PRIVACY POLICY FOR FLOWLOCK


────────────────────────────────────────

1. INTRODUCTION

────────────────────────────────────────


This Privacy Policy explains how RisingInc ("FlowLock," "we," 

"us," or "our") handles information when you use the FlowLock 

mobile application (the "App") on Android devices.


FlowLock is a focus productivity app that helps you block 

distracting apps during timed focus sessions and track your 

focus habits. We have designed FlowLock to be a privacy-first 

app: the vast majority of your data stays on your device and 

is never sent to us or any third party.


By installing and using FlowLock, you agree to this Privacy 

Policy. If you do not agree, please do not use the App.


────────────────────────────────────────

2. SUMMARY (PLAIN-LANGUAGE OVERVIEW)

────────────────────────────────────────


- FlowLock works entirely on your device.

- RisingInc does NOT collect, store, or transmit your personal 

  data to our servers.

- FlowLock does NOT have user accounts, logins, or cloud sync.

- RisingInc does NOT sell, rent, or share your data with 

  advertisers or third parties.

- FlowLock does NOT track your location.

- FlowLock does NOT read, record, or transmit the content of 

  your screen, messages, keystrokes, or any apps you use.

- Your display name, focus sessions, blocklist, streaks, and 

  statistics are stored locally on your device only.

- You can uninstall the App at any time to delete all data 

  associated with FlowLock.


────────────────────────────────────────

3. INFORMATION FLOWLOCK ACCESSES

────────────────────────────────────────


FlowLock accesses the following information only on your 

device. None of it is transmitted off your device by RisingInc.


3.1  Display Name (Optional)

You can enter a first name or nickname in the FlowLock 

settings so the App can greet you and personalize timer 

notifications (e.g., "Good morning, Alex"). This name is 

stored only in your device's local preferences. You can 

change or delete it at any time in Settings.


3.2  List of Installed Apps

To let you choose which apps to block during focus sessions, 

FlowLock reads the list of apps installed on your device 

(names, icons, and package identifiers). This list is shown 

to you inside the App's blocklist screen. The list is never 

uploaded or shared.


3.3  Foreground App Detection (via Accessibility Service)

When a focus session is active, FlowLock detects which app is 

currently in the foreground so it can show the blocking 

overlay when you try to open one of the apps YOU selected to 

block. FlowLock does NOT:

   • read the contents of any app,

   • record your screen,

   • log keystrokes,

   • capture passwords or messages,

   • monitor browsing, or

   • transmit foreground-app information off your device.

The only information used is the package name of the app in 

the foreground, compared against your blocklist locally. The 

result is discarded immediately.


3.4  Usage Statistics (via Usage Stats Permission)

FlowLock uses Android's Usage Stats API to calculate how many 

minutes you have spent in focus sessions and to power your 

weekly bar chart, best-day metrics, average session length, 

and 28-day streak heatmap. This data is read and processed 

locally; RisingInc never receives or stores it.


3.5  Focus Session Data (Stored Locally)

The following data is created by your use of FlowLock and 

saved only on your device:

   • Session durations you have chosen

   • Sessions completed, paused, or stopped

   • Number of times a blocked app was opened during a session

   • Current and longest streaks

   • Daily focus minutes (for the heatmap)

   • Theme, sound, haptic, and reminder preferences


3.6  Notification Tokens / Push Notifications

FlowLock uses LOCAL notifications only — generated on your 

device — to show the live timer, halfway reminders, and 

session-complete alerts. FlowLock does NOT use push 

notifications and does NOT register for any cloud messaging 

service (such as Firebase Cloud Messaging).


────────────────────────────────────────

4. INFORMATION WE DO NOT COLLECT

────────────────────────────────────────


FlowLock does not collect any of the following:

- Your name, email address, phone number, or contacts

- Your precise or approximate location

- Photos, videos, audio recordings, or microphone input

- Camera content

- SMS, call logs, or contact lists

- Financial or payment information

- Health, fitness, or biometric data

- Web browsing history or web activity

- Advertising identifiers (AAID/GAID) for tracking

- Crash logs containing personal information (see Section 7)

- The contents of any apps you use, including blocked apps


────────────────────────────────────────

5. PERMISSIONS WE REQUEST AND WHY

────────────────────────────────────────


Android may ask you to grant the following permissions. Each 

is used solely for the purpose listed below. You can revoke 

any of them at any time in your device Settings; some 

features of FlowLock will stop working when a required 

permission is revoked.


