Privacy Policy
Flow Pro is a personal finance app. Your privacy comes first.
Data stays on your device
Transactions, categories, limits, budgets, recurring items and preferences are stored on your iPhone or Mac (including the shared container used by the widget and the share extension, which is also on-device).
iCloud sync (optional)
Off by default and free for everyone. If you turn it on in Settings, the main profile's transactions and your settings (budgets, custom categories, recurring items, limits and watch names) are stored in your iCloud account, through CloudKit and the iCloud key-value store, so they match across your devices. This data belongs to your Apple account and is protected by Apple; Flow Pro has no server and the developer has no access to it. Appearance and usage preferences (theme, card, shortcuts and similar) follow the sync too. Extra profiles (Flow Pro Pass), PIN, Face ID, lock, currency and language are never sent. With sync turned on, once a day the app also saves to your iCloud account, through CloudKit, a copy of the main profile's transactions and those settings, only the latest one, so you can recover them if you switch devices or reinstall; the same rule applies: it is your account, and Flow Pro has no server and no access. If you turn it off, the data stays on the device and in your account; to delete it from iCloud, use device Settings > your name > iCloud > Manage Storage.
What we do NOT do
Flow Pro has no account system of its own and no server, and does not send your data to any server of ours (only to your own iCloud, if you turn it on). It has no analytics, advertising, tracking, or third-party libraries that collect data.
Face ID, Touch ID and PIN
Biometric authentication is handled by the system (LocalAuthentication); the app never accesses your biometric data. The PIN is stored in the device Keychain.
Notifications
The daily reminder is a local notification scheduled on your device, and only exists if you turn it on.
Transaction place (optional)
Off by default. If you turn it on in Settings, the app uses your approximate location, only while the app is in use, to note the address of each new transaction. The address lookup is performed by Apple Maps (MapKit); the saved address stays on your device (and in your iCloud, if sync is on).
Calendar (optional)
Off by default. If you turn on "Add to calendar automatically" in Recurring Items, the app asks for write-only access to your Calendar and adds events for the recurring items you create. It does not read or change your other events, and nothing leaves the device.
Apple Watch (optional)
Off by default. If you turn it on in Settings, the iPhone sends your paired watch the balance, the month summary and the latest entries, and receives entries you make there. The exchange happens directly between your two devices (WatchConnectivity), with no server. You can hide the balance on the watch; turning it off erases the watch's data.
Siri and Shortcuts
Voice commands are processed by the operating system under Apple's privacy policy.
Subscription
Flow Pro Pass purchases are processed by Apple (StoreKit). The developer does not receive your payment details; the app only checks, on the device, whether a subscription is active.
Receipts (optional)
If you share a payment or bank transfer receipt (PDF or image, such as a Pix or TED in Brazil) with Flow Pro, the app reads the file on the device itself to suggest the entry (text in images is recognized locally) and saves nothing until you confirm. Keeping the file is your choice, entry by entry: it lives in an app folder on this device, is not sent to Apple or to any server, and is not part of Flow Pro's iCloud sync. You can delete the file at any time, from the entry or in Settings > Saved Receipts. (The file is also excluded from your device's iCloud Backup: if you switch iPhones or restore the device, saved receipts do not come back.)
Live Activity (optional)
If you turn on "Daily Spending Live", when you leave the app today's total spending appears for a few seconds in the Dynamic Island or on the Lock Screen. Values are calculated on the device and displayed by the system; nothing is sent out.
Export and import
CSV/PDF files you export or import are only shared where you choose.
Your rights
You fully control your data: delete transactions individually, turn sync off whenever you like, or delete the app to remove the on-device data (with iCloud on, the copy in your account is removed only by deleting it in Manage Storage).
Children
The app does not collect data from anyone, including minors.
Contact
Questions: paulog25.comercial@gmail.com