Privacy Policy

Flowstate • Effective Date: July 30, 2026 • goflowstate.com

1. Introduction

This Privacy Policy explains how GoFlowstate LLC (“Flowstate,” “we,” “us,” or “our”) collects, uses, and shares information about you when you use our websites, mobile and desktop applications, and related services (collectively, the “Services”), and when you communicate with us, including by email and text message. By using the Services, you acknowledge the practices described in this Policy. This Policy is incorporated into our Terms of Service.

2. Information We Collect

2.1 Information You Provide

Account and profile. Account and Passport information, such as your name, email address, mobile phone number, username, password, photo, skills, work history, portfolio items, and bio.
Content and contributions. Content you create or upload, including posts, messages, files, exercise and session responses, contributions to Spaces and Novas, and bounty submissions.
Payments. Payment and payout details, which are collected and processed by our payment processors. We receive limited information such as transaction confirmations, not full card numbers.
Communications. The contents of messages you send us, including support requests, survey responses, and replies to our text messages.

2.2 Information Collected Automatically

Device and log data, such as IP address, browser and device type, operating system, pages viewed, links clicked, and timestamps.
Usage data about how you interact with the Services, such as features used, Spaces joined, contributions made, and notification interactions.
Approximate location inferred from your IP address.
Cookies and similar technologies, described in Section 6.

2.3 Information from Other Sources

Integrations and sign-in services you choose to connect (for example, single sign-on providers), which share information with us according to their settings and policies.
Verification and security providers that help us confirm identity, credentials, or contribution authenticity, and help prevent fraud.

3. How We Use Information

Provide, operate, and maintain the Services, including your Passport, Spaces, Novas, exercises, bounties, and Flow Credits.
Match members with opportunities, record and display contribution attribution, and calculate recognition and rewards.
Send notifications you have enabled, by email, in-app message, push notification, and, with your consent, text message (see Section 4).
Process transactions and administer credits, rewards, and payouts.
Provide AI-assisted features, such as suggestions, summaries, and matching. Content processed for these features is handled by us and our service providers under contract, and is not used by them for their own purposes.
Maintain safety and security, including detecting, investigating, and preventing fraud, abuse, and violations of our Terms.
Analyze and improve the Services, and develop new features.
Send marketing communications where permitted by law and, for marketing text messages, only with your separate express consent. You can opt out at any time.
Comply with legal obligations and enforce our agreements.

4. Text Messaging (SMS) and Mobile Information

With your consent, we send text messages through our messaging service providers (currently Twilio Inc.). These messages may include login verification codes, account and security alerts, participation alerts (for example, when it is your turn to participate in an exercise or session), and reminders and status updates about activities you have joined. Marketing text messages are sent only if you separately and expressly opt in.

Frequency. Message frequency varies based on your account activity and settings.
Cost. Message and data rates may apply. Charges billed by your carrier are your responsibility.
Opt-out. Reply STOP to any message to cancel. We also honor CANCEL, END, QUIT, UNSUBSCRIBE, OPT OUT, REVOKE, and STOPALL, as well as any other reasonable revocation method, including your in-app notification settings or an email to [email protected]. We process every opt-out as soon as practicable and no later than ten (10) business days after receipt. After you opt out, you may receive a single confirmation message and, if your request is ambiguous, a single clarification message.
Help. Reply HELP to any message, or contact [email protected].

No mobile information will be shared with third parties or affiliates for marketing or promotional purposes.

All the categories of sharing described in this Policy exclude text messaging originator opt-in data and consent; this information will not be shared with any third parties. Sharing with subcontractors that provide support services to us, such as our SMS delivery provider and customer service tools, is permitted solely so they can perform those services on our behalf.

