Privacy Policy

1. Introduction

DeepFlo ("Flo") is a product of STUDCON PTY LTD, an Australian company ("we", "our", or "us"). We are committed to protecting your privacy. This Privacy Policy explains how we collect, use, and safeguard your information when you use our applications (including our macOS app, iOS app, and iOS keyboard extension) and website at deepflo.app.

2. Our Products

Flo is available as:

• macOS Desktop App — Voice-to-text dictation with AI enhancement
• iOS App — Companion app for account management and keyboard setup
• iOS Keyboard Extension — AI writing assistant that enhances text directly in any app. Requires Full Access for network connectivity to our AI enhancement service.

3. Information We Collect

3.1 Audio Data (macOS Only)

We do NOT store your audio recordings. When you use Flo for dictation on macOS:

• Audio is streamed in real-time to our transcription service (Deepgram)
• Audio is processed and immediately discarded
• No audio files are saved on our servers or your device
• Transcribed text is inserted directly into your active application

On iOS, Flo does not record audio. The iOS keyboard extension relies on Apple's built-in dictation feature for voice input. Flo has no access to your microphone through the keyboard extension.

3.2 Text Data (iOS Keyboard Extension)

We do NOT store your text content. When you use the Flo keyboard's AI enhancement features:

• Your text is sent to our server for AI processing (grammar correction, custom instructions)
• Our server forwards the text to OpenAI for enhancement and returns the result
• Text is processed in real-time and is not stored on our servers
• Enhanced text is inserted back into your text field immediately
• We do not log, save, or retain the content of your text

3.3 Why Full Access is Required (iOS Keyboard)

The Flo keyboard extension requires Full Access to function. This is because:

• Network access — Required to send text to our AI enhancement service and receive the improved version back
• License validation — Required to verify your account status and usage limits

What Full Access does NOT give us access to:

• We do NOT have access to your passwords or sensitive text fields (iOS protects these automatically)
• We do NOT collect or transmit your keystrokes
• We do NOT track which apps you use the keyboard in
• We ONLY process text when you explicitly tap the "Flo It" button

3.4 Account Information

When you purchase a Pro license, we collect:

• Email address (for license delivery and account recovery)
• Payment information (processed securely by Stripe — we never see your card details)
• License key (to validate your subscription)

3.5 Usage Data

For free tier users, we track:

• Word count per week (to enforce the 2,000 words/week free tier limit)
• This counter resets every Monday
• We do NOT store the actual words or content you dictate or enhance

3.6 Device Information

For license management, we collect:

• Device identifier (a random ID generated locally to manage device limits — this is NOT your Apple device ID)
• Device name (e.g., "MacBook Pro" or "iPhone" — for you to identify your devices)
• Last active timestamp (to show when a device was last used)

4. How We Use Your Information

We use the information we collect to:

• Provide and maintain our voice-to-text and AI writing enhancement services
• Process your payments and manage your subscription
• Send you license keys and important service updates
• Enforce usage limits for free tier users
• Prevent fraud and abuse of our service
• Improve our service based on aggregated usage patterns (not individual content)

5. Data Sharing

We share your data with the following third-party services:

• Deepgram — Processes audio for transcription on macOS (audio is not stored)
• OpenAI — Processes text for AI enhancement on both macOS and iOS (text is not stored by us; subject to OpenAI's API data usage policy, which states API inputs are not used for training)
• Stripe — Processes payments securely
• Resend — Sends transactional emails (license keys, receipts)

We do NOT sell your personal information to third parties.

6. Data Security

We implement appropriate security measures to protect your information:

• All data transmission is encrypted using HTTPS/TLS
• Communication between the keyboard extension and our server uses HTTPS exclusively
• License keys are generated using cryptographically secure methods
• Device identifiers are hashed before storage on our servers
• Payment processing is handled entirely by Stripe (PCI compliant)
• We use HMAC-based authentication for server communication
• We use rate limiting to prevent abuse

7. Data Retention

• Audio: Not retained (processed in real-time and discarded — macOS only)
• Text content: Not retained (processed for AI enhancement and discarded)
• Account data: Retained while your account is active
• Usage data: Weekly word counts reset every Monday
• Payment records: Retained as required by law (typically 7 years)

8. Your Rights

You have the right to:

• Access: Request a copy of your personal data
• Correction: Request correction of inaccurate data
• Deletion: Request deletion of your account and data
• Portability: Receive your data in a machine-readable format
• Objection: Object to certain processing of your data
• Revoke access: Disable Full Access for the Flo keyboard at any time in iOS Settings → General → Keyboard → Keyboards → Flo

To exercise these rights, contact us at support@deepflo.app.

9. GDPR Compliance (EU Users)

If you are located in the European Economic Area (EEA), you have additional rights under the General Data Protection Regulation (GDPR):

• We process your data based on your consent (for marketing) or contract performance (for service delivery)
• You can withdraw consent at any time
• You have the right to lodge a complaint with your local data protection authority

10. Apple App Store

The Flo iOS app and keyboard extension are distributed through the Apple App Store. Apple may collect certain data as described in their Privacy Policy. We comply with Apple's App Store Review Guidelines and Human Interface Guidelines for keyboard extensions.

11. Children's Privacy

Flo is not intended for children under 13. We do not knowingly collect personal information from children under 13. If you believe we have collected such information, please contact us immediately.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date.

13. Contact Us

If you have questions about this Privacy Policy, please contact us: