The short version
- Your journal, mood check-ins, and the list of apps you choose stay on your phone.
- Your account, tasks, focus history and AI messages are stored on Floe's servers so they survive a lost phone.
- AI messages are stored as text, including the Markdown formatting in a reply, so your history reads the same tomorrow. One turn is sent to a model provider to produce the answer.
- We do not sell your data, and we do not use your writing to train models.
- You can delete your account and its data from inside the app, or from this page.
Who we are
Arisyn Studios makes Floe, and is the controller for the personal data described here, which means we decide why and how it is used. We are reachable athi@arisyn.studio.
This policy covers the Floe apps on the Apple App Store and Google Play, and this website at floe.arisyn.studio.
What stays on your phone
Some of Floe never leaves the device. It is not uploaded, not backed up to us, and not visible to anyone at Arisyn Studios.
- Journal pages and books. Your writing, the pages, the covers and anything stuck on them are stored on the phone, encrypted with a key held in the phone's secure storage.
- Mood check-ins. How the day felt, kept on the phone for a year at most.
- Screen Time and app usage. On iPhone, Apple gives the app an opaque token for the apps you pick. On Android, usage is read on the device with Usage Access. The token and the usage stay here; we never receive the names of the apps you block or how long you used them.
- Your Home Screen widget. What a card shows is written to a small file on the phone, for the phone's own launcher to draw.
If you delete the app, the things in this list go with it. They are not recoverable from us, because we never had them.
What we collect
| What | Why |
|---|---|
| Account | Your name, email address, a hashed password or a sign-in identifier from Apple or Google. Needed to sign you in and to reach you about the account. |
| Tasks and lists | Titles, notes, steps, tags, times, repeats, reminders and whether a task is done. This is the product: it is stored so a new phone shows the same day. |
| Focus history | When a block started, how long it ran and which task it belonged to, so your week and your stats are real. |
| AI messages | What you type or say to Floe AI, and the reply, stored as text so the thread is still there when you come back. |
| Preferences | Theme, reading font, timeline layout, notification choices, and the language and time zone your day is built in. |
| Purchases | Whether Floe Pro is active, and the store receipt that proves it. We never see your card. |
| Diagnostics | Only if you switch it on: crash reports and a small amount of device information, so a crash can be fixed. |
We do not collect your contacts, your photos, your precise location, or the names of the apps on your phone.
AI, and what you write
Floe AI turns a sentence into a plan, a task, or a reply. Three things are worth being exact about.
What is sent
When you send a message, Floe sends that message and the context needed to answer it: the day, the tasks and times you asked about, and your time zone. It does not send your journal pages, your mood check-ins, or the apps you block.
Where it goes
Your phone talks to Arisyn Studios's own server. The server sends one turn to the model provider it is configured with, receives the answer, and stores the result. The provider is listed on thesubprocessors page.
What is stored
The message and the reply are stored as text, in the thread you sent them from, so the conversation is the same on your next phone. A reply is Markdown — headings, lists, links, tables — and it is stored exactly as it arrived, then rendered by the app. Rendering treats it as text, never as code to run.
- Your messages are not used to train models.
- A thread is kept until you delete it, and goes with your account.
- An AI answer can be wrong. It is a draft and a suggestion, not advice, and nothing happens to your day until you approve it.
- You can use Floe without AI. Tasks, Focus and the journal work with it switched off.
Why we are allowed to
Where the GDPR or UK GDPR applies, we rely on:
- Contract — the account, tasks, focus and AI messages needed to provide the app you asked for.
- Consent — diagnostics, notifications, microphone, Health Connect and Screen Time. Each is asked for on its own, and each can be turned off again in your phone's settings.
- Legitimate interests — keeping the service working and safe: fraud prevention, rate limits, and fixing crashes.
- Legal obligation — purchase and tax records we must keep.
Where California law applies, we do not sell or share personal information as those terms are defined by the CCPA, and we do not use it for cross-context behavioural advertising.
Who else sees it
We do not sell your data. We use a small number of companies to runFloe, and each one sees only what its job needs. They are listed with what they see on the subprocessors page.
We may also disclose data if the law requires it, if it is needed to protect someone from harm, or as part of a sale of the business — in which case this policy continues to apply until the new owner publishes its own.
How long we keep it
| Thing | Kept |
|---|---|
| Tasks, lists, focus history | Until you delete the task or your account |
| AI messages and replies | Until you delete the thread or your account |
| Journal pages | On your phone, until you delete the page or the book |
| Mood check-ins | On your phone, a year of them at most |
| App usage and Screen Time tokens | On your phone. A token never leaves it |
| Account, email, sign-in records | Until you delete your account, then a short backup window |
| Purchase and tax records | As long as tax law requires, and no longer |
When you delete your account, the active copy goes at once. An encrypted backup may hold it for a short window before it is overwritten, and purchase records are kept as long as tax law requires.
Your rights
Depending on where you live, you can ask to see your data, correct it, export it, delete it, or object to a particular use. Write tohi@arisyn.studio and we answer within 30 days. We do not charge for this and we do not treat you differently for asking.
You can also complain to your local data protection authority. If you are in the EU or UK, that is the authority where you live or work.
Deleting everything
In the app: Profile → Settings → Delete account. On the web:the deletion page. Both do the same thing: the account record, tasks, focus history and AI threads are deleted, and Sign in with Apple tokens are revoked.
Deleting your Floe account does not cancel an App Store or Google Play subscription. Cancel it in the store first, or the store keeps charging you. Steps are on the billing page.
Security
Data moves over TLS and is encrypted at rest. Passwords are hashed, never stored. Journal pages on your phone are encrypted with a key in the phone's secure storage. The security page has the detail, including how to report a problem.
Children
Floe is not for children under 13, and not for anyone under 16 in a country where that is the age of digital consent. We do not knowingly collect data from a child. If you believe a child has an account, write to us and we will delete it.
Where it is stored
Data is processed in the regions of the companies listed on thesubprocessors page, mainly the United States. Where data leaves the EU or UK, the transfer relies on the European Commission's Standard Contractual Clauses or an equivalent safeguard.
Changes
If this policy changes in a way that matters, we tell you in the app before the change takes effect. The date at the top of this page is the day the words last changed.
Contact
Arisyn Studios
hi@arisyn.studio