Privacy Policy

Last updated: November 2026

YIALOS LTD (“we”, “us”, or “our”) operates the Flowteka website and service. This Privacy Policy explains how we collect, use, and share information about you when you use our service.

Who We Are

Flowteka is operated by YIALOS LTD, a company registered in England and Wales (company number 17554494), with its registered office at 71–75 Shelton Street, Covent Garden, London, WC2H 9JQ, United Kingdom. YIALOS LTD is the data controller for the information described here. Write to privacy@flowteka.com with any question about this policy or to exercise the rights below. Because we are based in the UK, the UK GDPR and the Privacy and Electronic Communications Regulations apply, and our supervisory authority is the Information Commissioner’s Office (ico.org.uk).

Information We Collect

Account Information

When you create an account, we collect your email address. If you sign in with Google, we also receive your name and profile photo from Google. You can add or change your name and photo in your profile. We use this information to identify you and show your account.

Your Content

If you save screens or apps and create collections, we store them with your account.

Search Queries

We store the text of searches to show popular searches and improve search quality. These records are not linked to your account and are deleted after 90 days.

Sign-in Records

When you sign in or create an account, we record the event with your email address, IP address and browser type, so we can investigate abuse and account security issues. These records are deleted after 90 days.

Abuse Prevention

To keep the free service fair and protect content from automated scraping, we count requests per IP address and per account (for example, searches and views of protected screens). These counters are kept for up to 48 hours. For visitors without an account, smart search also uses a hash of basic browser characteristics (such as screen size and how the browser renders graphics); only the hash is sent to us, it is kept for up to 48 hours and is used only to enforce free search limits — never for advertising or tracking across websites.

Technical Information

Like most websites, our hosting providers keep short-term server logs that include IP addresses, browser type and the pages requested. We do not use these logs to build profiles of visitors.

How We Use Your Information and Why

• To provide the service — your account, sign-in codes, saved screens and collections (necessary to provide the service you asked for).
• To keep Flowteka secure and fair — rate limits, search limits, abuse and scraping prevention, sign-in records and error monitoring (our legitimate interest in running a secure, reliable service).
• To improve search — anonymous search records (our legitimate interest in making search useful).
• Anonymous statistics — aggregate counts of how Flowteka is used, so we can improve it (our legitimate interest; you can object at any time by selecting “Reject”).
• Product analytics — only if you accept it in the analytics banner (your consent, which you can withdraw at any time).

Third-Party Services

We use the following third-party services to operate Flowteka:

• Supabase (EU) — database and authentication
• Cloudflare — CDN, image delivery and DDoS protection
• Upstash Redis — rate limiting and quota tracking
• Voyage AI / Meilisearch — search indexing and AI embeddings
• Anthropic — understanding natural-language search queries (the query text only)
• Google — optional “Continue with Google” sign-in
• Resend — sending sign-in code emails
• Sentry — error monitoring (see below)
• PostHog (EU) — anonymous statistics, and product analytics if you accept it (see below)
• Vercel / Railway — hosting and video processing. Vercel Speed Insights measures page performance (load timings only, no cookies and nothing that identifies you)

Each third-party service has its own privacy policy. We only share the minimum data necessary for these services to function.

International Transfers

Our database is hosted in the EU. Some of the services above process data in other countries, including the United States. Where they do, we rely on the safeguards in their data processing terms, such as standard contractual clauses.

Error Monitoring

We use Sentry to detect and fix errors. When an error occurs, Sentry receives technical details about it and, to help us reproduce the problem, a short recording of the interface around that moment. Ordinary visits are not recorded. Recordings never include what you type into fields, and your name, email address and profile photo are hidden before anything leaves your browser.

Anonymous Statistics

Before you make a choice in the analytics banner, we collect anonymous statistics about how Flowteka is used, for the sole purpose of improving it. PostHog keeps it only in the memory of the open page: nothing is stored on your device, there is no identifier that follows you between visits or across other websites, no profile is created, and nothing is recorded or linked to an account.

• What is counted: page views and a fixed list of actions — searches (email addresses and phone numbers are removed from the query first), clicks on search results, opened apps and screens, started videos, filters, and hitting the free-preview limit.
• What is never part of it: sign-ups, logins, saves, session recordings, automatic click capture, and anything tied to your account.
• The result is used as aggregate numbers, such as how many visitors search and how many of them open a screen.

Select “Reject” in the banner, or the “Analytics settings” link at the bottom of any page, to object. Statistics then stop entirely.

Visit Counts

To know how many people use Flowteka, our server also counts page views. For each visit it combines your IP address and browser type with a random value that changes every day and is deleted after 48 hours, and turns them into a code that cannot be reversed. Only daily totals are kept: the number of page views, the number of different visitors that day, the most viewed pages and the websites that linked to us. Your IP address is not stored, nothing is stored on your device, and you cannot be recognised on another day.

• Legal basis: our legitimate interest in knowing how much the service is used.
• Kept: the daily totals, for up to 400 days.
• Not counted: visits from browsers that send a Global Privacy Control signal. Your choice in the analytics banner is kept in your browser, where our server cannot see it, so “Reject” does not stop these counts — to opt out of them, turn on Global Privacy Control in your browser or contact us.

Product Analytics

If you click “Accept” in the analytics banner, we additionally use PostHog, hosted in the EU, to understand how Flowteka is used over time: which pages and features are used, which searches return useful results, and where people get stuck. This mode keeps an identifier in your browser, so repeat visits join up.

• Events include things like searches (email addresses and phone numbers are removed from the query first), opened apps and screens, saves, and sign-ups.
• PostHog may record sessions (clicks, scrolling and page changes) to help us improve the interface. What you type into fields is never recorded, and your name, email address and profile photo are hidden before anything leaves your browser.
• When you are signed in, events are linked to your internal account ID only — never your email address or name.
• Data is sent through our own domain and stored by PostHog in the EU, according to the retention period of our PostHog plan.

You can change your choice at any time with the “Analytics settings” link at the bottom of any page.

Cookies and Local Storage

We use essential cookies and browser local storage to keep you signed in, give you access to the screens and videos your account can view, remember your preferences (including your cookie choice), and provide anonymous search tokens. Analytics identifiers are stored only if you accept product analytics; anonymous statistics store nothing on your device (see above). We do not use advertising cookies or track you across other websites.

Data Retention

• Account data, saved screens and collections: for as long as your account exists.
• Search records and sign-in records: 90 days.
• Rate-limit, search-limit and abuse-prevention counters: up to 48 hours.
• Daily visit totals (no IP addresses): 400 days.
• Error reports: according to the retention period of our Sentry plan.

You may request deletion of your account and all associated data at any time by contacting us.

Your Rights

Depending on your location, you may have the right to access, correct, export or delete your personal data, to object to or restrict how we use it, and to withdraw consent at any time. To exercise these rights, contact us at the email below. You also have the right to complain to your local data protection authority; in the UK that is the Information Commissioner’s Office.

Children’s Privacy

Flowteka is not directed at children under 13. We do not knowingly collect personal information from children.

Contact

If you have questions about this Privacy Policy, please contact us at privacy@flowteka.com.