Privacy Policy

Effective date: March 25, 2026

This Privacy Policy explains how Deskflow ("we", "us", "our"), developed by Shashwat Tiwari, collects, uses, and protects your personal information when you use our macOS application and website at deskflow.web.app.

1. Information We Collect

When you create an account or use Deskflow, we may collect:

• Account data — email address, display name, and profile picture (if signing in via Google)
• Payment status — whether you have an active subscription or have completed a one-time purchase (we do not store card numbers or full payment details)
• Trial timestamps — the date and time your free trial of premium features (e.g., audio wallpapers) began
• Usage data — app version, basic interaction events (e.g., feature launches) for diagnostic purposes
• Device info — macOS version and hardware identifiers, used for licensing and compatibility checks

2. How We Use Your Data

We use the information collected to:

• Authenticate you and manage your account
• Determine your access level (free trial, paid, expired)
• Process and verify payments
• Diagnose bugs and improve App performance
• Respond to support requests
• Comply with legal obligations

We do not use your data for advertising or behavioral profiling.

3. Third-Party Services

Deskflow relies on the following sub-processors. Each has access only to the data necessary for their function:

• Supabase — stores account data, payment status, and trial timestamps in a managed PostgreSQL database. Data is hosted on servers within the EU/US. (Privacy Policy)
• Google OAuth — used for sign-in. Google may receive your IP address and browser/device info during the authentication flow. (Privacy Policy)
• Razorpay — processes payments for direct purchases. Razorpay collects billing information directly; we receive only a payment confirmation token. (Privacy Policy)
• Apple App Store — handles in-app purchases on iOS/macOS. Apple's privacy practices apply to App Store transactions. (Privacy Policy)

4. Data Retention

We retain your account data for as long as your account is active. If you request account deletion, we will delete your personal data within 30 days, except where retention is required by law (e.g., financial records).

5. Data Security

We use industry-standard security measures including TLS encryption in transit and row-level security in Supabase to protect your data. However, no system is completely secure; we cannot guarantee absolute security.

6. Your Rights (GDPR & Similar Laws)

If you are in the European Economic Area, UK, or a jurisdiction with similar privacy laws, you have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your data ("right to be forgotten")
• Object to or restrict processing of your data
• Receive a copy of your data in a portable format
• Withdraw consent at any time (where processing is based on consent)

To exercise any of these rights, email us at tiwarisanskar26@gmail.com. We will respond within 30 days.

7. Children's Privacy

Deskflow is not directed at children under 13. We do not knowingly collect personal data from children. If we become aware that we have collected data from a child under 13, we will delete it promptly.

8. Cookies & Tracking

The Deskflow website may use essential cookies for authentication sessions. We do not use advertising or analytics cookies. The App itself does not use browser cookies.

9. International Transfers

Your data may be transferred to and processed in countries outside your own (including the US) by our sub-processors. These transfers are covered by appropriate safeguards such as Standard Contractual Clauses where required.

10. Changes to This Policy

We may update this Privacy Policy. Material changes will be communicated via the website or in-app notification. The updated policy will be effective from the date posted.

11. Contact

For privacy questions, data requests, or concerns:

• Email: tiwarisanskar26@gmail.com
• Website: deskflow.web.app