Privacy Policy

What we collect

• Account data — your email address and, if you sign in with Google, the basic profile information Google shares (name, avatar). Passwords are handled by our managed authentication provider and are never visible to us.
• Studio content — projects, chat messages, prompt cards, reference images you upload, and the images you generate.
• Billing records — the credit purchases recorded for your account (amount, credits granted, timestamp). Card details are handled entirely by our payment provider and never reach our servers.
• Operational data — basic logs and error reports needed to keep the app running.

How we use it

We use your data to authenticate you, store and display your projects, run the AI generations you request, track your credit balance, and diagnose problems. We do not sell your data, and we do not use your prompts or generated images for advertising.

Service providers

Flowcraft is built on Lovable Cloud, which provides authentication, database, and file storage. Prompts and reference images you submit are sent to the AI model providers behind the Lovable AI Gateway in order to produce output. Payments are processed by our payment provider, which shares purchase confirmations with us so credits can be applied to your account. Each provider receives only what it needs to perform its function.

Access and security

Your studio content is scoped to your account: database access rules restrict every project, message, prompt card, and generation to the account that created it. Traffic is encrypted in transit (HTTPS). Privileged operations such as applying purchased credits run only on the server, behind a verified webhook signature.

Retention and deletion

We keep your projects and generations for as long as your account is active so you can return to them. You can delete individual content from within the app. If you want your account and its associated data removed, contact us and we will delete it, apart from minimal records we need to keep for accounting purposes.

Cookies

We use browser storage and cookies strictly to keep you signed in and to remember basic preferences. We do not run third-party advertising trackers.

Your choices and contact

You can request access to, correction of, or deletion of your data at any time by contacting us through the details on our site. Also see our Terms of Service.