Privacy Policy

Last updated: June 6, 2026

1. Our approach

EmoFlow-AI ("EmoFlow", "we") is built privacy-first. We collect as little as possible, keep your emotional data under your control, and never sell your data. This policy explains what is collected and how it is handled. EmoFlow-AI is operated by an LLC registered in the State of Texas, USA, which acts as the data controller. EmoFlow-AI is not a healthcare provider and is not a HIPAA-covered entity; the emotional data you enter is not treated as protected health information (PHI) under U.S. HIPAA law.

2. What we collect and where it is stored

• Free tier: your check-ins and history are stored locally on your device (browser localStorage). They are not uploaded to our servers.
• AI interpretation & coaching: to generate an interpretation or coaching response, the emotions, intensity, and context you select — and, in coaching, the messages you send — are sent to our AI provider (Google Gemini) to produce the response. This is used to serve you, not to build advertising profiles.
• Account & Pro: if you create an account or subscribe to Pro, we store your account details and your history/coaching data in our database (Supabase) so you can sync across devices and, at your choice, share a read-only dashboard with your therapist.
• Payments: handled by Stripe. We do not store your full card details.
• Analytics: we use Umami — privacy-friendly, cookieless analytics that does not collect personal data or use third-party advertising trackers.
• Hosting: the app is served via Vercel.

3. How we use data

To provide and operate the service (interpretations, coaching, history, insights, therapist sharing) and to improve it in aggregate. We do not sell or rent your personal information, and we do not use your emotional data for advertising.

4. Service providers (sub-processors)

We rely on a small set of providers, each processing data only as needed and under their own terms: Google (Gemini AI), Supabase (database for accounts/Pro), Stripe (payments), Umami (analytics), and Vercel (hosting).

5. Data retention and deletion

• Free: your data lives on your device — you can delete individual entries or clear it from your browser at any time.
• Pro / account: you can delete your account and its associated data. Therapist-share links are revocable by you at any time.

6. Your rights

Depending on where you live (for example, the EU/UK under GDPR, or California under the CCPA/CPRA), you may have rights to access, correct, delete, port, or object to the processing of your personal data. We do not sell personal information. To exercise any right, contact us at hello@easytodev.com.

7. Children

EmoFlow is not intended for children under 13, and we do not knowingly collect their data. Users aged 13–17 should use it with the awareness and consent of a parent or guardian.

8. Security

We use reasonable technical and organizational measures to protect data. No method of transmission or storage is 100% secure, so we cannot guarantee absolute security.

9. International transfers

Your data may be processed in countries other than your own (for example, the United States), where our providers operate. Where required, we rely on appropriate safeguards for such transfers.

10. Changes

We may update this policy from time to time; material changes will be reflected by updating the "Last updated" date above.

11. Contact

Questions about privacy? Contact us at hello@easytodev.com. See also our Terms of Service.