YOUR DATA

Privacy notice

Effective 8 November 2026 · Revision 2026-11-08

Framilton Flow is a private-beta voice-writing app for Android and Linux, with a browser writing workspace. The legal operator is ADITHYA S, operating under the Framilton Technologies name. Privacy, access, correction, withdrawal and deletion requests: adithya.claude@gmail.com. This notice covers the app, account portal and web workspace. The beta account and cloud features are intended for adults aged 18 or older.

What goes where

Data handling by feature
Feature	Data and purpose	Recipient / storage
Google sign-in	Basic Google profile, email, Firebase user ID and authentication/session information to create and manage your optional account.	Google / Firebase Authentication. SDK sessions use private Android app storage or browser session storage on this portal.
Speech recognition	Audio you explicitly record to turn speech into text, with configured dictionary hints where supported.	Your selected OpenAI or xAI API, Android's selected speech service, or a supported local model. Android system recognition may send audio online.
AI writing / Tamil translation	Recognized or selected text and instructions to rewrite or translate it, when enabled.	Your selected OpenAI or xAI writing API, using your own key. Provider charges and data policies apply.
Drafts and history	Writing, original dictation recovery and optional history to continue or recover your work.	On the device. Android drafts/history and keys are encrypted at rest; history is off by default and capped at the latest 50 dictations. Linux uses private local files; storage protections depend on your system.
Browser dictation	Microphone audio to transcribe speech after separate online-processing consent and browser permission.	Your browser’s speech recognition service, which may send audio online. Provider retention and privacy policies apply; cancellation cannot recall audio already sent. The workspace stores no audio recording.
Browser writing workspace	Text you type or explicitly add from a speech preview, draft settings and history you explicitly choose to save, for editing and recovery on this browser.	In browser memory by default. Optional saved drafts/history use this browser's local storage, separated by Firebase user ID or a separate guest workspace. Guest writing is available to other people using the same browser profile. They are not encrypted by the app, are not synced to Firebase/Android/Linux, and can be read by someone with access to this browser profile. Local settings let you clear them. Copy/export sends the text to your clipboard or downloads.
Personalization sync	Selected language/formatting/style preferences, dictionary and snippets for use across devices, only when separately enabled.	The Firebase service uses your signed-in Flow identity. The legacy service on Supabase uses a separate account; joining Firebase does not migrate it automatically. Audio, API keys, drafts, history, paid presets and workflow profiles are excluded from this sync payload.
Subscriptions	Plan, purchase status and expiry, a Google Play purchase token during verification, and an account-bound token hash for replay prevention and lifecycle updates.	Google Play processes payment. A trusted Firebase service checks the subscription with Google Play and stores the status needed to provide access. We do not receive your payment card details through this verification flow.
Android floating dictation	Focused editable-field metadata, focus/selection changes and clipboard insertion to return text to the intended field.	Processed locally by the accessibility service. Password/noneditable fields are blocked; surrounding text is not read for this feature. Insertion replaces Android clipboard contents.
Website and support	IP address, browser/network request information needed to serve and secure the site; email and request details if you contact support.	Firebase Hosting / Google infrastructure and the support mailbox. This portal loads Firebase Auth on the account page; policy pages require no third-party scripts.

Your choices before processing

Signing in does not start dictation, enable AI writing, enable personalization sync, or grant a paid plan. In Android 2.5, microphone and accessibility approval are handled by Android during setup. Your selected speech provider receives audio only after you start recording; AI text is sent only when AI writing or translation is enabled. There are no additional per-provider consent switches. Choose on-device-only recognition to block cloud processing, turn off AI writing to stop text processing, or revoke Android microphone/accessibility permissions. Older Android builds retain their separate consent controls. Requests already submitted to a provider cannot be recalled.

On Android, on-device-only mode requires supported recognition hardware/service and downloaded language models; it does not fall back online and blocks cloud writing/translation. Linux local/cloud behavior depends on its selected model and provider settings. Android processing settings do not change an already-installed Linux configuration.

AI can change meaning. Bubble confirmation can insert the processed result without a second preview; check the result and use original-dictation recovery when needed. Do not record others without their permission, or submit information you lack authority to share.

Retention and deletion

Firebase account information stays until that identity is deleted. The account page and Android profile require recent Google verification and delete the Firebase personalization profile before the identity. If the second step fails, the profile may be gone while the identity remains; retry or contact support. This does not delete your Google account, local writing/keys/history, the separate legacy sync account, or automatically cancel a Google Play subscription. Cancel subscriptions in Google Play. Request deletion of other associated Framilton Flow hosted data here, including the legacy sync profile. Purchase verification and transaction records may be retained for fraud prevention, billing, legal or support duties; contact us about the applicable retention. Pausing sync or signing out stops future synchronization; it does not erase existing server data.

Android temporary audio is removed after processing/cancellation. Local drafts, recovery text, dictionary, snippets and settings remain until you clear them, remove app data or uninstall as applicable; optional history can be deleted in the app. Linux recovery/configuration files and backups you create need separate removal. Local consent choices are retained in private Android settings until withdrawal, reset or removal of app data. Support correspondence is kept while needed to resolve the request, verify deletion and meet applicable legal duties. Where retention is legally required, we explain the category and reason rather than promise immediate erasure.

Browser workspace text is temporary unless you choose to remember a draft or save history. Saved entries remain until you clear them in workspace Settings/history or remove this site's browser data; browser storage eviction can also remove them. Signing out hides your workspace but does not erase previously saved browser data. Clear it before deleting your Firebase identity; if the identity is already deleted, use your browser's site-data controls. Browser dictation starts only after separate online-processing consent and a Dictate action. The browser speech service may send microphone audio online; its provider’s retention and privacy policies apply. Interim and final speech remain in a temporary preview until you explicitly add the final text to your draft. Cancel, leaving Writing, hiding the page or changing accounts stops recognition and discards the preview. Withdraw speech consent in Settings to stop future recognition; already-submitted audio cannot be recalled. Consent resets when the workspace session or identity changes. Unsupported browsers retain manual writing. The workspace does not call an AI writing provider.

Providers may retain submitted audio/text and security logs under their own terms, account controls and legal obligations. Cancellation or local deletion does not guarantee deletion of an already-submitted provider request. We do not promise zero retention or India-only processing. For a provider-data deletion request, contact us and the provider for the API account you control.

Security and sharing

Network account and provider connections use HTTPS. Android stores API keys encrypted in private app storage with app backups/device transfer disabled; an unlocked device can still display your saved text. Tokens and provider keys are excluded from personalization sync. The web portal uses Firebase-managed session storage and does not copy credentials into custom logs or analytics. We do not sell personal data or run advertising/analytics SDKs in this portal. Infrastructure providers process data to operate their services, and data may be disclosed when required by applicable law.

Copy, Share and text insertion send text to the clipboard or the app you choose, which follows its own privacy rules. Providers and hosting services may process data outside India. Their current terms and account settings govern that processing; review them before enabling a feature.

Provider policies

Requests and changes

Contact adithya.claude@gmail.com to ask what Framilton-held data relates to you, request correction or deletion, withdraw permission, or raise a concern. We may verify account ownership; never send a password, API key or identity document unless an appropriate secure process has been agreed. We will identify any limits caused by shared accounts, required retention, or provider-controlled records. Material processing changes will be reflected in this notice and, where needed, renewed in-app consent.