5.1  Accessibility Service (REQUIRED for app blocking)

Purpose: To detect when you open an app that is on your 

blocklist during an active focus session, so FlowLock can 

display the full-screen block overlay and help you stay 

focused.


What FlowLock accesses through this API: only the package 

name (technical identifier) of the app currently in the 

foreground.


What FlowLock does NOT do with this API: read screen content, 

read text in apps, capture passwords, record activity, 

transmit data, perform actions on your behalf inside other 

apps, or use the API for any purpose other than enforcing 

focus-session blocking.


This data is processed entirely on-device, is not stored 

beyond the moment of comparison, and is never shared with 

RisingInc or any third party.


You will see a separate in-app disclosure screen explaining 

this before you are asked to enable the permission. Granting 

this permission is your explicit, affirmative choice.


5.2  Post Notifications (Android 13+)

Purpose: To show the timer notification with live progress, 

session reminders at the halfway point and final 5 minutes, 

and session-complete alerts.


5.3  Package Visibility (QUERY_ALL_PACKAGES or equivalent)

Purpose: To show you the list of your installed apps so you 

can choose which ones to block. The list is not transmitted.


5.4  Usage Stats (PACKAGE_USAGE_STATS)

Purpose: To calculate your weekly focus statistics, streaks, 

and best-day metrics. Read and processed only on your device.


5.5  Foreground Service / System Alert Window

Purpose: To keep the focus timer running reliably when your 

screen is off or FlowLock is in the background, and to 

display the block overlay above other apps.


5.6  Vibrate

Purpose: For optional haptic feedback when sessions start or 

end. You can disable this in Settings.


────────────────────────────────────────

6. HOW YOUR INFORMATION IS STORED AND SECURED

────────────────────────────────────────


All FlowLock data — display name, blocklist, session history, 

streaks, statistics, and preferences — is stored in your 

device's private app storage and Android SharedPreferences. 

This storage is sandboxed by the Android operating system and 

is not accessible to other apps on your device.


Because RisingInc does not collect or transmit your data to 

any server, there is no cloud account, no remote database, 

and no external system that holds your information.


If you uninstall FlowLock, Android automatically deletes all 

locally stored FlowLock data from your device.


────────────────────────────────────────

7. CRASH REPORTS AND ANALYTICS

────────────────────────────────────────


[CHOOSE ONE OF THE TWO OPTIONS BELOW AND DELETE THE OTHER 

BEFORE PUBLISHING. BE HONEST — THIS MUST MATCH YOUR DATA 

SAFETY FORM.]


OPTION A — IF YOU USE NO ANALYTICS OR CRASH SDK:

FlowLock does not use any third-party analytics, advertising, 

or crash-reporting SDKs. RisingInc receives no automatic 

information about how you use the App.


OPTION B — IF YOU USE GOOGLE PLAY'S BUILT-IN CRASH REPORTING 

OR A SIMILAR SERVICE:

FlowLock uses [Google Play Console crash reporting / Firebase 

Crashlytics / OTHER] to receive anonymized crash and 

application-not-responding (ANR) reports. These reports may 

include your device model, Android version, the FlowLock 

version, and the technical stack trace of the crash. They do 

NOT include your display name, blocklist, session data, or 

any personal content. RisingInc uses this information solely 

to fix bugs and improve App stability. You may opt out of 

usage and diagnostics sharing in your Android system settings 

(Settings > Google > Usage & diagnostics).


────────────────────────────────────────

8. THIRD-PARTY SERVICES

────────────────────────────────────────


FlowLock is distributed through the Google Play Store. Google 

collects information about installs, uninstalls, ratings, and 

reviews under its own privacy policy 

(https://policies.google.com/privacy). RisingInc has no 

control over what Google collects through its store.


Aside from [the optional crash reporting noted above, if 

any], FlowLock does NOT integrate any third-party SDKs, 

advertising networks, tracking pixels, social-login providers, 

or analytics platforms.


────────────────────────────────────────

9. CHILDREN'S PRIVACY

────────────────────────────────────────


FlowLock is intended for general audiences age 13 and older. 

