Data deletion request
Flowroid runs on your phone, and almost everything it creates stays there. The exceptions are a licence record proving this install is in its trial or entitled, and — if you subscribe — the meters behind your AI allowance. This page is how you have them deleted.
What we hold on our server
Flowroid has no accounts. There is no sign-up, no password, and no e-mail address on file. Every record below is keyed by a device key: a one-way SHA-256 hash of a device identifier and a secret salt, computed on your phone before anything is sent. The raw identifier never leaves the device, and the hash cannot be turned back into it.
| Record | What it holds | How long we keep it |
|---|---|---|
| Device record | A one-way SHA-256 hash of an Android device identifier combined with a secret salt, computed on your device; the date your trial started; and integrity flags returned by Google Play Integrity. | Kept for the life of the product, and deleted on request. This record is what makes the trial one per device. |
| Purchase record | A one-way SHA-256 hash of the Google Play purchase token, the obfuscated account identifier Google Play supplies, the set of device keys the entitlement is linked to, its state and renewal date, and whether it has been revoked. This covers both a Flowroid Pro subscription and a legacy one-time unlock. | Kept while the entitlement is active, then for 90 days. |
| AI usage meter | A running tally of the AI credits spent in the current billing period, keyed by an anonymous metering id (itself a hash derived from your purchase record) and the calendar month. It counts usage. It holds nothing you asked the assistant, and nothing it replied. | 12 months, then deleted automatically. |
| AI credit ledger | One append-only row per credit top-up you buy: the same anonymous metering id, the pack size granted, and a hash of that purchase’s Play token so the same purchase can never be redeemed twice. Your remaining balance is the sum of those rows. | Kept while the credits are yours to spend — purchased credits do not expire — and deleted on request with the meter above. |
| Request logs | The HTTP method, route, response status, and latency of each call to our server, plus a truncated or hashed IP address. Request and response bodies are never logged — including the assistant’s. | 30 days, then deleted automatically. |
These are the same records described in Privacy Policy Section 5. They are stored on Google Cloud infrastructure in the europe-west1 region (Belgium). Nothing else about you is held server-side: no flows, no variables, no execution logs, no location, no contacts — and nothing you have said to the AI assistant, which is never stored or logged at all (Privacy Policy Section 7). The two AI rows count what your allowance has spent, not what you asked.
What deletion removes, and what it costs you
A deletion request removes your device record, your purchase record, and the AI usage meter and credit ledger keyed to it. Request logs are not part of a request: they expire on their own within 30 days and hold no key we could search them by.
Two consequences worth knowing first
Your trial resets. The device record is what keeps the trial to one per device, so it deliberately survives an uninstall, a clear-data, and Settings → Reset App Data. That persistence is the anti-abuse mechanism, and it is the reason resetting the app is not deletion. Removing the record gives that device a fresh14-day trial.
What you paid for detaches from this device. Deleting the purchase record unlinks whichever entitlement you hold — an active Flowroid Pro subscription or a lifetime unlock bought before Flowroid moved to a subscription — from this device. The entitlement itself is not lost: Google holds it against your Google account. Open Flowroid and use Restore purchase and it is re-linked. Skip that step and the app will behave as though it were never bought.
Your AI credit balance goes with it. The ledger of purchased credits is keyed to the record being deleted, so any unspent top-up credits are erased and cannot be restored — not even by Restore purchase, which recovers the entitlement, not the balance. Spend them first if they matter to you. Your monthly allowance is unaffected: it is granted afresh each period from your entitlement.
Deletion is irreversible. Once the rows are gone we cannot restore them, and we keep no backup copy that would let us.
How to request deletion
- Copy your device key. In Flowroid, open Settings → About and copy the device key. It is a 64-character hexadecimal string, and it is the only thing that identifies your record: with no account and no e-mail address on file, we cannot look you up from the address you write to us from. If your version of the app does not show it yet, update to the latest release from Google Play first.
- Send the request. Use the button below, or e-mail support@flowroid.com yourself with the subject Data deletion request and the device key in the message. Please send it from the device that owns the key where you can, so we can be confident the request is yours.
- We confirm what was deleted. You get a reply telling you which records were removed. We log the deletion as a timestamp and the device key, and nothing else; your e-mail address is not added to any list and is not kept once the request is closed.
Opens a draft addressed to support@flowroid.com, subject Data deletion request. Nothing on this page is submitted to us: the draft is assembled in your browser and sent from your own mail app.
Write it yourself instead
Address it to support@flowroid.com with the subject Data deletion request
Please delete the licence records for the device key below. Device key: (paste the key from Settings → About) I understand that this resets the trial for this device, and that if I have bought Flowroid I will need to use Restore purchase afterwards.
What a request to us does not cover
Your Google Play order
The purchase itself belongs to Google, not to us. We receive a hashed purchase token and the purchase state; the order record, including your payment details, is held by Google as its own controller and we have no way to reach or erase it. Manage it from your Google account:
The data on your phone
Your flows, variables, execution logs and crash reports are yours outright, and no request to us is needed or possible: we have no copy and no way to reach them. Delete them with Settings → Reset App Data, or by uninstalling the app. Privacy Policy Section 13 lists the individual controls.
How long we take
We confirm within 30 days of receiving a complete request, the period GDPR Article 12 allows. A request is complete once it carries a device key we can find. If the key does not match a record we will tell you so rather than guess: deleting the wrong row would reset a stranger’s trial and detach their unlock.
Erasure is one of several rights you hold over these records. For access, rectification, restriction, objection or portability, write to the same address: support@flowroid.com. Privacy Policy Section 16 sets them out, and you can complain to your national data protection authority if you think we have handled your data unlawfully.