Privacy policy

Flowsense is the controller of the personal data described in this policy. For any privacy question or request, email founders@flowsense.app.

We collect what you give us, what your connected services send at your request, and some technical data from using the app.

• Account

  What it includes:Email address, name, sign-in details and security events, managed by Clerk.

• Journal

  What it includes:Trades you import, sync or log (symbol, side, size, prices, times, fees, P&L, risk), plus your notes, tags, emotions, ratings, chart screenshot links, playbooks and accounts.

• Integrations

  What it includes:Exchange API keys and secrets (encrypted), TradingView webhook tokens (hashed and encrypted), Discord webhook URLs (encrypted), sync status and errors.

• Trade Desk

  What it includes:Orders you confirm (exchange, symbol, side, size, entry, stop, target, leverage, status and exchange order IDs) and your futures wallet balance when sizing an order.

• AI

  What it includes:Weekly reviews, your coach chat messages for the length of the request, and daily usage counts.

• Billing

  What it includes:Plan, Stripe customer and subscription IDs, subscription status and renewal date. Card details stay with Stripe.

• Technical

  What it includes:IP address, browser and device information, logs, error reports and product usage events.

We don't ask for and don't want special-category data (such as health or political opinions). Please don't put it in notes.

• To provide Flowsense (contract): your account, importing and syncing trades, analytics, reviews, coach, diagnostics, Trade Desk, emails you ask for and support.
• To bill you (contract and legal obligation): subscriptions, invoices and keeping the accounting records tax law requires.
• To keep Flowsense secure and working (legitimate interests): preventing abuse and fraud, rate limiting, debugging errors and monitoring reliability.
• To improve the product (legitimate interests or consent where required): understanding which features are used through aggregated analytics.
• To send the weekly review email (contract, as part of your plan): you can turn it off in Settings → Notifications.

Where we rely on legitimate interests we have balanced them against your interests: security logs and support access are limited to what's needed, kept for a short time and logged, and you can object at any time (see your rights). Product analytics run only with your consent.

AI features are processed by Anthropic's Claude API. What is sent depends on the feature:

• Weekly review, coach chat and fix plans: aggregated statistics (win rate, P&L, drawdown, breakdowns by setup, hour, weekday, symbol and emotion), recent trades (symbol, side, time, holding time, P&L, R, setup, emotion, mistake tags and rating), your previous review and, for chat, the messages you type.
• Trade Desk analysis: public market data for the symbol (prices, candles, funding) and indicators we compute, plus statistics from your own history on that market.

We don't send your name, email, exchange keys or trade notes. AI responses are generated for you and stored in your account where the feature saves them (such as weekly reviews).

You can choose to share an anonymised copy of your journal to help us build and improve Flowsense's own AI models (for example a coach that understands trading psychology better). It is enabled by default for new accounts, while existing saved choices are preserved. You can turn it off at any time in Settings → Your data → Help improve Flowsense AI.

• What's included: trades (symbol, side, prices, size, R, P&L, fees), setups and playbooks, tags, emotions and ratings, daily and weekly journal entries and notes, AI coach reviews, and backtests.
• What's removed: your name, email, handle, exchange API keys, exchange account and order IDs, wallet addresses, links and screenshots. Emails, phone numbers, @handles, keys and addresses are also stripped from free text, your account id is replaced by a keyed pseudonym (a one-way hash) and times are rounded to the minute.
• How it's used: only to train and evaluate Flowsense's own AI models. It is never sold or used for advertising. If a service provider helps us train a model, it processes the data under contract and only for that purpose.
• Turning it off: switch it off any time in the same place. Every dataset export made after that leaves your data out. Turning sharing off doesn't affect copies exported before, but those copies are anonymised and not linked to your account by name or email. Deleting your account removes all your data from future exports too.

No system is perfectly secure. If we become aware of a breach affecting your personal data, we will notify you and the supervisory authority as the GDPR requires.

Only Flowsense's founders, acting as administrators, can access the admin area, and only to run the service, answer your support requests, keep Flowsense secure or meet a legal obligation.

• By default admins see what running the service needs: your plan and subscription status, account status, counts (such as how many trades you have) and the health of your connections. Your email is shown masked.
• Your financial data (P&L, balances and trades) and full email address are shown only when an admin explicitly reveals them for a specific reason. Each reveal is logged with the admin, the time and the reason, and you can see every entry in Settings → Your data → Admin access log.
• If an admin disconnects one of your exchange connections, you are emailed with the reason.
• Nobody at Flowsense can see your exchange keys, secrets or passphrases: the admin area never reads them, and they're only ever decrypted on our servers to perform an action you asked for.

We use these service providers (processors) to run Flowsense. They may only process data on our instructions and under data processing agreements.

