What Fluo knows about you, and what it does with it.

• Your tasks, habits, journal entries and focus sessions are private to your account — enforced at the database level, not just in the app.
• Some features send your content to an AI model to process it. Section 5 says exactly which ones, and how to avoid them.
• Fluo does not use your location, camera, microphone, contacts, or health data. It does not run advertising or cross-app tracking.
• Fluo only connects to another account if you choose to: Google Calendar, from your Profile. Nothing else — no drive, no contacts, no social accounts.
• We don't sell your data. Ever.
• You can delete your account and everything in it yourself, inside the app, in about three taps (Section 11).

Fluo is a personal productivity app built to help people beat procrastination. This policy covers the Fluo mobile apps (Google Play and the Apple App Store), the Fluo web app, and the Fluo website.

Fluo is operated by Mpho, an independent developer. For anything in this policy, write to mpho4thepaper@gmail.com.

Fluo is built and hosted on the Base44 application platform, which provides our database, authentication, file storage, serverless functions, and AI model access. Base44 processes data on our behalf as a service provider.

Everything below is either given to us by you, or generated by you using the app. There is no third-party data buying, enrichment, or profile purchasing.

Account information

We do not receive or store your password. Authentication is handled by your sign-in provider.

Content you create

Connected accounts

Google Calendar (optional, off by default). If you tap Connect on the Google Calendar card in your Profile, you sign in with Google and grant Fluo permission to view and edit events in your calendar. Fluo uses it for two things only: it adds your Fluo tasks and habits for the next 7 days to your primary calendar and keeps them up to date, and it shows the events already in your calendar inside Fluo's Week view. Fluo only ever changes or removes events it created itself (they're tagged as Fluo's), never events you made. Your calendar events are read when you open the Week view and are not stored by Fluo. You can disconnect at any time from Profile, or from your Google Account's third-party access page; events Fluo already added stay until you delete them.

Fluo's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Google Calendar data is used only to show your schedule to you and keep your Fluo plan in your calendar. It is never sold, never used for advertising, never used to train AI models, and never read by people except where you ask us for help or the law requires it.

Fluo does not connect to any other account. It cannot read your files, your contacts, or any social account, and it asks for no such permission.

Usage and technical data

• Product analytics. Fluo records in-app events — for example, that a task was completed or a focus session was started — so we can see which features actually help people start. These events are tied to your account. They record that an action happened, not the private text of your tasks or journal.
• Server logs. Our hosting platform records standard technical information when the app talks to our servers: IP address, timestamp, request path, device and browser type, and error details. Used for security, debugging and abuse prevention.
• Local storage on your device. Fluo stores small values in your device storage — the time your last nudge was shown, which reminders you have switched on, which of today's alarms have already rung, your daily-reset date, and cached daily-challenge and batch groupings. This stays on your device and is not transmitted to us.

Fluo asks for as little from your device as it can get away with.

You can revoke notification permission at any time in your device settings, or switch reminders off inside Fluo under Profile → Reminders (time-of-day alarms) and Profile → Nudge Notifications (the slower check-ins).

Several Fluo features use a large language model to make sense of what you've written. This is the part of the app that sends your content off your device, so it deserves to be spelled out precisely.

AI output is a suggestion, not advice. Fluo's insights are not medical, psychological, financial or legal advice.

• To run the app — storing your tasks, habits, journal and streaks so they're there when you come back.
• To deliver the features you ask for — AI breakdowns, insights, document analysis, focus timers, points.
• To send reminders you've enabled — streak reminders, journal reminders, and daily summary emails, sent to your registered email address.
• To make Fluo better — aggregate usage patterns tell us which features help people start, and which don't.
• To keep it safe and fair — detecting abuse, preventing point manipulation, fixing bugs.
• To communicate with you — product updates and support replies. When you first use Fluo, your email address and name are added to our contact records in HubSpot for this purpose (Section 7).
• To meet legal obligations — where the law requires us to retain or produce records.

Where the law in your country requires a legal basis for processing, ours is: performing our contract with you (running the app), your consent (notifications, AI features, marketing email), and our legitimate interests (security, product improvement).

A short list, and it stays short. Each of these is a service provider bound to process data only on our instructions.

Our service providers operate internationally, so your data may be stored or processed outside your country. Where we transfer data across borders we rely on the safeguards those providers have in place, including standard contractual clauses where applicable.

• Row-level isolation. Every record in Fluo carries the ID of the user who created it, and the database itself refuses read or write requests from any other account — enforced server-side, so it holds even if the app on your device is tampered with.
• Server-authoritative rewards. Points can only be written by a trusted server process, not by the app on your device.
• Encryption in transit. All traffic between your device and our servers runs over TLS.
• Least access. Administrative access to production data is limited to what's needed to operate and support the service.

No system is perfectly secure, and we won't pretend otherwise. If a breach affects your personal data, we will notify you and any required regulator without undue delay.

In the app: go to Profile → Delete Account and confirm. This immediately and permanently deletes your tasks, habits, journal entries, daily logs, focus sessions, points, friend connections, and your account record. It cannot be undone, and we don't keep a "soft copy".

Without the app: if you've uninstalled Fluo or can't sign in, email mpho4thepaper@gmail.com from your account's email address with the subject "Delete my account", and we'll do it for you within 30 days and confirm when it's done.

Deleting your account does not remove your contact record in HubSpot unless you ask — mention it in your email and we'll clear that too.

Step-by-step instructions live on our dedicated deletion page: fluo.live/delete-account.

Wherever you live, we'll honour all of the following:

• Access — ask what we hold about you, and we'll tell you.
• Export — get a copy of your data in a machine-readable format.
• Correction — fix anything inaccurate; most of it you can edit directly in the app.
• Deletion — in-app, or by email (Section 11).
• Withdraw consent — turn off notifications, unsubscribe from emails, or stop using AI features at any time.
• Object or restrict — ask us to stop or limit a particular use of your data.
• Complain — lodge a complaint with your local data protection authority. We'd appreciate the chance to fix it first.

To exercise any of these, email mpho4thepaper@gmail.com from your account address. We respond within 30 days, we won't charge you, and we won't degrade your experience of Fluo for asking.

Fluo is not directed at children. You must be at least 13 years old to use it — or 16, if that's the minimum age of digital consent where you live. We don't knowingly collect data from anyone below that age. If you believe a child has created an account, email us and we'll delete it and its contents.

We'll update this page when Fluo changes. The "last updated" date at the top always reflects the current version. If a change materially affects how we handle your data — a new category of collection, a new recipient, a new purpose — we'll tell you in the app or by email before it takes effect, and give you a chance to object.

Privacy questions, data requests, or something in this policy that doesn't match what you're seeing in the app:

Mpho — Fluo
mpho4thepaper@gmail.com

If you think something here is vague, tell us. A privacy policy that people can't understand isn't transparency.