Privacy Policy
QBFlowDoc ("we", "our", "the app") is operated by Jimmy Rowland. We respect your privacy and are committed to protecting it. This Privacy Policy explains what information QBFlowDoc collects, how it is used, and the choices you have.
1. Information we collect
On-device only (never leaves your phone)
- Training scores, drill history, and difficulty tier for each module
- Onboarding selections (age track)
- App preferences
This data is stored locally via your device's secure storage and remains on your device unless you sign in to an account.
When you create an account (optional)
If you sign in with Apple, Google, or email/password, we store:
- Your email address (provided by the sign-in provider)
- A unique account ID
- Your best scores per module, synced so they follow you across devices
- The timestamp of your last active session
We use Supabase as our authentication and database provider.
Purchases
If you purchase a QBFlowDoc Pro subscription:
- Apple processes your payment — we never see your credit card or full Apple ID
- RevenueCat (our subscription provider) receives a transaction receipt and an anonymous user ID to verify your entitlement
- Your subscription status (active / expired) is stored with your account
Motion sensor data
The VOR (vestibulo-ocular reflex) training module uses your device's gyroscope to measure head rotation during drills. This data is used only during the active drill, is not recorded, transmitted, or stored in raw form; only the final score is saved.
Analytics (optional, disabled by default)
We may use PostHog to collect anonymous usage data. When enabled, no personally identifiable information is captured.
2. What we do NOT collect
- Contacts, photos, location, microphone, or camera
- Social graph or friends lists
- Health records beyond the app's own scores
- Advertising identifiers (IDFA)
3. Children's privacy
QBFlowDoc is designed for athletes age 13+. We do not knowingly collect personal information from children under 13 in the United States (under 16 in the EU/UK) without verified parental consent. If you are a parent and believe your child has provided us with information, contact qbflowdoc@gmail.com and we will delete it.
4. Data retention and deletion
- On-device data: you control it — clearing the app or uninstalling removes it
- Account data: retained while your account is active. To delete, email qbflowdoc@gmail.com with subject "Account Deletion" and the email on your account. We delete within 30 days.
5. Your rights
Depending on your location, you may have the right to:
- Access the personal data we hold about you
- Correct inaccurate data
- Delete your data
- Export your data in a portable format
- Object to or restrict certain processing
To exercise these rights, email qbflowdoc@gmail.com.
6. Third-party services
| Service | Purpose | Privacy policy |
|---|---|---|
| Apple App Store & StoreKit | Payment processing | apple.com/legal/privacy |
| RevenueCat | Subscription management | revenuecat.com/privacy |
| Supabase | Auth + cloud storage | supabase.com/privacy |
| PostHog (if enabled) | Anonymous analytics | posthog.com/privacy |
7. Security
We use TLS/HTTPS for all network traffic. Supabase enforces row-level security so your account data is only accessible by you. If you believe your account has been compromised, contact us immediately.
8. Changes to this policy
We may update this policy to reflect changes to our practices or legal requirements. Material changes will be announced in-app or via email. The "Last updated" date at the top reflects the most recent revision.
9. Contact
Email: qbflowdoc@gmail.com