Privacy
Flow keeps your story state on your device, sends prompts to the AI provider you choose, and asks for the smallest set of Google permissions it can to make sign-in and the optional features (sync, send-to-Kindle) work. Below is the specific list, in the order you'd reasonably want to read it.
On your device
Flow saves your settings and current story progress in encrypted cookies on your device so you can return without starting over. If you use password-protected chat, the chat history is stored briefly on Flow's server (hosted on Cloudflare) so the conversation can continue across page loads.
What Google sees
Flow follows the Google API Services User Data Policy, including the Limited Use requirements. Sign-in is opt-in; Drive and Gmail features only run when you explicitly trigger them.
Tokens are stored encrypted on your device and in session storage. Sign out, or revoke at myaccount.google.com/permissions, to remove them. Flow does not sell, share, or transfer Google user data, and does not train models on it.
The four scopes Flow requests:
- userinfo.email · userinfo.profile
- Email, display name, profile picture, and Google account ID. Used to render your account row in Setup, key your wallet and library, and lock Parent Mode.
- drive.appdata
- Stores one hidden file in your Drive's appdata folder so your saved-story library follows you across devices. Invisible to other apps.
- drive.file
- Used only when you explicitly export a story to Drive. Flow can only see files it created or that you opened with Flow.
- gmail.send
- Used only when you tap Send to Kindle. Flow sends one email per click to your saved kindle.com address.
To remove Flow entirely, sign out from Setup and revoke at myaccount.google.com/permissions.
Uploads & pasted text
When you generate a scene, Flow sends your prompt and any pasted or uploaded text to OpenRouter, which routes the request to the AI model you selected. Flow itself does not save uploaded files. Files are processed in memory and discarded when the request finishes. Flow keeps only a small excerpt and a running story memory, stored in encrypted cookies on your device.
Once your prompt and text leave Flow, they are handled by OpenRouter and the AI model provider you selected. Both have their own logging and retention policies. See OpenRouter's data-collection documentation.
Don't enter private student records, medical records, financial information, passwords, or other sensitive personal information. Flow is not a secure system for confidential data.
Reporting
Each scene includes a Report this scene control. Reports are stored in encrypted server storage for 90 days, scrubbed of any account or device identifiers, and reviewed by the Flow operator. See Safety & reporting for details.
Children
Flow is for general audiences and does not knowingly collect personal information from children under 13. If you are a parent, teacher, or guardian using Flow with a child, you are the one choosing what they see and what gets sent. Don't enter information that identifies a child.
Changes
This page may be updated. Significant changes will be reflected here.