Privacy Policy

Last updated: 11 July 2026

TangentFlow is built to know as little about you as possible. This page explains, plainly, what data exists, where it lives, and what we can and cannot see.

The mobile app (iOS / Android)

The mobile app is fully local. It has no account, no login, and makes no network requests with your data.

• Your boards, tasks, photos, and settings are stored only on your device.
• There are no analytics, no trackers, no advertising SDKs, and no crash reporters.
• Photo attachments use the system photo picker; the app never gains access to your photo library.
• Face ID / biometric unlock is handled entirely by your device's operating system. The app only receives a yes/no result.
• Optional backups are written to a folder on your device that you control. They never leave it unless you move them.
• If you delete the app, its data is deleted with it.

In App Store terms: Data Not Collected.

The web app (tangentflow.com)

Used without signing in, the web app stores your board only in your browser's local storage. Nothing is sent to us.

If you choose to sign in to sync:

• Account: sign-in is handled by Clerk (our authentication provider), which stores your email address and session information. See Clerk's privacy policy.
• Your boards are end-to-end encrypted. They are encrypted on your device before upload, and the keys exist only on your devices and in your recovery code. We store ciphertext we cannot read — the same is true of photo attachments uploaded after encryption is active.
• Infrastructure: encrypted data is stored on Cloudflare (Workers KV and R2). See Cloudflare's privacy policy.
• Metadata: like any online service, we can technically observe that an account synced, when, and roughly how much encrypted data it stored — but not its contents.
• We run no analytics scripts, no advertising, and we do not sell or share any data with anyone.

Deleting your data

• Mobile: delete cards, boards, or the app itself — it's all local.
• Web: the menu has "Delete account & data," which permanently erases your encrypted boards, attachments, device registry, and your account itself from our systems, immediately.

Your rights

Depending on where you live (for example under GDPR or CCPA), you have rights to access, correct, export, and delete your data. TangentFlow is built so you can do all of this yourself: export is one tap (plain JSON), and deletion is immediate and complete. If you need help, contact us below.

Children

TangentFlow does not knowingly collect any personal information from anyone, including children. The mobile app collects nothing at all.

Changes

If this policy changes, we will update this page and the date above. We won't quietly weaken it.

Contact

Questions: bibin765@gmail.com

← tangentflow.com · Terms of Use