PRIVACY_POLICY

[ DATA_COLLECTION ]

We collect the following information when you register or use FlowChat:

• →Email address — for account verification and login
• →Progress data — your XP, level, and unlocked badges ([OPERATOR_LEVEL])
• →Session data — which scenarios and characters you have interacted with
• →Technical data — IP address, browser type, and device type for security purposes

Guest users (non-registered) are subject to IP-based rate limiting only. No personal data is stored.

[ CHAT_LOGS ]

Conversations with AI characters are processed in real-time to generate responses. Conversation summaries may be stored locally in your browser to provide memory continuity between sessions. We do not sell your personal chat data to third parties.Aggregated, anonymised data may be used to improve AI response quality.

[ COOKIES ]

We use essential cookies to keep you authenticated and to maintain your session state. These cookies are strictly necessary for the platform to function. We do not use third-party advertising cookies or tracking pixels.

[ THIRD_PARTY_SERVICES ]

FlowChat uses the following third-party services:

• →OpenAI — AI response generation. Subject to OpenAI's Privacy Policy.
• →Supabase — Account data and progress storage.
• →Vercel — Hosting and edge network. Subject to Vercel's Privacy Policy.
• →Stripe — Payment processing (Pro subscriptions). Stripe does not share payment data with us beyond transaction confirmation.

[ DATA_RETENTION ]

Account data is retained as long as your account is active. If you delete your account, all associated data is removed within 30 days. Local browser data (XP, badges, preferences) must be cleared manually via your browser settings.

[ YOUR_RIGHTS ]

You have the right to access, correct, or delete your personal data at any time. To request a full [SYSTEM_PURGE] of your account data, contact us at:

We will respond to all data requests within 30 days in accordance with applicable data protection laws (GDPR / UK GDPR).

[ MINORS ]

FlowChat is intended for users aged 18 and over. We do not knowingly collect data from minors. If we become aware that a user is under 18, their account will be terminated and data deleted immediately.