Privacy Policy

1. Introduction

xflow ("we", "our", or "us") operates the xflow mobile application (the "App"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use the App. By using xflow, you agree to the practices described in this policy.

2. Information We Collect

We may collect the following types of information:

• Account Information: name, email address, and profile details you provide during registration.
• Payment & Subscription Data: subscription status, billing period, and transaction history. All payment processing is handled by Apple through the App Store — we do not collect or store your payment card details, billing address, or other financial information directly.
• Usage Data: information about how you interact with the App, including features used, session duration, and in-app activity.
• Device Information: device type, operating system, unique device identifiers, and crash data.
• Communications: messages and conversations from your connected messaging accounts, which xflow continuously processes using AI to provide core functionality — including conversation prioritization, suggested replies, and chat analysis. We store this data to provide conversation history, synchronization, and the AI-powered features described in Section 4.

3. How We Use Your Information

• To provide, maintain, and improve the App's features, including AI-powered communication tools.
• To personalize your experience and deliver relevant suggestions.
• To communicate with you about updates, security alerts, and support.
• To monitor and analyze usage trends to improve the App.
• To detect, prevent, and address technical issues or abuse.

4. AI Processing & Data Handling

xflow uses artificial intelligence as a core part of the service. When you connect your messaging accounts, xflow automatically and continuously analyzes your conversations using AI agents to prioritize contacts, predict the best message to send, and provide chat insights. This processing begins when you sign in and connect a messaging account, and continues as long as your account is active.

Your message content is sent to third-party AI providers (as described in Section 4A) for processing. We do not use your personal messages to train xflow's AI models. AI-processed data is handled in accordance with strict data minimization principles.

4A. Third-Party AI Processing

When you use xflow, the app sends certain data to third-party AI service providers ("AI Providers") that process data on our behalf.

What data is sent

• Message content from your connected messaging accounts, including text, metadata, and conversation context.
• Contact information necessary for conversation prioritization (names, message frequency, recency).
• Technical information: language, app version, device/OS type, timestamps, and routing identifiers.

Who the data is sent to

• Our AI Providers: OpenAI, Anthropic, Google Cloud AI, and xAI — acting as processors under contract with us.
• Cloud hosting and security providers involved in delivering and protecting AI requests.

How we use this data

• To prioritize your conversations and determine which contact needs your attention most.
• To predict the best message to send.
• To analyze chat context and provide conversation insights.
• To maintain and improve the Service, prevent abuse, and comply with legal requirements.

We do not sell your personal data.

Your consent and control

Before xflow begins AI processing of your data, we ask for your explicit consent. You may withdraw consent and delete your account at any time. Note that AI processing is integral to xflow's core functionality — disabling it is not possible while using the service.

Safeguards / equal protection

AI Providers act as our processors under contractual obligations and appropriate security measures. They may only process personal data to provide services to xflow, must follow our instructions, and must protect personal data consistent with this Privacy Policy. They must protect personal data with the same or equal level of protection described in this Privacy Policy.

5. Data Sharing & Disclosure

We do not sell your personal information. We may share information with:

• Service Providers: trusted third parties that help us operate the App (e.g., cloud hosting, analytics, security, and AI processing as described in Section 4A).
• Legal Requirements: when required by law, regulation, or legal process.
• Business Transfers: in connection with a merger, acquisition, or sale of assets.

6. Data Security

We implement industry-standard security measures including encryption in transit (TLS) and at rest to protect your data. However, no method of electronic transmission or storage is 100% secure, and we cannot guarantee absolute security.

7. Data Retention

We retain personal information, including communications and related content, for as long as your account is active and as needed to provide the Service. If you delete your account, we delete or de-identify your account data and associated content, including conversation history, unless we must retain certain information for legal compliance, security, fraud prevention, or dispute resolution. Backup copies may persist for a limited period before being overwritten.

8. Your Rights

Depending on your jurisdiction, you may have the right to:

• Access, correct, or delete your personal data.
• Object to or restrict certain processing activities.
• Data portability — receive your data in a structured format.
• Withdraw consent at any time where processing is based on consent.

To request deletion, you can delete your account in the app (Go to your account → Delete account) or contact us at info@xflow.org.

9. Children's Privacy

The App is not intended for users under the age of 13. We do not knowingly collect personal information from children. If we learn that we have collected data from a child under 13, we will take steps to delete it promptly.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the updated policy within the App and updating the "Last updated" date above.

11. Contact Us

If you have any questions about this Privacy Policy, please contact us at:
info@xflow.org