Privacy Policy

Last updated 28 August 2026

FlowState is built to know as little about you as possible. The application has no account, no analytics and no telemetry, and your projects never leave your Mac. This page says exactly what does exist, because a privacy policy that only makes promises is not much use.

What stays on your Mac

Everything you create in FlowState — projects, folder paths, shortcuts, websites, themes and preferences — is stored in files in your own Application Support folder. It is never uploaded, never synced, and never seen by anyone else. Deleting FlowState and that folder removes it completely.

What FlowState sends, and when

Without a subscription: nothing. A free or trial copy of FlowState makes no network requests of its own at all.
With a subscription: FlowState contacts its own licensing service to renew your licence, roughly once a month. It sends the licence it already holds, and nothing else — no projects, no paths, no usage.

Opening a link or launching a workspace opens your own browser and applications. Those connections are between you and those sites, exactly as if you had opened them yourself.

The licensing service

When you subscribe, a small service run for FlowState stores the minimum needed to know that your subscription is live:

Your Paddle customer and subscription identifiers
The email address you used at checkout
Whether the subscription is active, and when that was last updated

It holds no card details, no address and no name — Paddle has those, and does not pass them on. The service runs on Cloudflare Workers. The records are kept while your subscription exists and removed when it has been over for 90 days.

Payment

Payments are taken by Paddle.com Market Ltd, the merchant of record for FlowState. Your card details go to Paddle and never to Joshua Lafrentz — they are never seen by, or stored on, anything FlowState runs. Paddle's handling of your information is covered by its own Privacy Notice.

The website and downloads

This site has no analytics, no cookies and no trackers. It is hosted on GitHub Pages, and downloads come from GitHub Releases; both keep standard server logs, including IP addresses, under GitHub's privacy statement. The site loads fonts from Google Fonts, which sees the request for the font file.

Permissions FlowState asks for

Accessibility — to move and resize windows on your screen. It reads window positions to put them back afterwards. Nothing is recorded or sent, and declining it leaves everything else working.
Automation — asked for only if you have FlowState open a workspace link in a new Safari or Chrome window. It sends that browser a URL and nothing more.

Both can be withdrawn at any time in System Settings, and FlowState keeps running.

Your rights

FlowState is operated from New Zealand and follows the Privacy Act 2020. You may ask what information is held about you, ask for it to be corrected, or ask for it to be deleted — email support@flowstatemac.com and you will have an answer within 20 working days.

If you are not satisfied with the response, you may complain to the Office of the Privacy Commissioner. If you are in the EU or UK, you have equivalent rights under the GDPR, and Paddle acts as the controller for payment information.

Changes

This page is dated, and is revised whenever FlowState starts or stops sending anything. Material changes are announced by email to subscribers.

Contact

Joshua Lafrentz · support@flowstatemac.com