Flow Capture is local-first. Projects, screenshots, screen recordings, and original voice comments remain on the user's iPhone unless the user deliberately exports or sends them.
Data used for optional cloud features
- Account data: name, email address, a private account identifier, purchase entitlement, and connected-integration metadata are stored to provide authentication, purchases, transcription allowances, and integrations.
- Voice processing: when a user requests transcription or comment polishing, the selected audio, or comment text together with linked screen titles and recognized interface text, is sent securely to Flow Capture's processing providers. Temporary cloud audio is removed after the request finishes. The original audio and resulting text remain in the local project.
- Figma transfer: a flow package is uploaded only when the user chooses direct Figma transfer. To pair the plugin with the correct Flow Capture account, the plugin sends the signed-in Figma user ID and display name to Flow Capture. An opaque plugin session token is stored in Figma client storage. Pending packages are available for up to seven days. Offline ZIP exports are not uploaded by Flow Capture.
- AI transfer through MCP: a package is uploaded only after the user confirms Send to AI. It may include ordered screenshots, comments, a prompt and available original audio. Only computers connected by an approved pairing code can fetch the account’s explicitly shared exports. Copies expire after seven days and can be removed earlier in Settings → Codex & Claude → Shared Access. Remote connections use OAuth with one-time approval on iPhone. The AI service holds separate, revocable access and refresh credentials; Flow Capture stores credential hashes and encrypted provider credentials on its server. Your iPhone session is not shared with the AI service. Connections renew during use and expire after 90 days of inactivity. Disconnecting prevents further reads, but does not erase files already downloaded by an AI service. Once the user asks Claude or Codex to read an export, that client’s own data-processing terms apply. Flow Capture does not automatically start AI conversations.
- Purchases: Apple provides signed transaction information so Flow Capture can unlock purchased features and transcription minutes.
Remote connector requests are routed through Cloudflare. Authentication, connection records and explicitly shared export storage are hosted on Supabase. These providers process the connection and request data needed to deliver the integration; shared content is not publicly accessible.
Flow Capture does not sell personal data, use it for advertising, or track users across apps and websites. Service providers are used only to deliver the features requested by the user and are required to protect the data they process.
Retention and deletion
Temporary transcription audio is deleted from cloud storage after processing. Direct Figma transfer packages stop being available after seven days and are removed by Flow Capture's retention cleanup. Revoking the Figma integration invalidates its plugin sessions immediately; inactive connection metadata, including the Figma user ID and display name, remains while the Flow Capture cloud account exists.
Users can permanently delete their Flow Capture cloud account and associated cloud data in Settings › Account › Delete Account. Local projects and recordings are not removed by account deletion. Deleting a Flow Capture account does not cancel an Apple subscription; subscriptions can be managed in the App Store account settings.
After account deletion, Flow Capture may retain the minimum signed Apple transaction identifiers without an active profile link where necessary to prevent the same purchase from being credited more than once, resolve refunds, and meet transaction or fraud-prevention obligations.
Permissions
Microphone access is requested only when the user enables Voice Commentary or records a voice comment. The app continues to support local capture and organization without a cloud account. The Figma plugin requests the currentuser permission only for optional direct-transfer pairing; offline imports do not use Flow Capture's backend.
This website
This website is hosted on GitHub Pages and uses fonts delivered by Google Fonts. These providers receive standard connection information, such as your IP address and browser request details, to deliver the website and fonts. We do not use advertising trackers or analytics scripts on this website.
Privacy requests
Account deletion is available inside the app using the path above. For privacy requests, contact support@flowcap.me. See Support for current help and account guidance.