks and time blocks.

To exercise any of these rights, contact us at thibault@patrouillat.com. You also have the right to lodge a complaint with your local data protection authority.

8. Cookies and local storage

We do not use tracking or advertising cookies. We use your browser’s local storage for two strictly necessary purposes: your authentication session token, so you stay signed in between visits, and your UI preferences (such as view settings). This data stays on your device and is not used to profile you.

9. Contact

For any privacy-related question or request, contact us at thibault@patrouillat.com.