Flow Isle Privacy Policy
This policy explains how Luoyang Chuangyou Interactive Information Technology Co., Ltd. (洛阳创游互动信息技术有限公司, “CyoFun”) handles information when you use the Flow Isle app on iOS and Android and the website flowisle.cyofun.com. Flow Isle is built to work with as little data as possible: there is no account, no advertising, and no third‑party analytics or tracking. On Android, crash reports (which you can turn off) help us fix bugs.
1. Information that stays on your device
- Focus data – sessions, statistics, streaks, your island, schedules, categories and settings are stored locally on your device. We do not receive them. (Your pearl wallet is also backed up; see section 2.)
- Screen Time (iOS) – blocking uses Apple’s Screen Time (FamilyControls / ManagedSettings / DeviceActivity) frameworks. The apps and websites you choose are represented by opaque tokens that never leave your device; Apple does not reveal to us which apps you use, and we cannot see them.
- Usage access & overlay (Android) – to detect when a blocked app is opened, Flow Isle uses Usage Access and “display over other apps” permissions. This is processed on the device only and is never uploaded. To recognise essential apps (phone, maps/navigation) we query installed apps that handle those intents, also on the device only.
- Photos – when you save a share card, the app writes the image to your gallery. It does not read your photo library.
2. Information we process when you use online features
- Focus together rooms – when you create or join a room, our server (Cloudflare Workers, operated by Cloudflare, Inc.) receives the nickname and avatar you choose, a random app‑generated device identifier, the room settings, and in‑room events such as reactions and nudges. Room data is deleted automatically when the room ends or expires. If you are a Pro subscriber, your anonymous RevenueCat user ID may be sent so the server can confirm Pro room limits.
- Push notifications for rooms – if you allow notifications, while you are in a room your device’s push token (Apple Push Notification service or Firebase Cloud Messaging by Google) is stored with that room so friends can nudge you or invite you to play again. The token is removed when you leave the room or the room ends.
- Reports – if you report another member, we store the report (reason, the nicknames and random member/user identifiers of the reporter and the reported member, room code and time) and email it to our support mailbox so we can act on abuse. Reports are deleted after 90 days.
- Pearl wallet backup – so purchased pearls and your balance survive a reinstall or a new phone, the app syncs your pearl wallet with our server: your anonymous RevenueCat app user ID, a one‑way hash (SHA‑256) of a random per‑install device identifier, and the wallet entries (amount, type such as “earned by focusing” or “pack purchase”, time, and for purchases the store transaction ID). We check pack purchases with RevenueCat so pearls are credited once. Session details, app names and statistics are not sent.
- Crash reports (Android) – if the Android app crashes or hits an unexpected error, Firebase Crashlytics (Google) receives a crash report: stack trace, app version, device model, OS version and a random Crashlytics installation ID. Reports contain no focus data or app names. You can turn this off in Settings → Crash reports. The iOS app does not send crash reports.
- Room bans – if someone is removed for breaking the community rules, we keep their random user identifier on a ban list (with a short internal note) so they can no longer create or join rooms.
- Rate limiting & security – Cloudflare may process your IP address transiently to protect the service from abuse. We do not store IP addresses in our database.
3. Purchases
Subscriptions (Flow Isle Pro) and pearl packs are processed by Apple (App Store) or Google (Google Play). We use RevenueCat, Inc. to validate purchases and manage entitlements. RevenueCat receives an anonymous app user ID, purchase receipts / transaction information and basic device information (such as OS version and app version). We never receive your payment card details. See RevenueCat’s privacy policy.
4. What we don’t do
- We do not sell or share personal information for advertising.
- We do not track you across apps or websites.
- We do not require an account, email address or phone number.
5. Service providers
Cloudflare (hosting, rooms, email routing), Apple and Google (app distribution, payments, push delivery), RevenueCat (purchase validation), Google Firebase Crashlytics (Android crash reports). They process data only to provide their services to us. Data may be processed in countries other than your own, including the United States.
6. Retention
Room data: until the room ends or expires. Push tokens: until you leave the room. Reports: 90 days. Pearl wallet backup: until you ask us to delete it. Ban list: until the ban is lifted. Crash reports: up to 90 days (Firebase). Support emails: as long as needed to answer you. On‑device data: until you delete it or uninstall the app.
7. Your choices and rights
You can use Flow Isle without online features; you can turn off notifications or revoke Screen Time / Usage Access at any time in system settings, and uninstalling the app deletes all local data. You can turn off crash reports in Settings, and ask us to delete your pearl wallet backup by emailing support@cyofun.com (deleted backups cannot restore pearls later). Depending on where you live (e.g. EU/UK GDPR, California CCPA/CPRA, China PIPL) you may have rights to access, correct or delete your information or to object to processing. Email support@cyofun.com and we will respond within a reasonable time.
8. Children
Flow Isle is not directed to children under 13 and we do not knowingly collect personal information from them. If you believe a child has provided information in a room or report, contact us and we will delete it.
9. Changes
We may update this policy. The date above shows the latest version; material changes will be noted in the app or on this page.
10. Contact
Luoyang Chuangyou Interactive Information Technology Co., Ltd. (洛阳创游互动信息技术有限公司, “CyoFun”), Luoyang, Henan, China. Email: support@cyofun.com