Privacy policy
MyFlow is a music app for iPhone and iPad. This page explains what data the app and its servers handle, why, and what you can do about it. The short version: there is no account, no name, no email and no advertising, and the app does not track you across other apps or websites.
Who is responsible
Stephen Wright, Singapore, Lim Chu Kang, 121 Geylang Road, 708976. Write to support@getmyflowapp.com with any question about this policy or your data.
What MyFlow handles
A device token
On first launch the app creates a random token on your device and keeps it in the Keychain. It is stored so that it syncs through iCloud Keychain, which lets your other Apple devices and a reinstall find the same library. The token is not linked to your name, email address, phone number or Apple ID. We cannot tell who you are from it.
Your library and what you listen to
To build your stream and restore it on a new device, the app sends our servers: the genres and moments you picked at the start, the tracks you like or dislike, and listening events. A listening event holds the track, the time, how long you listened, whether you finished or skipped it, which stream you were in (for example a moment or a mood) and the part of the day (morning, afternoon, evening, night). Listening events older than 90 days are folded into counts per track and the individual events are no longer used.
The stream itself is computed on your device from the catalogue and this data. The catalogue and the audio are public files and the server does not see which track you are playing at a given moment, only the events above.
App updates
MyFlow can receive updates to its interface code without a new App Store release. To do that the app sends our update server a random installation ID, the app and runtime version, the release channel, whether a start or a crash happened, your App Store country and your language settings. The server derives an approximate country from your network address and stores only daily totals by country and language, not the address.
Server logs
Our web servers keep standard access logs: network address, time, the requested path and the app version. They are used to run and secure the service and are deleted after 14 days.
What we do not do
- No advertising, no ad identifiers, no sale or sharing of data for advertising.
- No tracking across other companies' apps and websites, and no tracking prompt.
- No third-party analytics or advertising SDKs inside the app.
- No access to your contacts, photos, location or microphone.
Where the data is processed
The catalogue, audio, cover images and your library sync are served through Cloudflare, which runs a global network, so requests can be handled in many countries. The app update server runs on Cloud.ru infrastructure in the Russian Federation. By using the app you accept that this technical data is processed in those places.
Why we process it
To provide the app you asked for: to play music, build and restore your stream, deliver updates and keep the service secure. We do not use the data for anything else.
Your choices and rights
- Delete your data. You can delete your library and listening history from the app's settings. You can also write to support@getmyflowapp.com from the device you use, tell us what you want removed, and we will do it. Deleting removes the token's data from our servers; the token itself stays in your Keychain until you remove the app.
- Access and correction. Because we hold no name or email, we can only identify your data through the device token. If you want a copy, write to us and we will explain how to confirm it is yours.
- Complaints. You can complain to your local data protection authority. We would like the chance to fix the issue first.
Retention
Likes, dislikes and onboarding choices stay until you delete them. Listening events are used for 90 days and then folded into counts. Access logs are kept for 14 days. Update statistics are kept as daily totals.
Children
MyFlow is meant for a general audience and is not directed at children under 13. It has a For Kids moment with lullabies that a parent can play. The app does not ask for or store a child's name, email or any other personal details.
Security
All connections use HTTPS. The device token is kept in the Keychain. Our servers accept only the data described above and limit how often one device can send it.
About the music
All tracks in MyFlow are generated with AI and every artist is fictional. This is stated in the app and in the App Store description. It is not a data matter, but we repeat it here so nothing is hidden.
Changes
If we change what the app collects we will update this page and the date above before the change takes effect.