Service providers. Vendors that help us operate the Services, such as cloud hosting, communications delivery (including SMS delivery via Twilio), payment processing, analytics, customer support, and security. They may use the information only to perform services for us, under contractual confidentiality and data protection obligations.
Other members. Your profile, Passport, and contributions are visible to other members according to your visibility settings and the Spaces and Novas you join. Contributions to shared environments are visible to other participants, and attribution records associated with collaborative work may persist so that other members’ records remain accurate.
Legal and safety. We may disclose information to comply with law, respond to lawful requests, protect the rights, property, or safety of Flowstate, our members, or others, or enforce our agreements.
Business transfers. If Flowstate is involved in a merger, acquisition, financing, or sale of assets, information may be transferred as part of that transaction, subject to this Policy and notice to you.
With your consent. We share information with third parties when you direct us to or otherwise consent.

We do not sell personal information, and we do not share personal information with third parties for their own marketing purposes. As stated in Section 4, no mobile information will be shared with third parties or affiliates for marketing or promotional purposes, and text messaging originator opt-in data and consent will not be shared with any third parties.

6. Cookies and Similar Technologies

We use cookies and similar technologies to keep you signed in, remember preferences, measure and improve performance, and understand how the Services are used. You can control cookies through your browser settings and, where available, our cookie preferences tool. Disabling cookies may limit some features.

7. Data Retention

We retain personal information for as long as your account is active and as needed for the purposes described in this Policy, and afterwards as necessary to comply with legal obligations, resolve disputes, enforce agreements, and maintain the integrity of collaborative records. When you delete your account, we delete or de-identify your personal information in accordance with our retention schedule, except that (a) contributions and attribution records embedded in other members’ shared work may be retained so their records remain accurate, and (b) records of your SMS consent and opt-out history are retained as required to honor your preferences and demonstrate compliance.

8. Security

We use administrative, technical, and physical safeguards designed to protect personal information, including encryption in transit, access controls, and monitoring. No system is completely secure, and we cannot guarantee the security of information transmitted to or stored by us. Please use a strong, unique password and notify us immediately of any suspected unauthorized access.

9. Your Rights and Choices

Access, correction, deletion, and portability. You can access and update most account information in your settings, and request a copy or deletion of your personal information by emailing [email protected].
Email. You can opt out of marketing emails using the unsubscribe link in any marketing email. We may still send transactional and account emails.
Text messages. You can opt out of text messages at any time as described in Section 4, including by replying STOP.
Push notifications. You can manage push notifications in your device or app settings.
Cookies. You can manage cookies as described in Section 6.

10. U.S. State Privacy Rights

Depending on where you live, you may have rights under state privacy laws, such as the California Consumer Privacy Act, including the right to know, access, correct, delete, and port your personal information, the right to opt out of the sale or sharing of personal information and certain targeted advertising, and the right not to be discriminated against for exercising your rights. We do not sell personal information or share it for cross-context behavioral advertising. We honor opt-out preference signals, such as Global Privacy Control, where required. To exercise your rights, email [email protected]; we will verify your request and respond within the time required by law. You may use an authorized agent where permitted, and you may appeal a refusal by replying to our response.

11. International Users

Flowstate is based in the United States, and information is processed and stored in the United States and other countries that may not provide the same level of data protection as your home jurisdiction. Where we process personal information of individuals in the European Economic Area, the United Kingdom, or other regions with similar laws, we rely on legal bases such as performance of a contract, our legitimate interests, consent, and legal compliance, and we use appropriate safeguards, such as standard contractual clauses, for cross-border transfers. Individuals in those regions may also have rights to object to or restrict processing and to lodge a complaint with their supervisory authority.

12. Children’s Privacy

The Services are intended for adults and are not directed to anyone under 18. We do not knowingly collect personal information from children. If you believe a child has provided us personal information, contact [email protected] and we will delete it.

13. Changes to This Policy

We may update this Privacy Policy from time to time. For material changes, we will provide notice by email or through the Services at least 30 days before the changes take effect. Your continued use of the Services after the effective date constitutes acceptance of the updated Policy.

14. Contact Us

Email: [email protected]

Mail: GoFlowstate LLC, Attn: Privacy Team, 100 Nassau St., Floor 2, Princeton, NJ 08540

In-app: Settings → Privacy → Contact Privacy Team