RisingInc does not knowingly collect personal information 

from children under 13 (or under the equivalent minimum age 

in your jurisdiction). Because FlowLock does not collect 

personal information from any user, no such information about 

children is collected, stored, or shared.


If you are a parent or guardian and believe your child has 

provided us with personal information, please contact 

RisingInc at the email address below and we will take steps 

to address it promptly.


────────────────────────────────────────

10. YOUR RIGHTS AND CHOICES

────────────────────────────────────────


Because FlowLock stores your data only on your device, YOU 

control all of it. You can at any time:


- Edit or delete your display name in Settings.

- Remove any app from your blocklist.

- Reset your session history, statistics, and streaks by 

  using the in-app reset option [if implemented] or by 

  clearing the App's data in your device Settings > Apps > 

  FlowLock > Storage > Clear data.

- Revoke any permission in your device Settings.

- Uninstall FlowLock, which deletes all FlowLock data from 

  your device.


If you are located in the European Economic Area (EEA), the 

United Kingdom, California, or another jurisdiction granting 

data-subject rights (such as access, rectification, erasure, 

restriction, portability, or objection), you may exercise 

those rights at any time by following the instructions above 

or by contacting RisingInc. Because we do not hold your data 

on any server, most such rights are satisfied directly by you 

on your device.


────────────────────────────────────────

11. INTERNATIONAL USERS

────────────────────────────────────────


FlowLock is operated by RisingInc from [COUNTRY OF DEVELOPER]. 

Since RisingInc does not collect or transfer personal 

information, there is no cross-border data transfer 

associated with your use of FlowLock. The Google Play Store 

may transfer App-distribution information internationally 

under its own policies.


────────────────────────────────────────

12. DATA RETENTION

────────────────────────────────────────


Local data created by FlowLock (session history, streaks, 

preferences) is retained on your device until you delete it, 

clear App data, or uninstall FlowLock. RisingInc does not 

retain any data itself because no data is collected.


If Option B in Section 7 applies, anonymized crash data 

retention is governed by the relevant third-party service's 

retention schedule (typically 90 days for Google Play 

Console; up to 90 days for Firebase Crashlytics).


────────────────────────────────────────

13. CHANGES TO THIS PRIVACY POLICY

────────────────────────────────────────


RisingInc may update this Privacy Policy from time to time to 

reflect changes to FlowLock, the law, or our practices. The 

"Last Updated" date at the top will always reflect the most 

recent revision. Material changes will be communicated 

through an in-app notice or the Google Play Store listing. 

Continued use of FlowLock after an update means you accept 

the revised policy.


────────────────────────────────────────

14. CONTACT US

────────────────────────────────────────


If you have any questions, concerns, or requests regarding 

this Privacy Policy or your data, please contact RisingInc:


RisingInc

Email: [SUPPORT EMAIL, e.g., support@risinginc.com]

Website: [YOUR WEBSITE, optional]

Mailing address: [PHYSICAL ADDRESS — REQUIRED IF YOU TARGET 

EU/UK USERS UNDER GDPR]


────────────────────────────────────────

15. JURISDICTION-SPECIFIC NOTICES

────────────────────────────────────────


15.1  EEA / UK Users (GDPR / UK GDPR)

The legal basis for any minimal on-device processing 

described above is your consent (Article 6(1)(a) GDPR), given 

when you install FlowLock and grant the relevant permissions. 

Since RisingInc does not act as a data controller of any 

personal data transmitted off your device, GDPR's 

data-controller obligations have limited application. You 

retain the right to lodge a complaint with your national data 

protection authority.


15.2  California Users (CCPA / CPRA)

RisingInc does not collect, sell, or share "personal 

information" as defined under the California Consumer Privacy 

Act. RisingInc has not sold or shared personal information in 

the preceding twelve months and has no plans to do so.


15.3  Other Jurisdictions

Where local data-protection laws apply (e.g., LGPD in Brazil, 

PDPA in Singapore, DPDP Act in India, PIPEDA in Canada), the 

practices described in this policy apply equally to you. 

Please contact RisingInc to exercise any local rights.


────────────────────────────────────────

END OF PRIVACY POLICY

────────────────────────────────────────