Privacy Policy for FlowPrompter

Buitron Inc ("we," "us," or "our") operates the FlowPrompter mobile application (the "App"). We are the Data Controller for the personal data collected through the App. This Privacy Policy explains how we collect, use, and protect your information.

1. Information We Collect and How We Use It

We collect information to provide, secure, and improve our teleprompter and AI features.

• Identifiers (Account Information): If you create an account or sign in via Google Auth, we collect your email address, a unique user ID, and an encrypted password to authenticate you and sync your data.
• User Content (Scripts and Folders): Scripts you write or generate are securely synced to our cloud database (Supabase) to provide cross-device access.
• Audio and Voice Inputs: When using the voice-tracking feature, the App requests microphone access. Your voice is processed in real-time by your device's native speech recognition APIs to scroll the text. We do not collect biometric voice prints.
• Device & Diagnostics: We and our third-party processors (Supabase, RevenueCat) automatically collect pseudonymous data, including your device model, OS version, and crash logs for security and debugging.
• Local Video Recordings ("Takes"): All videos are stored strictly locally on your device's internal storage. We do not upload, host, or have access to your video recordings.

2. Third-Party Processors and AI Integrations

We use trusted third-party service providers that act as processors on our behalf:

• Database & Authentication (Supabase): Used to securely store your synced scripts and manage logins.
• Subscription Management (RevenueCat): Used to verify Pro subscription status and manage in-app purchases.
• AI Integrations (OpenAI): If you use the AI Ghostwriter, your text prompts are sent to OpenAI to generate your script. Per their API policies, OpenAI does not use your prompts to train their public models.

3. Legal Bases for Processing (EEA/UK Users)

If you reside in the EEA or UK, we process data under: Contract (account syncing), Consent (mic/camera access), Legitimate Interests (app security), and Legal Obligation (tax/accounting).

4. Data Sharing and Sales

We do not sell, rent, or trade your personal information, scripts, or videos to any third parties for advertising or marketing purposes.

5. Data Retention

We retain your account identifiers and cloud-synced scripts for as long as your account is active. Upon account deletion, we will delete or de-identify your personal data within a reasonable timeframe (typically 30 days).

6. Data Security

Cloud-synced scripts are encrypted in transit (TLS) and at rest (Supabase). Because your video recordings are stored locally, their security relies on your device's own security measures.

7. Your Privacy Rights

Depending on your jurisdiction (GDPR, CCPA/CPRA), you have the right to access, correct, or delete your data. You can exercise these rights by deleting your account within the App settings or by emailing flowprompter@gmail.com.

8. Children’s Privacy

FlowPrompter is not directed to individuals under the age of 13 (or 16 in certain jurisdictions). We do not knowingly collect personal information from children.

9. International Data Transfers

Buitron Inc is based in the United States. If you access our App from outside the US, your information will be transferred to and processed in the US.