flowshowContact us

Privacy Policy

Last updated: October 26, 2026

flowshow is an iOS app that turns your photos into animated showcase videos, exported on your device. This policy explains what data the app and its backend (flowshow.ramiruai.com) handle — and, just as importantly, what they don't. It covers the flowshow app; payments are handled entirely by Apple, and subscription infrastructure by RevenueCat, as described below.

The short version

  • Your photos never leave your device. Rendering, exporting and saving all happen locally. Cloud sync (Pro) stores your draft's recipe — template, settings, text — not the photos.
  • No ads, no analytics trackers, no cross-app tracking, no data sale.
  • An account only needs an email and a name, and is only required to export.
  • You can delete your account — and everything stored with it — from inside the app: Profile → Account → Delete account.

What we collect

Account data

When you create a flowshow account (email + password, Sign in with Apple, or Continue with Google) we store:

  • your email address;
  • your name (as entered or as provided by Apple/Google);
  • an optional username, if you set one in Profile → Set username;
  • your password, kept only as a salted hash — never in readable form;
  • the sign-in method you used, a random account identifier, and session records that keep you signed in.

An account is required only for exporting; browsing templates and editing drafts works without one.

Synced draft recipes (Pro)

With a Pro subscription you can sync drafts across your devices. What travels to our servers is the draft's recipe: the template identifier, its settings and text layers, and layout metadata such as how many photo slots a draft uses. The photos themselves and your logo are never uploaded — an incoming recipe keeps the media that already exists on the device receiving it. If you delete a draft (or your account), the synced recipe is deleted with it.

Purchases

flowshow Pro is sold through Apple's in-app purchase system. Apple processes the payment — we never see your payment details. We use RevenueCat to manage subscriptions and entitlements; RevenueCat receives your flowshow account identifier (so Pro follows you across devices and survives reinstalls) and purchase status such as whether your subscription is active. For details on RevenueCat's own processing, see their privacy policy.

Technical and abuse-prevention data

Our backend runs on Cloudflare. To keep accounts and the sync API from being abused, we keep short-lived rate-limiting records (IP address and request timestamps). Like any internet service, Cloudflare processes standard request metadata (IP address, user agent) for security and delivery.

What stays on your device

The following never reach our servers: your photos, your logo, your full drafts, your finished videos, and your export counter. Videos are rendered frame by frame and encoded entirely on the device. Saving to Photos uses add-only permission — the app can add videos to your library but cannot read it.

How we use data

  • to provide your account, sign-in and Pro entitlement;
  • to sync draft recipes between your devices (Pro);
  • to protect the service from abuse;
  • to answer support requests you send us.

We do not sell personal data, share it for cross-context behavioral advertising, or use your content to train models. The app contains no advertising or tracking SDKs.

Third parties

  • Cloudflare — hosts the backend and its database.
  • RevenueCat — subscription and entitlement infrastructure.
  • Apple — payments (App Store), Sign in with Apple (provides your name and email if you choose it).
  • Google — Google Sign-In (provides your name and email if you choose it).

Retention and deletion

Account data and synced recipes are kept while your account is active. Deleting your account in the app (Profile → Account → Delete account) permanently deletes the account and all synced draft data on our servers, and signs you out. Uninstalling the app does not delete your account — if you can't use the in-app deletion, email us and we'll do it for you. Records tied to purchases are retained as needed for subscription management and tax/accounting obligations.

Your rights

Where you live, laws such as the GDPR or CCPA may give you rights to access, correct, export or delete your personal data. You can exercise most of them directly in the app (view and change your name/username, delete your account, restore purchases); for anything else, email us. We don't discriminate against you for exercising these rights.

Children

flowshow is not directed at children under 13, and we don't knowingly collect their personal data. If you believe a child created an account, contact us and we'll remove it.

Security

Data travels over TLS, passwords are stored only as hashes, and every database query is scoped to your own account. No service is perfectly secure; if we ever learn of a breach affecting your data, we'll notify you as required by law.

Changes to this policy

If flowshow's data handling changes (new features, new processors), we'll update this page and the date above. Material changes will also be announced in the app or by email where appropriate.

Contact

Questions, deletion requests, or anything else about your data:
support@ramiruai.com