Privacy Policy

FlowList is operated by Tom Walsh, who is the data controller for the personal data processed through this application.

• Data controller: Tom Walsh
• Email: tom@flowlist.co.uk

We collect and process the following categories of personal data:

• Account data: email address, authentication credentials
• Profile data: display name, bio, social media handles (only if you provide them)
• Usage data: track activities, completion status, preferences
• Technical data: IP address, browser type, device information

Under UK GDPR and the Data Protection Act 2018, we process your personal data on the following lawful bases:

• Contract: to provide the FlowList service you signed up for
• Legitimate interests: to improve our service, prevent fraud, and ensure security
• Consent: for optional features such as public profile visibility and cookie usage
• Legal obligation: to comply with applicable laws and regulations

Your personal data is used for the following purposes:

• To create and manage your account
• To provide the core tracking and productivity features
• To display your public profile and shared templates (only when you choose to make them public)
• To send you service-related notifications
• To analyse usage patterns and improve the application
• To comply with legal obligations

Your data is stored and processed using cloud infrastructure which may involve data centres outside the UK. Where personal data is transferred outside the UK, we ensure adequate safeguards are in place in accordance with UK GDPR Chapter V, including standard contractual clauses approved by the UK Information Commissioner's Office.

We retain your personal data for as long as your account is active. If you delete your account, we will delete or anonymise your personal data within 30 days, except where we are required to retain it for legal, regulatory, or security purposes. Anonymous analytics data may be retained indefinitely.

Under UK GDPR, you have the following rights regarding your personal data:

• Right of access — request a copy of your data
• Right to rectification — correct inaccurate data
• Right to erasure — request deletion of your data
• Right to restrict processing — limit how we use your data
• Right to data portability — receive your data in a structured format
• Right to object — object to processing based on legitimate interests
• Right to withdraw consent — withdraw consent at any time

To exercise any of these rights, please contact us at tom@flowlist.co.uk.

We use essential cookies to maintain your session and authentication state. We may also use analytics cookies to understand how users interact with the application. You can manage your cookie preferences through your browser settings.