Privacy Policy

MyFlow is made by Growlioo, owned and operated by Malik Muzamil ("Growlioo", "we", "us"), founded by Malik Muzamil. Our address is [to be confirmed]. For anything in this policy, email [to be confirmed].

This policy covers the MyFlow app for Mac and this website. It does not cover the websites or services of AI providers you choose to connect to MyFlow; their own policies apply to them.

Your voice. Speech recognition runs on your Mac using a speech model you download once (for example Parakeet or Whisper). Your audio is processed in memory on your computer and is never sent to us or anyone else.

Recordings and history. Voice recordings are saved as audio files on your Mac and deleted automatically after 7 days on Free (30 days on Pro and Lifetime), unless you star them. Your text history, Insights stats, Dictionary words, Snippets and App Styles are saved in files on your Mac, in ~/Library/Application Support/com.malikmuzamil.myflow/. You can delete them in the app at any time, or by deleting that folder.

No analytics. The app has no analytics, tracking or advertising code. We cannot see what you dictate, which apps you use or how often you use MyFlow.

When the app goes online. MyFlow connects to the internet only to (a) download the speech models you pick, from the model host (Hugging Face or our own mirror), and (b) send text to an AI provider, if you turn that on yourself. Once license checks for paid plans are added, the app will also send your license key to our payment provider to confirm it. We will update this policy before that ships.

AI cleanup, App Styles and Command Mode are off until you set them up. When you do, you choose where the text goes:

• Fully on your Mac: Apple Intelligence (on supported Macs) or a local model through Ollama. Nothing leaves your computer.
• A cloud provider with your own key: for example OpenAI, Anthropic, Groq, OpenRouter or Cerebras. MyFlow sends the transcribed text (never the audio) and, for Command Mode, the text you selected, straight from your Mac to that provider using your API key.

That traffic goes directly between your Mac and the provider. It does not pass through our servers and we never see your key. The provider handles the text under its own terms and privacy policy, so please read them before you connect one.

When you download MyFlow or join the Windows list, we collect what you type into the form:

• your name and email address
• what describes you (for example student or freelancer) and, if you add them, what you'll use MyFlow for and your WhatsApp number
• which computer you chose (Mac or Windows)
• where you came from (the referring site or campaign tag in the link)
• whether you want update emails

We use this to give you the download, send the updates you asked for, answer you if you contact us, and understand who MyFlow is for so we build the right things. If you tick the box for update emails, we may email you about MyFlow; every email has a way to stop them. If you don't tick it, we only email you about your download or if you ask us something.

Our hosting provider automatically processes basic technical data (such as IP address, browser type and the page requested) to deliver and protect the site. We don't run advertising trackers on this website and we don't set marketing cookies. The site stores your light or dark theme choice in your browser; that never leaves your device.

Paid plans are not on sale yet. When they are, payments will be handled by Stripe. Stripe collects your card details directly; we never see or store your full card number. We receive your name, email, country, what you bought and payment status so we can give you your license, send receipts and handle refunds. Stripe's privacy policy applies to the data it processes.

We use a small number of service providers that process data for us, only to provide their service:

• Vercel hosts this website and processes request data to serve and secure it.
• Supabase stores the download form details and hosts the app download.
• Stripe will process payments once paid plans launch.
• Our email provider sends download and update emails.

These providers may store data outside your country, including in the United States. Where the law requires it, we rely on safeguards such as standard contractual clauses offered by those providers.

We do not sell or rent your personal information, and we do not share it for cross-context behavioural advertising. We only share it with the service providers above, or if the law requires us to (for example a valid court order), or to protect people's safety or our legal rights.

• Download form details: until you ask us to delete them, or about 3 years after our last contact with you, whichever is first.
• Payment records: as long as tax and accounting law requires (often 6 to 10 years, depending on the country).
• Website request logs: kept by our hosting provider for a short period, usually days to weeks.
• Everything in the app (recordings, history, stats): on your Mac only. Voice recordings are deleted after 7 days (30 on Pro and Lifetime); text stays until you delete it. We never have a copy.

Wherever you live, you can ask us to: tell you what personal information we hold about you, give you a copy, correct it, delete it, or stop sending you marketing emails. If you are in the European Economic Area, the UK or a similar jurisdiction (GDPR), you can also object to or restrict our use of your data and ask for it in a portable format. If you are a California resident (CCPA), you have the right to know, delete and correct your information and not to be treated differently for using these rights. We don't sell or share data as those laws define it.

To make a request, email [to be confirmed] from the address you used, or tell us which email to look for. We reply within 30 days. We may ask you to confirm the request comes from you. You can also complain to your local data protection authority.

Our legal bases under GDPR: your consent (update emails), our legitimate interest in running and improving MyFlow and keeping it secure (form details and logs), and performing our contract with you (payments and licenses).

The download form data sits in a database table that can't be read publicly; only our server can write to it. Connections to this site use HTTPS. No system is perfectly secure, so we collect as little as we can. Your dictations are safest of all, because they never reach us.

MyFlow is not directed at children under 13 (or under 16 where local law sets a higher age), and we don't knowingly collect their information. If you think a child has given us their details, email us and we'll delete them.

When we change this policy we update the date at the top. If a change is significant, for example a new kind of data or a new reason to use it, we'll say so on this site and, if you've given us your email, tell you by email before it applies.

Email [to be confirmed], or message us on Instagram. Post: Growlioo, owned and operated by Malik Muzamil, [to be confirmed].