Flow Privacy Policy

1. Who We Are

Flow is operated by Allan Monge Jiménez, operating as Chirripó Studio, a Costa Rica-based independent software studio. For privacy purposes, the data controller for Flow, the Flow website pages, launch list, downloads, updates, and Flow support is Chirripó Studio / Allan Monge Jiménez. In that role, Chirripó Studio determines the purposes and means of processing Flow-related personal data, except where a third-party provider such as Lemon Squeezy acts under its own buyer terms and privacy policy.

Data controller: Chirripó Studio / Allan Monge Jiménez
Contact/legal mailing address: Chirripó Studio / Allan Monge Jiménez, Calle Almendros #26, San Diego, La Unión, Cartago, Costa Rica
Privacy contact: legal@chirripo.studio
Support contact: support@chirripo.studio

2. What This Policy Covers

This policy covers the Flow pages on chirripo.studio, Flow launch lists, Flow support channels, Flow downloads, Flow updates, and the Flow bundle apps: Clippings, Detour, Insomnia, SnapWrite, Biwave, Markleap, Adieu, and Vozz where offered as part of the Flow bundle.

3. Data We Handle

• Website and launch list: email address, message content, requested page, IP address, user agent, referrer, timestamps, and error logs.
• Flow local apps: product data such as clipboard items, snippets, browser routing rules, timers, Markdown files and metadata, DNS filtering rules, audio preferences, dictation text, app preferences, and similar working data. Flow apps are designed to keep this data on your Mac unless an online action is needed. Direct-download apps may check updates.chirripo.studio for updates; those requests can include technical details such as app version, macOS version, and device architecture so the correct update can be served. Adieu is designed to process DNS queries locally through macOS Network Extension APIs; DNS query contents are not sent to Chirripó Studio unless a product-specific notice says otherwise.
• Purchases and licenses: when paid Flow checkout becomes available through Lemon Squeezy, Lemon Squeezy will act as merchant of record and authorized reseller for purchases made through chirripo.studio. Lemon Squeezy may process order, billing, subscription, license, activation, refund, chargeback, fraud-prevention, sales-tax, and VAT data under the Lemon Squeezy Buyer Terms and Privacy Policy. Until paid Flow checkout becomes available, no Flow transactions are processed.
• Support: your email, message, attachments, product/version details, diagnostics, screenshots, logs, files, or sample data you choose to send.

4. Permissions and Local Access

Flow apps request only the macOS permissions needed for the feature you choose to use. Depending on the app and settings, Flow may ask for or use the following local access:

• Clippings: clipboard access for clipboard history and optional Accessibility access for paste workflows into the active app.
• Detour: default-browser handling and local browser/profile discovery so links can open in the browser profile you choose.
• Insomnia: macOS power assertions to keep the Mac awake, optional notifications for timers, and optional launch-at-login behavior.
• SnapWrite: Accessibility and keyboard monitoring/Input Monitoring for inline text expansion, plus clipboard access to insert and restore snippets.
• Biwave: local audio playback settings and optional online catalog or streaming metadata where an audio source is enabled.
• Markleap: user-selected file or folder access for Markdown workspaces, document editing, previews, and exports.
• Adieu: macOS System Extension and Network Extension access for local DNS-based blocking on the device you control.
• Vozz: microphone access for dictation and Accessibility or clipboard-based insertion to place final dictated text into the focused app.

Permission prompts are handled by macOS. You can review or revoke permissions in System Settings. Revoking a permission may disable the related feature.

5. How We Use Data

• To run the Flow website pages, downloads, updates, trials, licenses, purchases, refunds, and support.
• To send requested launch notes, service messages, receipts, and support replies.
• To prevent abuse, troubleshoot issues, keep Flow secure, and comply with tax, accounting, payment, and legal obligations.

6. Sharing and Providers

We share personal data only with providers needed to operate the site, deliver Flow, provide email and support, process checkout or licenses, comply with law, or protect Chirripó Studio and customers from abuse. Current launch infrastructure includes website hosting, email, app download hosting at downloads.chirripo.studio, and app updates at updates.chirripo.studio once those hostnames are provisioned. When paid Flow checkout becomes available through Lemon Squeezy, Lemon Squeezy will act as merchant of record and authorized reseller for those purchases and may handle payment processing, sales tax/VAT, subscription billing, refund administration, chargeback handling, customer portal access, and license-key issuance or validation.

7. Retention and Deletion

Flow local app data stays local unless a product-specific notice says otherwise. You can delete local data by using app controls where available, removing the app, and deleting its support files. Support messages are kept only as long as reasonably needed for support, security, accounting, legal, or dispute purposes.

Purchase, invoice, tax, refund, subscription, and license records may need to be kept by Chirripó Studio or its providers for legal, accounting, fraud-prevention, and compliance reasons even after access ends.

8. Security and Incidents

We use reasonable administrative, technical, and operational safeguards for Flow websites, downloads, update services, support channels, and account or license records. If we confirm a personal-data incident that requires notice, we will notify affected users and competent authorities without undue delay where required by applicable law.

9. International Processing

Chirripó Studio is based in Costa Rica and may use providers in other countries, including the United States. By using the website, contacting us, downloading Flow, or purchasing through checkout, your data may be processed outside your country of residence.

10. Your Rights

Depending on where you live, you may have rights to access, correct, delete, export, restrict, or object to certain processing of your personal data; withdraw consent where processing is based on consent; or complain to a competent privacy authority. Email legal@chirripo.studio with your request. We may need information to verify your identity and may keep records where required for legal, accounting, fraud-prevention, or dispute purposes.

11. Children and Privacy Signals

Flow is not directed to children under 13, or the equivalent minimum age in your jurisdiction. We do not knowingly collect personal data from children.

The Chirripó website does not use behavioral advertising. Browser "Do Not Track" and Global Privacy Control signals do not change the site behavior today, but you can email legal@chirripo.studio with any privacy request.

12. Changes

We may update this policy as Flow moves from pre-launch to paid checkout and public release. The "last updated" date shows the latest version.