Privacy Policy

Last updated: 31 October 2026

mynFlow (“mynFlow”, “we”, “us”) is a web app at mynflow.com that helps businesses record sales and expenses and see their revenue and profit. This policy explains what information mynFlow handles, where it is stored, and what we do with it.

1. Information we handle

Account information

When you sign in with Google, we receive your name, email address, profile picture and Google account ID. We use them to create your mynFlow account and recognise you when you sign in. We also keep the currency you choose when you set up your account, because every amount in mynFlow is shown in it.

Google access tokens

When you allow mynFlow to use Google Drive, Google gives us a refresh token and short-lived access tokens. We store them on our server so mynFlow can keep syncing without asking you to sign in again. They are used only to reach mynFlow’s own folder in your Drive and are never shown to anyone else.

Business records

The products, prices, sales, expenses, categories and notes you enter. They are saved in your Google Drive and on your device (see section 2). They are not sent to or stored on mynFlow’s servers.

Information stored on your device

Your browser keeps a copy of your business records, your sign-in session, your currency, and your chosen language and reporting period, so the app opens quickly and keeps working when you’re offline.

Messages you send us

If you write to us through the contact form, we receive your name, email address and message by email, so we can reply.

Technical information

Like any website, our hosting provider processes your IP address and basic request details (such as browser type and time of request) to deliver the site and protect it from abuse. To show prices in your currency and suggest one when you set up your account, our hosting provider (Cloudflare) tells the page which country your IP address is in. We don’t store your IP address or country. We don’t use analytics or advertising cookies.

2. Where your data is stored

• In your Google Drive. mynFlow asks only for Google’s “app data” permission (drive.appdata). It gives mynFlow a hidden folder in your Drive that only mynFlow can use. mynFlow cannot see, open or change any other file in your Drive. Your records count toward your Google storage.
• On your devices. A copy in your browser. Signing out of mynFlow removes it from that device.
• On our servers. Only your account information and Google tokens, stored with our database provider, Supabase.

3. How we use Google user data

We use the information we receive from Google only to:

• sign you in and keep your account secure;
• save your business records to, and load them from, mynFlow’s folder in your Google Drive.

We don’t use Google user data for advertising, we don’t sell it, and we don’t transfer it to anyone except the providers that run mynFlow (section 4) or where the law requires it. No person reads it unless you ask us for help, it is needed to investigate abuse or security issues, or the law requires it.

mynFlow’s use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

4. Service providers

• Google: sign-in, Google Drive storage, and the fonts used on this site (Google Fonts).
• Supabase: sign-in sessions and the database that holds account information and Google tokens.
• Cloudflare: hosting and delivery of the website.
• FormSubmit: forwards messages from our contact form to our email.

Each processes information only to provide its service to us. We don’t sell or rent personal information.

5. How long we keep information

• Account information and tokens: for as long as your account exists. When you ask us to delete your account, we delete them within 30 days.
• Business records: in your Google Drive until you delete them. Removing mynFlow’s access to your Google account doesn’t delete them; see below.

6. Your choices and rights

• Stop mynFlow reaching your Drive: remove mynFlow at myaccount.google.com/permissions.
• Delete your records from Drive: in Google Drive, open Settings → Manage apps → mynFlow → Options → Delete hidden app data.
• Delete your mynFlow account: write to us through the contact form, using the email address you sign in with.
• Access or correct your information: ask us for a copy of the account information we hold, or to correct it. Depending on where you live, you may have further rights, such as to object to processing or to complain to your data protection authority.

7. Security

All connections use HTTPS. Google tokens are kept in a part of our database the website itself can’t read, and each account can only use its own tokens. No system is perfectly secure, but we work to protect your information.

8. Children

mynFlow is a tool for businesses and isn’t meant for children under 16. We don’t knowingly collect their information.

9. Changes to this policy

If we change this policy, we’ll update the date at the top. If the changes are significant, we’ll tell you in the app or by email before they take effect.

10. Contact

Questions or requests: use our contact form.