Last updated: September 10, 2026
Summary: ZenFlow is local-first. Optional account sync, Journal AI Search, AI Coach, feedback, crash diagnostics, ads after consent, journal audio recording, and journal dictation require clear user action or consent. We do not sell your personal data.
ZenFlow stores mood entries, habits, focus sessions, journal entries, photos you attach to journal entries, gratitude entries, reminders, and app settings on your device first. If you sign in and enable sync, selected app data, including journal photos and voice attachments, can sync through Supabase so it is available on your devices. You can use the app without attaching photos, recording audio, or enabling account sync.
Journal voice recording uses your microphone only after you start recording. Recordings are used to create a journal audio attachment. ZenFlow does not listen in the background. If sync is enabled, journal audio attachments may be uploaded to the configured Supabase storage bucket as part of your synced journal data.
Optional journal dictation starts only when you choose the dictation control. It uses the speech recognition service provided by your browser or operating system; depending on that service and its settings, spoken audio may be processed outside ZenFlow. The resulting text is handled as journal text. ZenFlow does not save the recognition audio as a journal attachment unless you separately start voice recording.
App ambience and sound effects are local app assets. Your sound choices are stored with your other app settings.
Journal AI Search stays off until you turn it on and accept its in-app privacy notice. When you use it, ZenFlow sends your search text to a Supabase Edge Function. The function matches it against the title, content, mood, and tags of entries in your ZenFlow account.
The current lexical search path does not send your journal text or search query to an external AI provider and does not create a separate search index. You can leave it off and use standard text search on this device instead.
AI Coach is used only when you choose to send it a message. ZenFlow sends your message, recent conversation history, and selected wellness context (such as recent moods, habits, goals, or activity) to a Supabase Edge Function to generate a Coach Lite response. The current Coach Lite mode does not use an external AI provider. Do not use AI Coach for emergencies or medical advice.
When you submit Feedback, ZenFlow sends your category, message, optional email address, app version, and device information such as platform, browser, screen size, and language to Supabase. Where the feedback email service is configured, ZenFlow also attempts to send a notification email containing that information through Resend. Do not include journal text, urgent safety information, or medical information in Feedback.
Account sync and journal-media transfers to Supabase use HTTPS. The Google Mobile Ads SDK encrypts the data it transmits using Transport Layer Security (TLS).
ZenFlow does not initialize its optional in-app behavioral analytics runtime. Automatic Firebase Analytics collection is disabled in the Android app manifest. The optional Habits-list banner is controlled separately through the Optional ads setting and Google consent on supported Android builds. Advertising ID and ad-services declarations are tied to ads-enabled Android builds. Where Google User Messaging Platform (UMP) requires it, ZenFlow shows a Google ad privacy choices entry point in Settings so you can change or withdraw ad consent.
Store forms must match the actual artifact submitted for review. If the artifact includes microphone recording, Supabase sync, Journal AI Search, AI Coach, Feedback, AdMob, Sentry, Firebase, or journal audio storage, those surfaces must be reflected in Data safety and privacy declarations.
You can request deletion in Settings under Account or use the contact instructions on our account deletion page. That page explains the account-linked data removed, including synced journal content and media, and the copies that can remain on other devices.
Feedback is stored separately and is not automatically removed with your account. A minimal, content-free deletion safety record remains to prevent a deleted account from being restored through normal sync. Deleted account records may remain temporarily in recovery copies until those copies are replaced on the provider-managed recovery schedule. The account deletion page explains these limits and how to request review of separately retained feedback or the current maximum recovery window.
ZenFlow is for general wellness and self-reflection. It is not a medical device and does not provide diagnosis, treatment, or medical advice.
Email: zenflow.app@gmail.com
ZenFlow Privacy Policy