Privacy Policy

Creativ-Flow Ltd is the data controller for the personal data described here. You can reach us at info@creativ-flow.com for any privacy request or question. CreativFlow is available as a website at creativ-flow.com and as an iOS app; this policy covers both.

• Email address, and either a hashed password or a Google sign-in identity, held by our authentication provider. We never see or store your Google password.
• Account record holding your onboarding progress, which in-app tips you have seen, your trial start and end dates, your current plan state (trialing, free, paid, or comped) and the date you first paid.

We use this to sign you in, to show the right features for your plan, and to send the service messages described below. We do not use your email for marketing without your consent.

Everything you plan in the app is stored against your account:

• Videos: title, script, description, tags, thumbnail notes, planned publish date, pipeline stage, recording checklist, repurposing checklist, sponsorship details, alternative title ideas, and any images or links you attach or paste.
• Ideas captured in the Idea Inbox.

This content is private to your account. Database-level row security means no other user, and no unauthenticated visitor, can read it. We do not read your scripts or ideas except where you ask us to (for example when you run an AI feature) or where we genuinely have to in order to fix a fault you have reported.

• When you dictate, the recorded audio is sent to our AI provider for transcription and the text comes back to your editor. The audio is not stored by us after transcription — only the resulting text, inside your own video record.
• When you use script cleanup, title generation or hook generation, the text you submit is sent to the same provider to produce the result.
• We store a monthly count of AI credits used per account so we can apply plan limits. That counter holds numbers, not content.

AI requests are routed through the Lovable AI gateway to OpenAI models. They are processed to return your result and are not used by us to train any model.

• Web subscriptions are processed by Stripe. Your card details are entered on Stripe's checkout and never reach CreativFlow. We store your Stripe customer and subscription identifiers, plan, status and renewal date.
• iOS subscriptions are processed by Apple. We store the App Store transaction and product identifiers, the subscription status, expiry date and auto-renew flag. We never receive your payment details or your Apple ID.

This information is used solely to decide whether your account has Pro access and to support you with billing questions.

• If you enable push notifications on iOS we store the device push token and platform against your account. It is removed when you sign out or disable notifications.
• We store a record of service notifications we generate for you — publish-day reminders, stalled-video nudges, trial-ending warnings — including their title, body, delivery status, and a snapshot of the counts that triggered them, so the same message is not sent twice.

If you take part in the referral programme we store:

• your referral code and the payout name and payout details you enter;
• which accounts signed up through your link;
• commissions earned, their hold status, and payout records;
• the date and version of the referral terms you accepted.

When someone arrives through a referral link, that referral code is kept in their browser's local storage so credit can be attributed if they later sign up.

CreativFlow runs no third-party analytics, no advertising SDKs and no tracking pixels. We do not sell or share your personal data, and we do not build advertising profiles.

Local storage on your device is limited to:

• your sign-in session, so you stay logged in;
• interface state such as onboarding progress and dismissed tips;
• a referral code, if you arrived through a referral link.

Our hosting provider keeps standard technical logs (IP address, timestamp, requested URL) for security and reliability. These are not linked to your content.

• Lovable Cloud (Supabase infrastructure) — application hosting, database and authentication.
• Lovable AI gateway and OpenAI — voice transcription and text generation, when you use an AI feature.
• Stripe — payment processing for web subscriptions.
• Apple — payment processing for iOS subscriptions and delivery of push notifications.
• Google — only if you choose to sign in with Google.

Each provider acts on our instructions under a data processing agreement. Some are based outside the UK and EU; those transfers rely on standard contractual clauses or an adequacy decision.

• Performance of a contract — running your account, storing your content, processing your subscription.
• Legitimate interests — keeping the service secure and reliable, and preventing referral abuse.
• Consent — push notifications, and microphone access for dictation. You can withdraw either at any time in your device settings.
• Legal obligation — keeping payment and commission records for tax and accounting.

Your account and content are kept for as long as your account is open. If you delete your account, your videos, ideas, notifications and device tokens are deleted with it. Payment, commission and payout records are kept for as long as tax and accounting law requires (currently six years in the UK).

You can ask us to give you a copy of your data, correct it, export it, delete it, or stop a particular use of it. Email info@creativ-flow.com and we will respond within 30 days.

Account deletion: you can delete your account yourself at any time from Settings inside the app (Settings → Delete account). This permanently removes your login, videos, ideas, notes, notifications, AI usage records and device tokens. You can also email us if you would prefer we do it for you.

If you are unhappy with how we handle a request you can complain to the UK Information Commissioner's Office at ico.org.uk.

Data is encrypted in transit and at rest by our infrastructure provider. Access to your content is enforced at the database level per user account. Administrative access is limited to the operators of Creativ-Flow Ltd and used only for support and maintenance.

CreativFlow is not intended for children under 13, and we do not knowingly collect data from them. If you believe a child has created an account, contact us and we will remove it.

If we change what we collect or who processes it, we will update this page and the date at the top. Material changes will be notified in the app.