Flow Isle Privacy Policy
This policy explains how Luoyang Chuangyou Interactive Information Technology Co., Ltd. (洛阳创游互动信息技术有限公司, “CyoFun”) handles information when you use the Flow Isle app on iOS and Android and the website flowisle.cyofun.com. Flow Isle is built to work with as little data as possible: there is no account, no advertising, and no third‑party analytics or tracking.
1. Information that stays on your device
- Focus data – sessions, statistics, streaks, your island, pearls, schedules, categories and settings are stored locally on your device. We do not receive them.
- Screen Time (iOS) – blocking uses Apple’s Screen Time (FamilyControls / ManagedSettings / DeviceActivity) frameworks. The apps and websites you choose are represented by opaque tokens that never leave your device; Apple does not reveal to us which apps you use, and we cannot see them.
- Usage access & overlay (Android) – to detect when a blocked app is opened, Flow Isle uses Usage Access and “display over other apps” permissions. This is processed on the device only and is never uploaded. To recognise essential apps (phone, maps/navigation) we query installed apps that handle those intents, also on the device only.
- Photos – when you save a share card, the app writes the image to your gallery. It does not read your photo library.
2. Information we process when you use online features
- Focus together rooms – when you create or join a room, our server (Cloudflare Workers, operated by Cloudflare, Inc.) receives the nickname and avatar you choose, a random app‑generated device identifier, the room settings, and in‑room events such as reactions and nudges. Room data is deleted automatically when the room ends or expires. If you are a Pro subscriber, your anonymous RevenueCat user ID may be sent so the server can confirm Pro room limits.
- Push notifications for rooms – if you allow notifications, while you are in a room your device’s push token (Apple Push Notification service or Firebase Cloud Messaging by Google) is stored with that room so friends can nudge you or invite you to play again. The token is removed when you leave the room or the room ends.
- Reports – if you report another member, we store the report (reason, the nicknames and random member/user identifiers of the reporter and the reported member, room code and time) and email it to our support mailbox so we can act on abuse. Reports are deleted after 90 days.
- Rate limiting & security – Cloudflare may process your IP address transiently to protect the service from abuse. We do not store IP addresses in our database.
3. Purchases
Subscriptions (Flow Isle Pro) and pearl packs are processed by Apple (App Store) or Google (Google Play). We use RevenueCat, Inc. to validate purchases and manage entitlements. RevenueCat receives an anonymous app user ID, purchase receipts / transaction information and basic device information (such as OS version and app version). We never receive your payment card details. See RevenueCat’s privacy policy.
4. What we don’t do
- We do not sell or share personal information for advertising.
- We do not track you across apps or websites.
- We do not require an account, email address or phone number.
5. Service providers
Cloudflare (hosting, rooms, email routing), Apple and Google (app distribution, payments, push delivery), RevenueCat (purchase validation). They process data only to provide their services to us. Data may be processed in countries other than your own, including the United States.
6. Retention
Room data: until the room ends or expires. Push tokens: until you leave the room. Reports: 90 days. Support emails: as long as needed to answer you. On‑device data: until you delete it or uninstall the app.
7. Your choices and rights
You can use Flow Isle without online features; you can turn off notifications or revoke Screen Time / Usage Access at any time in system settings, and uninstalling the app deletes all local data. Depending on where you live (e.g. EU/UK GDPR, California CCPA/CPRA, China PIPL) you may have rights to access, correct or delete your information or to object to processing. Email support@cyofun.com and we will respond within a reasonable time.
8. Children
Flow Isle is not directed to children under 13 and we do not knowingly collect personal information from them. If you believe a child has provided information in a room or report, contact us and we will delete it.
9. Changes
We may update this policy. The date above shows the latest version; material changes will be noted in the app or on this page.
10. Contact
Luoyang Chuangyou Interactive Information Technology Co., Ltd. (洛阳创游互动信息技术有限公司, “CyoFun”), Luoyang, Henan, China. Email: support@cyofun.com