What Flowalth does with your data, in plain language — and what you can do about it.
Effective 21 October 2026 Last updated 21 October 2026
This policy explains what personal data the Flowalth mobile app and the flowalth.com website collect, why, who else touches it, and what you can do about it. It is written to be read, not to be skimmed past — if anything here is unclear, email us and we will explain it.
Flowalth is a personal-finance app built and operated by Nikita Butnar, an independent developer. For the purposes of the EU and UK General Data Protection Regulation (GDPR), that is the data controller responsible for your data.
You can reach us about anything in this policy — including requests to access, correct, export or delete your data — at nickbutnar@gmail.com. We aim to answer within a few days, and within 30 days at the outside, as the GDPR requires.
We collect only what the app needs in order to work. There is no hidden profiling layer and no data gathered "just in case". Below is the complete list.
You sign in with Sign in with Google or Sign in with Apple. Flowalth never sees or stores a password. From the sign-in provider we receive and store:
We also store your chosen display currency and the date your account was created (which is what your 7-day trial is counted from).
This is the heart of the app, and we treat it as sensitive personal data. Everything in this category is entered by you, by hand:
We use this data for one purpose: to show it back to you — as your dashboard, your monthly history, your spending-by-category breakdown, your financial health score and your tips. All of that is computed from your own numbers, on our server, for your eyes only. It is never used to build an advertising profile, never scored for creditworthiness, and never shared with anyone.
Flowalth is a paid subscription after a 7-day trial. Purchases are handled entirely by the Apple App Store or Google Play — we never receive, see or store your card details, billing address or any other payment information.
What we do store is the state of your subscription: whether it is active, when the current period ends, and whether it is set to auto-renew. We need this to know whether to unlock the app and whether to remind you that access is about to end.
Flowalth can send you up to three reminders: a daily nudge to log your spending, a month-end summary, and a warning two days before your access ends. These are sent from our server, which means that if — and only if — you grant notification permission, we store:
Notifications are entirely optional. Decline the permission, or turn them off in your system settings, and the app works exactly as before. When you sign out, your device's token is deleted from our server.
Like any online service, our server keeps short-lived operational logs — typically an IP address, a timestamp and which part of the API was called. They exist to keep the service running and to investigate errors and abuse. The figures you enter are filtered out of these logs, they are never used to profile you, and they are rotated out automatically rather than archived.
To be explicit, Flowalth does not collect, request or have any access to:
The Flowalth app contains no advertising SDKs, no analytics SDKs and no third-party trackers. We do not engage in tracking — we never link your data to data from other companies' apps or websites for advertising or measurement, and we never share it with a data broker.
We have never sold personal data and we will not. We do not share personal data for cross-context behavioural advertising. The flowalth.com website sets no advertising or analytics cookies; the only thing it stores in your browser is your light/dark theme preference.
If you are in the EU, the EEA, Switzerland or the UK, the GDPR requires us to tell you on what legal basis we process your data. It is one of three:
We do not sell, rent or trade your personal data. We do not share it with advertisers, data brokers, analytics companies, insurers, lenders or credit bureaus — not now, and not as a future business model. There is no arrangement under which anyone pays us for access to anything about you.
Most importantly: the financial information you enter — your transactions, categories, goals, savings and onboarding answers — is never disclosed to any third party. It is stored for you, shown back to you, and that is the end of it.
Running an app of any kind means relying on a few specialist providers — you cannot sign in, pay, or receive a notification without them. They are processors, not independent recipients: each is contractually bound to handle data only on our instructions and only for the purpose below, is barred from using it for its own ends, and receives the minimum the job requires. Here is every category we use and exactly what reaches it:
| Category of provider | Why it is needed | What it receives |
|---|---|---|
| Sign-in providers (Google, Apple) |
To verify it is really you signing in, without Flowalth ever handling a password | The sign-in token we pass back for verification. These companies already hold your Google or Apple account; we gain only your identifier, email and name. |
| App stores (Apple App Store, Google Play) |
To take payment for the subscription | Your purchase, handled entirely by the store. We never receive your card number, CVV or billing address. |
| Subscription management | To check your store receipt and tell us whether your subscription is active | Your Flowalth account ID, email address, name and purchase history. None of your financial data. |
| Notification delivery | To carry a reminder from our server to your device — only if you enabled notifications | Your device's push token and the text of the reminder itself. No amounts and no account figures are ever put in a notification. |
| Hosting infrastructure | To run the server and database the app talks to | It provides the machines your data sits on. The provider has no access to the contents of our database and never processes it for any purpose of its own. |
We can tell you the specific companies behind any of these categories on request — just email us. We review them for adequate security and privacy practices before use, and we will update this policy if the categories themselves change.