• Vercel

  Purpose:Hosting and server functions

  Location:United States; exchange and Trade Desk functions run in Frankfurt, Germany

• Neon

  Purpose:PostgreSQL database for your account and journal

  Location:Cloud region configured for Flowsense

• Clerk

  Purpose:Sign-in, sessions and account security

  Location:United States

• Stripe

  Purpose:Subscriptions, payments and invoices

  Location:EU and United States

• Anthropic

  Purpose:AI reviews, coach chat, fix plans and Trade Desk analysis

  Location:United States

• Resend

  Purpose:Transactional and weekly review emails

  Location:United States

• Sentry

  Purpose:Error monitoring: error reports with your internal account id and plan; cookies, request bodies, emails and trade amounts are removed before sending; no session replays

  Location:United States

• PostHog

  Purpose:Product analytics, only with your consent: page views and named feature events (no click tracking, no session recordings, no amounts)

  Location:European Union

• Fixie (Crisp Labs)

  Purpose:Fixed-IP proxy for requests signed with your exchange keys, so you can whitelist our IPs on the exchange. It's an encrypted HTTPS tunnel: Fixie sees the exchange's address and the time, not the content, keys or results

  Location:European Union (Ireland)

• Telegram

  Purpose:Delivers alerts, briefings and bot replies if you link the Flowsense bot

  Location:Outside the EU (Telegram's infrastructure)

• OpenAI or Deepgram

  Purpose:Speech-to-text for voice notes, if you use voice journaling (audio is not stored by us)

  Location:United States

• Apple, Google and your browser's push service

  Purpose:Deliver push notifications to devices you enable

  Location:Worldwide

• Remotion

  Purpose:Licensing check when you export a recap video or image in your browser: it receives this site's address, your IP and whether the export worked, nothing from your recap

  Location:Switzerland

Exchanges (Binance, Bybit, MEXC, OKX, Bitget, Hyperliquid), TradingView and Discord are services you choose to connect. They receive the requests you authorise and process data under their own privacy policies.

Some providers are based in, or access data from, the United States or other countries outside the European Economic Area. Where that happens, transfers rely on an adequacy decision (such as the EU-US Data Privacy Framework, where the provider is certified) or on the European Commission's Standard Contractual Clauses, together with additional safeguards such as encryption.

• Account, journal, trades, accounts, balances, playbooks, reviews and settings

  How long we keep it:While your account is open. Deleting your account in Settings erases it immediately; requests by email are handled within one month.

• Exchange keys, secrets, passphrases and webhooks

  How long we keep it:Until you remove the connection or turn off its trading, or delete your account.

• Billing records (invoices, payments)

  How long we keep it:As long as tax and accounting law requires (in Portugal, generally 10 years), even after account deletion. Stripe keeps them on our behalf.

• Security and error logs, admin access log

  How long we keep it:Up to 12 months, then deleted. Provider logs (Vercel, Sentry) follow their shorter retention settings.

• Status page checks

  How long we keep it:95 days.

• Notification history (to avoid sending duplicates)

  How long we keep it:While your account is open.

• Feedback and survey answers

  How long we keep it:While your account is open; deleted with it.

• Product analytics (only with consent)

  How long we keep it:Under PostHog's retention settings, then deleted or aggregated.

• Database backups

  How long we keep it:Deleted data can remain in encrypted backups at Neon for a short time (days) until they roll off.

Your public profile is off by default. If you turn it on, anyone with the link can see your handle, first name and performance ratios (such as win rate, profit factor and R), but never your balance, money amounts or individual trades. Stats cards you download or post to Discord are shared by you, at your choice.

• Essential cookies from Clerk keep you signed in and protect your session. The app doesn't work without them.
• Analytics from PostHog (EU) measure page views and feature usage to improve Flowsense, only if you accept them in the cookie banner. Your choice is kept in a fs_consent cookie for a year and, when you're signed in, saved to your account so events we send from our servers (such as a completed checkout) follow it too. You can change it any time from “Cookie preferences” in the footer or in Settings → Preferences. Analytics requests go through flowsense.app/ingest to PostHog's EU servers. We don't use advertising trackers.
• First visit: a fs_ft cookie remembers, for 90 days, the first Flowsense page you landed on, the site that linked you and any campaign tags, so we know which pages bring new traders. It holds no personal data and isn't set if you decline cookies.
• Local storage in your browser remembers interface preferences, such as dismissed announcements, the install prompt, theme, and the rules you ticked in the coach. It stays on your device.

You can clear cookies and local storage in your browser at any time; you will be signed out.

Under the GDPR you have the right to:

• access your personal data and get a copy;
• rectify inaccurate data (most of it you can edit directly in the app);
• erase your data ("right to be forgotten");
• port your data (Settings → Your data: download every trade as CSV, or all your personal data as JSON);
• object to or restrict processing based on legitimate interests;
• withdraw consent where processing is based on consent, without affecting earlier processing.

Email founders@flowsense.app from your account email to make a request. We answer within one month. You can also complain to a supervisory authority; in Portugal this is the Comissão Nacional de Proteção de Dados (CNPD), or the authority where you live or work.

Flowsense is for adults. It is not intended for anyone under 18, and we don't knowingly collect data from children. If you believe a child has created an account, contact us and we will delete it.

We will update this policy when what we do changes, for example when we add a provider. If a change is material we will tell you by email or in the app. The date at the top shows the current version.

Privacy questions or requests: founders@flowsense.app.