Privacy Policy for TextFlow

1. Information We Collect and Process

To provide high-quality writing assistance services, we handle specific classes of information depending on how you use our application:

• Account Authentication Profile Cloud-Synced
  When you sign up or authenticate (via Email or Google Sign-In), we store your basic profile identifiers: email address, display name, and profile image URL. This manages authentication state and links your Premium Tier credentials.
• AI Text Transformations & Input Processed in Memory
  When utilizing AI-powered features (such as AI Rewriter, Tone Changer, Grammar Proofreader, AI Translator, Summarizer, Keyword Extractor, Bullet Points Generator, Caption Generator, Email Writer, and Smart Suggestions), your text inputs are transmitted securely to our backend endpoints powered by DeepSeek for real-time inference.

  Privacy Commitment: The text you process through AI features is handled strictly in memory on the API servers. We do not store your input text permanently, log your texts, or share it with external vendors for AI model training.

• Synced Favorites List Cloud-Synced
  Any processed text items you explicitly choose to "Favorite" are uploaded to your personal Google Firebase Firestore database. This ensures your key documents remain safe and sync across your devices.

2. Data Handled Locally (100% Offline & Private)

We believe in absolute client-side privacy. A major portion of TextFlow's utilities operate strictly on-device, completely isolated from the internet:

• Zero-Internet Operations: None of the inputs processed via these local formatting utilities ever leave your physical device.
• Transformation History: The history of your text transformations is logged locally in an SQLite database on your device. This history is never uploaded to cloud servers. You can clear this log manually at any time.

3. Third-Party Services

We integrate with established service providers to deliver robust analytics, authentication, hosting, and AI inference. These partners process information according to their respective privacy terms:

4. Security and Data Protection

We deploy industry-standard security protocols to protect your information:

• Encryption in Transit: All data exchanged between the mobile app, Firebase backend, and DeepSeek endpoints is encrypted using HTTPS and TLS 1.3.
• Admin-Only Credit Modification: To prevent fraud, premium credits accumulated through rewarded ads are modified only by verified server-side callbacks using the Firebase Admin SDK.

5. Data Deletion Rights and Retention

You maintain full control over the data stored within TextFlow:

• Local Data: You can completely erase your local database transformations and cached items by clicking Clear History and Clear Favorites in the in-app Settings panel.
• Cloud Account Deletion: If you wish to delete your account, saved credentials, and all synchronized cloud favorites, you can submit a deletion request. Please contact us at the support email listed below. We will purge all associated entries in our Firebase Firestore database within 7 business days.

6. Children's Privacy

Our services are not intended for or directed towards children under the age of 13. We do not knowingly collect, request, or retain personally identifiable details from anyone under 13 years of age. If we learn that we have collected information from a child under 13 without verification of parental consent, we will delete that data immediately.

7. Contact Us

If you have any questions, feedback, or data deletion requests regarding this Privacy Policy, please reach out to us: