How Flo handles your data
This policy explains what JustJoshin LLC ("we", "us") collects when you use Flo, why, and what control you have over it. It's written to be read, not skimmed; if anything is unclear, email support@floapp.app.
The short version
- We collect the minimum needed to forecast your cash flow: an email address to sign you in, and — only if you choose to link a bank — your account balance and transactions, read-only, through Plaid.
- We never see or store your bank username or password. Plaid handles that on its own screen.
- We don't sell your data, and we don't use it for advertising.
- You can disconnect your bank or delete your account and all of its data from inside the app at any time.
This website
floapp.app and floforecast.com are static pages. They set no cookies, run no analytics, and collect nothing unless you email us. If you email us, we keep the message so we can reply.
The app: what we collect and why
Account information. When you create an account we store your email address and, if you use Sign in with Apple, the identifier Apple provides (which may be a private relay address). We use it to sign you in, send verification and password-reset messages, and contact you about your account. We don't send marketing email.
Bank data, if you link an account. Linking is optional. If you do, you sign in to your bank on Plaid's screen; Plaid gives us a read-only token that lets us retrieve your account name, balance, and transaction history (date, description, amount, pending status). We use this to build your forecast, match transactions to the bills and income you've set up, and show you your activity. We cannot initiate payments, transfers, or withdrawals. Plaid's own handling of your data is described in the Plaid End User Privacy Policy.
What you enter. Bills, income, categories, groups, one-off items, notes, your balance floor, and — if you track by hand instead of linking a bank — the balance and transactions you type in.
Technical data. If the app crashes, a crash report (device model, OS version, app version, and the error) may be sent to us so we can fix it. Crash reports don't include your financial data.
What we don't do
- We don't sell, rent, or share your personal or financial data with advertisers or data brokers.
- We don't use your data to train machine-learning models.
- We don't track you across other apps or websites.
Where your data lives and who can reach it
Your data is stored in a database hosted by Supabase in the United States, encrypted in transit and at rest. Access is restricted by database-level rules so that each user's data is readable only by that user's authenticated session. Plaid access tokens are kept in a separate, further-restricted store the app itself cannot read. A small number of service providers process data on our behalf solely to run Flo: Supabase (hosting and authentication), Plaid (bank connectivity), Apple (app distribution and Sign in with Apple), and a crash-reporting service. Each is bound by its own terms to use the data only to provide that service.
How long we keep it
For as long as your account exists. When you delete your account, we revoke the Plaid connection and delete your account record, bank data, and everything you entered within 30 days; backups age out within a further 30 days. If you disconnect a bank without deleting your account, the transactions already imported stay in your account until you delete them or the account.
Your choices and rights
- Disconnect a bank at any time from Settings.
- Delete your account from Settings; this is permanent.
- Export or correct your data, or ask what we hold about you, by emailing support@floapp.app. We'll respond within 30 days and won't charge for it.
Residents of California and other states with privacy laws have the rights those laws provide, including to know, delete, and correct; we honor those requests for everyone, wherever you live, and we don't discriminate for exercising them. We don't "sell" or "share" personal information as those terms are defined in the California Consumer Privacy Act.
Children
Flo is not directed to children under 13 and we don't knowingly collect data from them. If you believe a child has created an account, email us and we'll delete it.
Changes
If we change this policy in a way that matters, we'll show a notice in the app and update the effective date above. Earlier versions are available on request.
Contact
JustJoshin LLC · Greenville, South Carolina · support@floapp.app