Beyond those providers, we disclose personal data only where we are legally compelled to — a binding court order or a valid legal demand — or where it is strictly necessary to protect our legal rights or someone's safety. Where the law allows it, we will tell you if this happens.
If Flowalth is ever sold or transferred, your data could pass to the new owner. You would be told before that happened, this policy would keep applying until you were given notice of a new one, and you would be free to delete your account first.
Flowalth's server and database are hosted in the United States, and our service providers may process data in the United States and other countries where they operate.
If you are in the EEA, the UK or Switzerland, this means your personal data is transferred outside your home jurisdiction. Those transfers rely on the European Commission's Standard Contractual Clauses (and the UK Addendum where applicable), incorporated into our agreements with those providers, together with appropriate technical safeguards — encryption in transit and access limited to what is operationally necessary.
We keep personal data only for as long as it serves the purpose it was collected for. In practice that means your data lives exactly as long as your account does — and not one day longer.
| Data | Retention period |
|---|---|
| Your account and everything in it — transactions, categories, goals, savings and onboarding answers | For as long as your account exists. Flowalth is a financial history, so we never expire your numbers on you. Deleted in full when you delete your account. |
| Subscription status | For as long as your account exists; deleted with it. |
| Sign-in session | Until you sign out or delete your account. Sessions also expire on their own and are cleared automatically. |
| Notification token | Until you sign out, delete your account, or your device stops being reachable. Removed automatically in every case. |
| Operational server logs | A short rolling window. They are rotated out automatically and never archived for long-term analysis. |
| Support and privacy correspondence | As long as needed to resolve the matter, plus a reasonable period afterwards in case you follow up. |
You can delete your account from inside the app at any time — see section 10 for exactly where. When you do:
We take the security of your data seriously and apply safeguards appropriate to how sensitive it is. In particular:
No system is perfectly secure, and we will not pretend otherwise. If a breach ever affects your personal data, we will notify you and the relevant supervisory authority as required by law, without undue delay.
Depending on where you live, you have some or all of the following rights over your data: access it, correct it, delete it, export it in a portable form, restrict or object to how we use it, and withdraw consent you previously gave. We will never treat you differently for exercising any of them.
Open Settings → Delete account and confirm. That is all it takes — no email to us, no form, no waiting period, no explanation required.
This permanently and irreversibly deletes your account and everything in it, as described in section 8. It cannot be undone by you or by us, so export anything you want to keep before you confirm.
One thing it does not do: cancel your subscription. Billing is held by the store, not by us, so if you have an active subscription, cancel it in your Apple ID or Google Play subscription settings as well, or you may be billed again.
Everything we hold about you is visible in the app itself, and every transaction, category, goal and savings entry can be edited or deleted there directly.
Email nickbutnar@gmail.com from the address on your account and we will send you a machine-readable copy of your data, or action any other request above, within 30 days. We may need to confirm you control the account email before acting on a request — that is to protect you, not to stall.
If you are in the EEA or the UK and you think we have handled your data improperly, we would much rather hear from you first — but you always have the right to lodge a complaint with your national data protection supervisory authority.
Flowalth is not directed at children. You must be at least 16 to use it in the EEA and the UK, and at least 13 elsewhere. We do not knowingly collect data from anyone younger. If you believe a child has created an account, email us and we will delete it and its data.
If we change how we handle your data, we will update this page and move the "Last updated" date at the top. For changes that materially affect your rights, we will also tell you in the app or by email before they take effect. We will never retroactively reduce your rights over data we already hold without asking you first.
Questions, requests, or a sentence in here that reads like it is hiding something — write to us:
Nikita Butnar — Flowalth
nickbutnar@gmail.com