Privacy Policy

1. Information Collected

When you use Flow Arts Composer, the following types of information are collected:

• Account Information: Email address and display name when you create an account. If you choose Instagram sign-in, TKA stores your Instagram account ID, username, and professional account type. TKA does not store your Instagram access token.
• Usage Data: How you interact with the application, including sequences you create and features you use
• Device Information: Browser type, device type, and operating system for optimization purposes
• Messages: Content of messages you send to other users through the in-app messaging feature

2. How Your Information Is Used

The information collected is used to:

• Provide and maintain the Flow Arts Composer service
• Personalize your experience and save your preferences
• Enable community features like sharing sequences
• Improve and optimize the application
• Communicate important updates about the service

3. Data Storage and Security

Your data is stored securely using Firebase services, including:

• Firebase Authentication: Handles sign-in and account security
• Cloud Firestore: Stores your sequences, settings, and profile
• Firebase Storage: Stores any uploaded images or media

Your data may be stored on servers in the United States and other countries where Google operates data centers. Appropriate technical and organizational measures are in place to protect your personal information against unauthorized access, alteration, disclosure, or destruction.

4. Messages and Communications

When you use the messaging feature to communicate with other users, your messages are stored to deliver them and maintain your conversation history.

When messages may be reviewed: Messages may be reviewed by the developer only to respond to abuse reports or to provide support when you contact Flow Arts Composer about a conversation issue.

Your messages are not: Sold, shared with third parties, or used for machine learning training. Your conversations are not used to train AI models.

5. Data Sharing

Your personal information is never sold. Data may be shared only in the following circumstances:

• With your consent when you choose to share sequences publicly
• With Firebase/Google as the infrastructure provider (see their privacy policy)
• With Meta when you choose Instagram or Facebook sign-in. Meta receives the information needed to authorize that sign-in.
• When required by law or to protect legal rights

6. Your Rights

All Users

You have the right to:

• Access the personal information held about you
• Request correction of inaccurate information
• Request deletion of your account and associated data
• Export your sequences and content

To delete your account, visit the account deletion page.

You can also submit a data deletion request from Instagram's authorized apps settings. TKA removes the Instagram account ID, username, account type, and connection record. If Instagram is your only sign-in method, the request deletes your TKA account because it would no longer have a usable login.

EU Users (GDPR)

If you're in the European Union, you additionally have the right to:

• Object to processing of your personal data
• Request data portability (receive your data in a structured format)
• Lodge a complaint with your local data protection authority

California Users (CCPA)

Flow Arts Composer is a small independent project that falls below CCPA revenue thresholds. However, California users are afforded the same rights: you can request to know what data is held, request deletion, and will not face discrimination for exercising these rights.

7. Data Retention

Your data is retained for as long as your account is active. When you delete your account:

• Your profile, sequences, and settings are deleted immediately
• Backup data may persist for up to 30 days before being permanently removed
• Anonymized usage statistics may be retained indefinitely

To delete your account and all associated data, visit the account deletion page.

When you delete your account, a minimal record is kept for 12 months: your name, email, the deletion date, and any reason you choose to provide. This record exists solely to document and audit the deletion itself, as required under data protection law. After 12 months it is permanently removed.

8. Cookies and Local Storage

Flow Arts Composer uses local storage and cookies to maintain your session and remember your preferences. These are essential for the application to function properly. Cookies are not used for advertising or cross-site tracking.

9. Third-Party Services

Flow Arts Composer uses the following third-party services:

• Firebase: Authentication, database, and storage (privacy policy)
• PostHog: Anonymous usage statistics to understand how people use TKA. This includes page views, approximate location, device type, and session recordings. You can disable this in your browser settings or by using an ad blocker.
• Meta: Optional Instagram and Facebook account authorization. Instagram sign-in is available only for creator and business accounts.

10. Children's Privacy

Flow Arts Composer is not intended for children under 13 years of age. Personal information is not knowingly collected from children under 13. If you believe a child has provided personal information, please get in touch so it can be deleted.

11. Changes to This Policy

This Privacy Policy may be updated from time to time. Changes will be posted on this page with an updated "Last Updated" date.

12. Contact

For questions about this Privacy Policy or your data, email tkaflowarts@gmail.com.