Deepflow — Privacy Policy

1. Information We Collect

We collect the minimum amount of information needed to operate and improve the Service.

1.1 Information You Provide

• Account information: email address, password or authentication credentials

• Profile settings: focus preferences, schedules, app/web blocklists

• Support communications: emails or messages you send to us

1.2 Automatically Collected Information

We collect basic device and usage data necessary for app performance, including:

• Device type, operating system, and app version

• Crash logs and performance diagnostics

• General usage metrics (e.g., when a focus session starts or ends)

1.3 Focus, Blocking, and Usage Insights

To generate insights and operate blocking features, we may collect:

• Focus session durations

• Times when app or website blocks start/end

• Metadata about which websites or apps you chose to block (not content)

• Aggregated usage patterns (e.g., "X hours of focus today")

We never inspect the content of your apps, messages, websites, passwords, or calls.

Blocking is based on URL or app identifiers only, not content.

1.4 Payment Information

Payments are processed securely by Stripe.

Stripe may collect:

• Name

• Email

• Payment method

• Billing address

• Transaction history

We do not store or have access to your full credit card details.

1.5 Cookies and Web Tracking

On https://www.deepflow.me, we may use:

• Essential cookies (for login/session management)

• Analytics cookies (for performance insights)

You can disable cookies in your browser settings.

2. How We Use Your Information

We use your information to:

• Provide and maintain the Service

• Sync your data across devices

• Enforce app/website blocking settings

• Provide insights, analytics, and progress reports

• Personalize your focus and productivity tools

• Process payments and manage subscriptions

• Improve app performance, stability, and features

• Communicate with you about updates or support requests

We do not sell your information.

3. How We Share Your Information

We only share information when necessary to operate the Service.

3.1 Service Providers

We may share limited information with trusted vendors including:

• Stripe (payments)

• Analytics providers (performance & crash monitoring)

• Hosting providers (databases, servers)

All vendors are required to protect your data and use it only to provide their service.

3.2 Legal Requirements

We may disclose information if required by law or to:

• Protect the rights and safety of Deepflow users

• Comply with a legal obligation

• Respond to lawful requests from authorities

We do not provide data to law enforcement without proper legal process.

4. Data Storage and Retention

We store your information only as long as necessary to:

• Provide the Service

• Comply with legal obligations

• Resolve disputes

• Enforce agreements

When you delete your account, all associated data is permanently removed from our systems (with the exception of legally required payment records).

5. Account Deletion & Your Rights

5.1 Account Deletion

You may delete your account at any time:

1. Sign in at https://www.deepflow.me

2. Navigate to Settings → Account Settings

3. Select Delete Account

After deletion:

• All personal data is permanently removed

• Focus history, schedules, insights, and blocklists are deleted

• Subscriptions are canceled

• This process cannot be undone

5.2 Your Privacy Rights

Depending on where you live, you may have rights such as:

• Access your data

• Correct your data

• Request deletion

• Opt out of certain data processing

• Port your data

To exercise your rights, contact us at diego@deepflowlabs.dev.

6. Children's Privacy

Deepflow is not intended for children under 13.

We do not knowingly collect personal information from children under this age.

If you believe we have mistakenly collected such information, contact us and we will promptly delete it.

7. Security

We use industry-standard security measures to protect your data, including:

• Encrypted data transmission (HTTPS)

• Secure password hashing

• Access controls and monitoring

• Regular security reviews

However, no system is 100% secure. Use the Service at your own risk.

8. App & Website Blocking Features

8.1 App Blocking

On iOS, Deepflow uses Apple's FamilyControls and Screen Time APIs to block apps you select during focus sessions and scheduled time windows. All app blocking is enforced entirely on your device by the operating system. We never receive or store information about which specific apps are installed on your device — Apple's FamilyControls framework uses opaque tokens that only the operating system can interpret.

8.2 Website Blocking

Deepflow uses a local VPN configuration (via Apple's NEPacketTunnelProvider) to block websites you select. This VPN operates entirely on your device:

• DNS queries for blocked domains are answered locally with an NXDOMAIN response (indicating the domain does not exist), preventing access

• DNS queries for non-blocked domains are forwarded to Cloudflare's public DNS resolver (1.1.1.1)

• No browsing traffic, web content, or DNS queries are routed through our servers — the VPN is local-only

• A VPN icon will appear in your device's status bar while website blocking is active. This is a standard iOS indicator for any active VPN configuration, even though no traffic leaves your device

8.3 What We Do Not Collect

We do not:

• Inspect the content of websites you visit

• Inspect messages, emails, or passwords

• Log which websites you visit or attempt to visit

• Route any of your internet traffic through our servers

We only process metadata necessary for enforcement, such as:

• Domain names or app identifiers you choose to block

• Whether a block was triggered

• Timestamp information for analytics

9. International Users

Deepflow is operated from the United States.

Your information may be transferred to and processed in the U.S.

By using the Service, you consent to this transfer.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time.

We will notify users of material updates via email or in-app notifications.

Continued use of the Service indicates acceptance of the updated Policy.

11. Contact Us

For questions about this Privacy Policy, contact us: