Privacy Policy | NextFlow Apps

1. Introduction

NextFlow Apps ("we", "our", or "us") is an independent Android app studio. We develop mobile applications focused on background audio playback, digital wellbeing, dopamine detox, and productivity.

We are committed to protecting your privacy. This Privacy Policy explains how we collect, use, store, and disclose information when you use the mobile applications described below ("Apps"). By using our Apps, you agree to the collection and use of information in accordance with this policy.

The existing app-data practices described here apply to:

HushFlow – background audio player
Noctra – dopamine detox and digital wellbeing
Temvica – Pomodoro timer and focus tool

Salvera: our medication management and family care app is in development. Read its dedicated privacy information and account and data deletion request page. The app-data statements below describe the existing products and should not be assumed to describe Salvera.

2. Information We Collect

Our Apps are designed to collect minimal information. Most data stays locally on your device, and only limited information is processed on our server infrastructure where necessary for app functionality.

The types of information we may collect include:

a) Information stored locally on your device

App preferences and settings: Your customisations, theme choices, and feature toggles
Usage history: Playback history (HushFlow), focus sessions (Noctra/Temvica), task data (Temvica)
User‑generated content: Playlists, queue entries, task lists, reflection notes, and progress logs
Audio preferences: Equalizer presets, sound settings, and sleep timer configurations

b) Pseudonymous product analytics (server-side)

Some apps — particularly HushFlow — may transmit limited, pseudonymous analytics to our server infrastructure (powered by Cloudflare Workers and D1). This helps us understand whether the app works correctly and how users interact with important features.

Examples of analytics events include:

Onboarding completion and onboarding choices
Playback requested / playback started
Background playback usage
Screen‑off playback usage
Premium/paywall views and entry sources
Signup completion
Session and retention milestones
Selected onboarding goals
Feature usage
Purchase/entitlement‑related status where necessary

Important privacy protections: Our analytics implementation is designed not to send sensitive media information. For example, playback analytics do not contain:

YouTube/video URLs
Signed streaming URLs
Video IDs
Song titles, artist names, or creator names
Search queries
Cookies or authentication tokens
Google passwords or payment‑card information

Some analytics events use an app‑generated installation identifier so events from the same installation can be associated for analytics and reliability purposes. This identifier is pseudonymous and is not linked to your real‑world identity.

c) Information from Google Sign‑In (where used)

Some of our apps — particularly HushFlow — support optional Google Sign‑In. When you sign in, we may receive limited account information made available through the authentication flow, which may include:

Google account identifier
Email address
Display name
Profile information, where provided

We do not receive or store your Google password.

This information is used for legitimate app functionality including:

Creating and managing your account
Associating your account with Premium/Lifetime entitlements
Restoring eligible purchases and features
Customer support
Preventing abuse or fraud
Security
Service operation and improvement where appropriate

d) Information from third‑party services

Subscription status: Premium or Lifetime purchase status (via Google Play Billing) – used only to unlock features and verify entitlement
Ad interaction data: If you view rewarded ads, limited interaction data may be processed by our advertising partners (see Section 6)

          We do NOT collect your payment card details, CVV, Google password, or other sensitive payment credentials. This information is handled directly by Google Play Billing. We also do not collect personally identifiable information such as your name, email address, home address, or phone number unless you voluntarily provide it by signing in with Google or contacting us via email.
        

3. How We Use Your Information

We use the information we collect for the following purposes:

To provide and maintain our Apps: Ensure core functionality works correctly – including background playback, app blocking, focus timers, and task management
To improve user experience: Understand which features are most used, and optimise performance and interface design
To process subscriptions: Verify Premium or Lifetime status via Google Play Billing and our backend systems
To display advertisements: In our free versions, we may show rewarded ads via third‑party networks (see Section 6)
To fix bugs and improve stability: Through analytics and crash reporting
To respond to support inquiries: When you contact us via email, we use your message only to address your specific question or request
To prevent fraud and abuse: Including verification of purchase entitlements and detection of suspicious activity

4. Legal Basis for Processing (GDPR Compliance)

For users in the European Economic Area (EEA), we process your information based on the following legal grounds:

Legitimate Interest: To operate, improve, and secure our Apps, to show relevant advertisements that fund our free versions, and to understand user engagement with features
Consent: When you grant permissions (e.g., notifications, storage, Usage Access) or opt‑in to rewarded ads
Contractual Necessity: To fulfil Premium subscription purchases and provide the associated features
Legal Obligation: Where we are required to retain or disclose information to comply with applicable laws

You have the right to withdraw your consent at any time by disabling permissions or uninstalling the App.

5. Local Data vs. Server‑Processed Data

It is important to distinguish between data that stays on your device and data that may be processed on our servers.

a) Local Data (stored on your device)

Playlists and queues
App preferences and settings
Equalizer and audio settings
Locally maintained history (where applicable)
Tasks, focus data, and progress logs (Temvica)
Habit tracking and reflection notes (Noctra)

This data is not uploaded to our servers unless explicitly required for a specific feature (e.g., account sync, which is not currently offered).

b) Server‑Processed Data

Account information for signed‑in users (Google Sign‑In)
Pseudonymous installation analytics
Feature and event analytics
Entitlement and purchase verification information
Security and anti‑abuse information
Support information (when you contact us)

We do not upload your locally stored media content, playlists, or personal notes to our servers unless you explicitly choose to share them (e.g., via a support request).

6. Third‑Party Services and Data Sharing

We do not sell your personal information. However, we rely on trusted third‑party services to operate our Apps and provide certain features. These services process data according to their own privacy policies:

a) Google Play Services

All our Apps are distributed through Google Play. Google Play handles app distribution, updates, and billing for Premium subscriptions. See the Google Privacy Policy for more information.

b) Google Play Billing

All in‑app purchases are processed through Google Play Billing. NextFlow Apps does not receive or store your full payment‑card numbers, CVV, or Google account password. However, we may receive and retain limited purchase and entitlement information necessary to:

Determine Premium/Lifetime status
Associate an entitlement with a user, account, or installation
Restore access
Prevent purchase abuse or fraud
Provide customer support
Process or investigate refunds
Maintain legally necessary accounting or business records

See the Google Privacy Policy for more information.

c) Cloudflare

Some of our apps (particularly HushFlow) use Cloudflare Workers and Cloudflare D1 as server infrastructure. These services process pseudonymous analytics and entitlement‑related data on our behalf. Cloudflare acts as a data processor and does not use this information for its own purposes. See the Cloudflare Privacy Policy for more information.

d) Advertising Services

Some of our free versions may display rewarded advertisements. Depending on the app, these ads may be provided by one or more third‑party advertising services, which may collect device identifiers, advertising identifiers, approximate location, and ad‑interaction information according to their own policies. You can opt‑out of personalised ads via your Android device settings (Google → Ads → Opt out of Ads Personalization).

e) Email Communications

If you contact us via email ([email protected]), we will retain your email address and message only as long as necessary to respond to your inquiry and resolve your issue. We do not use your email for marketing or share it with any third parties.

7. Data Retention

We retain different types of information for different periods:

Local app data: Remains on your device until you delete it, clear app data, or uninstall the App.
Account data (Google Sign‑In): Retained while your account is active. You may request deletion as described in Section 8.
Analytics data: Retained only as long as reasonably necessary for the purposes described in this policy, typically for product improvement and reliability.
Entitlement and purchase records: Retained as long as necessary to verify entitlements, process refunds, maintain business records, and comply with legal obligations.
Support emails: Retained only as long as needed to resolve the inquiry, prevent abuse, maintain necessary support records, or comply with law.
Legally required records: Retained for the period required by applicable law, such as tax or accounting requirements.

We do not retain any information longer than is reasonably necessary for the purposes for which it was collected.

8. Data Deletion and User Rights

Depending on your location, you may have certain rights regarding your personal data:

Right to Access: Request a copy of the personal data we hold about you
Right to Rectification: Correct inaccurate or incomplete data
Right to Erasure ("Right to be Forgotten"): Request deletion of your data
Right to Restrict Processing: Limit how we use your data
Right to Data Portability: Receive your data in a structured, machine‑readable format
Right to Object: Opt‑out of data processing for marketing, profiling, or other purposes
Right to Withdraw Consent: If we rely on your consent, you can withdraw it at any time

How to delete your data:

Local data: Clear app data via Android Settings → Apps → [App Name] → Storage → Clear Data, or uninstall the App.
Account data (Google Sign‑In): Sign out of the app and/or contact us at [email protected] with a deletion request.
Analytics data: Analytics data is pseudonymous and linked to an installation identifier rather than to your real‑world identity. We do not maintain a direct deletion mechanism for analytics data at this time.
Support communications: Contact us at [email protected] with a deletion request.

          Important: Certain records may need to be retained where required for security, fraud prevention, legal compliance, tax/accounting obligations, or legitimate record‑keeping purposes. Purchase and entitlement records may be retained as long as necessary for these purposes.
        

To exercise any of these rights, please contact us with your request. We will respond within 30 days.

9. Children's Privacy

Our Apps are not intended for children under 13 years of age (or under the applicable age of consent in your jurisdiction). We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately. We will take steps to remove such information from our systems.

10. Permissions

Our Apps may request the following permissions, each used only for its stated purpose:

Storage / Media access: Used by HushFlow to read audio files you choose to play (no upload, no external sharing)
Notifications: To send timer alerts, session reminders, and playback controls
Background activity: To continue audio playback when the screen is off or the app is minimised (HushFlow)
Usage Access (UsageStats): Used by Noctra to detect when selected distracting apps are opened, enabling real‑time blocking and usage limits
Do Not Disturb access: Used by Noctra to suppress notifications during focus or recovery sessions (optional)

All permissions are optional and can be revoked at any time via your Android device settings.

11. Security

We implement appropriate technical and organisational measures to protect your information against unauthorised access, alteration, disclosure, or destruction. All network transmissions are encrypted using HTTPS where applicable. However, no method of electronic transmission or storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

12. Cookies and Tracking

Our Apps do not use browser cookies or persistent tracking identifiers. However, third‑party advertising services may use device advertising identifiers to serve relevant ads in the free versions. You can reset or opt‑out of personalised ads via your Android device settings (Google → Ads → Opt out of Ads Personalization).

Our website uses your browser's local storage to remember your appearance preference and saved guide URLs on this device. These preferences are not sent to our servers. You can remove individual saved guides, choose System appearance, or clear this site's browser data to erase both settings. When browser storage is unavailable, these controls work for the current page visit.

The website's app-discovery measurement hooks keep a small list of page and button events in current-page memory. They include the page path, app and button placement, without visitor identifiers, form contents or URL query parameters. No analytics collector is currently configured to receive these events. Any future forwarding through the provided adapter requires explicit consent and respects Do Not Track and Global Privacy Control.

13. Links to Other Websites

Our Apps and website may contain links to third‑party websites or services (e.g., Google Play, Instagram). This Privacy Policy does not apply to those external sites. We encourage you to review the privacy policies of any third‑party sites you visit.

14. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or technological advancements. We will notify you of any material changes by updating the "Last updated" date at the top of this page and, where appropriate, via in‑app notices.

We encourage you to review this policy periodically. Continued use of our Apps after changes means you accept the updated policy.

15. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or your data, please contact us:

Email: [email protected]
Publisher: NextFlow Apps
Brand: NextFlow Apps

We will respond to your inquiry as quickly as possible, typically within 30 days.

App‑Specific Privacy Information

For detailed privacy information about each app, including Salvera in development, please refer to the specific policies below:

Salvera Privacy Information

HushFlow Privacy

Noctra Privacy

Temvica Privacy

Temvica Data Deletion