Privacy
Privacy at OrganizeFlow
Draft for review · Last updated 25 July 2026
This is an early, plain-language description of how OrganizeFlow is designed to handle your information. It is a working draft that will be finalised into a formal privacy policy before launch. It is not legal advice.
Our approach
OrganizeFlow is designed with privacy and local-first use at its core. The core of the app is built to keep your content on your device, and to process as little data as necessary.
This website
This website's own code sets no cookies, uses no analytics and loads no third-party trackers. It makes no additional requests beyond what is needed to deliver the page — even the font is served from this site, not a font network. This site is delivered through hosting and content-delivery infrastructure that, independently of our code, may process connection information such as your IP address in standard server logs and may set its own security or performance cookies; we have not yet finalised a retention period for those logs, and we will state it here once it is confirmed with that provider. The early-access form on our homepage asks for four things; what each one would be used for is set out under Early-access registration below. Right now the form sends and stores none of it, because registration is not open yet.
What stays on your device
Your to-dos, notes, calendar and files are stored on your device. The Vault keeps documents, passwords and notes encrypted on-device, protected with a recovery code. Encrypted backup exports happen on your terms — including to your own git repository. On-device tools such as summarize and translate run locally.
What we do not do
- We don't sell your personal data.
- Our business model is not designed to depend on selling personal data.
- We don't claim a completed zero-knowledge implementation, external security audit or certification at this stage.
Multi-device sync
Secure synchronization between your own devices is being developed for future use. It is not available yet. When it is introduced, we will describe clearly what is sent, how it is protected and what remains local.
Error reporting and product analytics
The OrganizeFlow app you can use today does not require an account, does not send us usage analytics and does not send automatic crash reports. If we ever add error reporting, product analytics or any other service that would send information off your device, we will describe it on this page before it is switched on — what is sent, who processes it and what choice you have. We will not turn something like that on quietly.
Early-access registration
Early-access registration is not open yet. This section describes the form on our homepage: what it does today, and what would happen with your details if you choose to register once it opens.
What the form does today
Nothing is sent and nothing is stored. The form's fields stay switched off until the page's script has loaded, the form has no address to send anything to, and submitting it only shows a message telling you that registration isn't open. No email address, platform preference, note or consent value leaves your browser, and we do not receive any of it. This site also stores nothing in your browser.
What we would ask for, and why
If registration opens and you choose to join, we would receive and keep what you put into the form:
- Your email address (required) — to tell you when and how you can get into early access, to send occasional product updates, and to reply if you write back. This is the only field we would use to contact you.
- Your platform preference, Android or iOS (Android is pre-selected, and one of the two is always sent) — so we tell you about the platform you are actually waiting for, and so we can see how much interest there is in each one before planning the iOS work.
- Your note about how you hope to use OrganizeFlow (optional — you can leave it empty) — as product feedback, to help us decide what to build. Please don't put sensitive personal details in it; a sentence or two about what you need is enough.
- Your agreement to the Early Access Terms and this notice (required) — we would keep the fact that you ticked it, and when, as our record that you agreed and asked to be contacted.
What we would not do with it
- We would not sell it, rent it out, or share it for anyone else's marketing.
- We would not use it to build a profile of you, to advertise to you elsewhere, or to make automated decisions about you.
- We would not connect it to your app content: your to-dos, notes, calendar and Vault stay on your device and are not part of the early-access list.
- We would not use your note for anything other than product feedback.
How long we would keep it
We would keep your registration details for as long as the early-access programme runs, and delete them when the programme ends or when you ask us to remove them — whichever comes first. If you unsubscribe or withdraw, we would take your address off the list and keep only the minimum note needed to show that you asked to be removed. Deletion would be done by hand rather than by an automatic routine, and we would aim to complete a removal request within 30 days. If any of this changes before registration opens, we will change it on this page first.
Your choices and your rights
Right now there is nothing for us to show you, correct or delete, because the form stores nothing. Once registration is open and you have joined, you can ask us to:
- tell you what we hold about you, and give you a copy of it;
- correct it if it is wrong;
- delete it;
- withdraw your agreement and stop hearing from us — every email would also carry an unsubscribe link, and withdrawing does not undo anything that was already lawful before you withdrew;
- stop using your details to send you updates, even if you would rather we did not delete them.
Where the data-protection law of your country gives you further rights — for example to limit how we use your details, to receive them in a portable form, or to complain to your national data-protection authority — those rights apply, and we will not ask you to give them up. We would not charge for any of this and would not ask you to justify the request.
Founder input required — the address for privacy requests will be published here before early-access registration opens. Until it is, this page does not yet give you a working route to make one; see our contact page for the current position.
Who is responsible for your information
Founder input required — OrganizeFlow is built by a small independent team. The legal entity responsible for the processing described on this page, its address and its registration details are still being confirmed and will be published here before early-access registration opens. We would rather leave this visibly unfinished than state something that is not yet accurate.
Contact
Questions about privacy, or a request about your information? See our contact page. A dedicated address for privacy questions will be published there, and here, before early-access registration opens.