Privacy Policy

Who is responsible

Flux is made and run by Vladimir Panev, an individual based in Bulgaria (“we” in this policy), who is the controller of the personal data described here. You can reach us at vladimirpanev95@gmail.com.

What we collect, and why

Using Flux for free

Your clients, projects, tasks, invoices, money entries, notes and settings are stored in your browser’s own storage, on your device. They aren’t sent to us. Clearing your browser’s data for fluxfocus.app deletes them, so make a backup now and then (Settings → Back up).

The waitlist

If you join the waitlist, we store your email address and when you joined, so we can tell you when Flux opens. We receive a notification email about each new sign-up, sent through Resend. Legal basis: your consent. You can ask us to remove you at any time.

Your Flux Pro account

When you sign in with Google or Apple, they share your email address and name with us, and Google also shares your profile picture. Apple lets you hide your email; we then receive a private relay address instead. We also keep the records sign-in needs to stay secure: when you signed in and, for active sessions, your IP address and browser type. Legal basis: needed to provide Flux Pro (contract).

Your Flux Pro workspace

With Pro, your workspace — clients, projects, tasks, invoices, money entries, notes and settings — is saved to our database, and the files and images you add (in notes, on a project’s shelf or to a money entry) to our file storage, so they’re there on every device you sign in on. Only your account can read them. Legal basis: contract.

Your workspace may include details about your own clients. You decide what goes into it; we store that information only on your behalf and don’t use it for anything else.

Payments

Stripe handles checkout and payment, and we never receive or store your card details. From Stripe we receive a record of the purchase: its reference, your email address, Stripe’s customer reference, the amount and currency, and whether it was paid or refunded. We keep it to know that your account has Pro, and as the financial record the law requires. Legal basis: contract and legal obligation.

Visiting the website

Like any web server, our host (Netlify) processes your IP address and basic request details, such as your browser type and the page asked for, to deliver the site and keep it secure. Every typeface Flux uses is served from fluxfocus.app itself, so loading a page doesn’t contact a font service. Legal basis: our legitimate interest in running a working, secure website.

Data from Google and Apple sign-in

If you sign in with Google, Flux asks Google only for your basic profile — your name, email address and profile picture (the email and profile permissions). Flux never asks for access to your Gmail, contacts, calendar, Drive or any other Google data.

Flux uses this information only to:

• create your Flux account and recognise you when you sign in again;
• link your Flux Pro purchase to your account;
• show which account you’re signed in with.

It’s stored with your account in our database (Supabase, in the EU) and deleted when you delete your account. We don’t sell it, don’t use it for advertising, don’t share it with anyone except the services that run Flux for us (listed below) as needed to provide Flux, and don’t use it to develop, improve or train AI or machine-learning models.

Flux’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Sign in with Apple works the same way: Apple shares your name and email address — or a private relay address, if you choose to hide yours — and Flux uses them only as described above.

Cookies and browser storage

Flux uses no advertising or tracking cookies and no analytics. It uses your browser’s storage only for what the app needs to work:

• your workspace and settings;
• your sign-in session, if you use Flux Pro, until you sign out;
• whether your Pro workspace has changes still waiting to be saved;
• whether you’ve joined the waitlist.

These are strictly necessary for the features you use, so they don’t need a consent banner.

Who processes data for us

Only these services, each only for its own job:

• Supabase — database, file storage and sign-in. Your data is stored in Frankfurt, Germany (EU).
• Stripe — payments.
• Google and Apple — sign-in, whichever you choose.
• Netlify — website hosting.
• Resend — waitlist notification emails.

Some of these companies are based in the United States. Where data leaves the EU, it’s protected by safeguards the GDPR recognises, such as the EU Standard Contractual Clauses or the EU–US Data Privacy Framework. We never sell your data or share it for advertising.

How long we keep it

• Free workspace: in your browser until you clear it — we never have a copy.
• Waitlist: until Flux opens and we’ve told you, or until you ask us to remove you.
• Pro account, workspace and files: until you delete your account. Account menu → Delete account removes them straight away; a file you delete from a note goes when you close the note.
• Purchase records: for as long as accounting and tax law requires. If you delete your account, they’re kept separate from it.
• Website logs: for the short time our providers keep them.

Your rights

Under the GDPR, you can ask us to:

• show you the personal data we hold about you;
• correct it, or delete it;
• give you a copy to take elsewhere — Settings → Back up gives you your whole workspace in one file, any time;
• limit how we use it, or stop using it;
• and you can withdraw your consent at any time.

Write to vladimirpanev95@gmail.com and we’ll answer within one month. You can also complain to Bulgaria’s Commission for Personal Data Protection (cpdp.bg) or to the data protection authority where you live.

Security

All traffic to and from Flux is encrypted (HTTPS). In our database, each account can read only its own data, and purchases can be recorded only by our payment system.

Children

Flux isn’t meant for children under 16, and we don’t knowingly collect their data.

Changes to this policy

When this policy changes, the date at the top changes with it. If a change significantly affects Flux Pro accounts, we’ll tell you in the app or by email first.