EmoFlow-AI

Privacy Policy

Last updated: September 21, 2026

1. Our approach

EmoFlow-AI ("EmoFlow", "we") is built privacy-first. We collect as little as possible, keep your emotional data under your control, and never sell your data. This policy explains what is collected and how it is handled. EmoFlow-AI is operated by an LLC registered in the State of Texas, USA, which acts as the data controller. EmoFlow-AI is not a healthcare provider and is not a HIPAA-covered entity; the emotional data you enter is not treated as protected health information (PHI) under U.S. HIPAA law.

2. What we collect and where it is stored

  • Free tier: your check-ins and their history are stored on your device, in your browser's storage - not in our database. To write a reading, the feelings you picked, their intensity, the context of that moment and your recent check-ins are sent to our server and on to an AI provider. We do not store them.
  • AI readings & coaching: to produce a reading or a coaching reply, what you selected - and, in coaching, the messages you write - goes to our server and to an AI provider. This is done to answer you, not to build advertising profiles.
  • Voice input: if you dictate a message, the recording is uploaded to our server and passed to a speech-to-text provider, which returns the text. We do not keep the recording.
  • Account, trial & Pro: when you create an account we store your account details. While a trial or a Pro plan is active, your history and coaching sessions are stored in our database, so they follow you across devices and, if you choose, can be shared read-only with your therapist.
  • Payments: handled by our payment provider. We never see or store your full card details.
  • Email: an email delivery provider sends your account emails. It sees your email address and the text of the email.
  • Analytics: we use cookieless usage analytics with no advertising trackers. We never sell data.
  • Hosting: the app runs on a cloud hosting provider.

3. How we use data

To provide and operate the service (interpretations, coaching, history, insights, therapist sharing) and to improve it in aggregate. We do not sell or rent your personal information, and we do not use your emotional data for advertising.

4. Service providers (sub-processors)

We rely on service providers, each processing data only as far as its job requires and under its own terms: AI providers (readings and coaching), a speech-to-text provider (voice input), database and hosting providers, an email delivery provider, analytics providers and a payment provider.

5. Data retention and deletion

  • Free: your entries are stored on your device. You can delete an entry at any time. They do not follow you to another browser or device, and if you clear your browser data they are gone: we have no copy to restore.
  • Account, trial & Pro: you can delete individual entries stored in our database yourself. You can delete your account and its associated data.
  • Inactive accounts: if a free account with stored records is not used for 90 days, we email a notice. If there is still no visit 14 days later, we delete the records stored in our database. The account itself stays. Paid plans are not affected.
  • Therapist sharing: a therapist link is read-only and you can revoke it at any time. A written summary your therapist already has may still mention a deleted entry until it is rebuilt.

6. Your rights

Depending on where you live (for example, the EU/UK under GDPR, or California under the CCPA/CPRA), you may have rights to access, correct, delete, port, or object to the processing of your personal data. We do not sell personal information. To exercise any right, contact us at hello@easytodev.com.

7. Children

EmoFlow is not intended for children under 13, and we do not knowingly collect their data. Users aged 13–17 should use it with the awareness and consent of a parent or guardian.

8. Security

We use reasonable technical and organizational measures to protect data. No method of transmission or storage is 100% secure, so we cannot guarantee absolute security.

9. International transfers

Your data may be processed in countries other than your own (for example, the United States), where our providers operate. Where required, we rely on appropriate safeguards for such transfers.

10. Changes

We may update this policy from time to time; material changes will be reflected by updating the "Last updated" date above.

11. Contact

Questions about privacy? Contact us at hello@easytodev.com. See also our Terms of Service.