Privacy Policy for Flux

Privacy Policy for Flux

Last updated: September 1, 2026

Flux ("Flux," "we," "us," or "our") provides the Flux mobile application (the "App"). This Privacy Policy explains what information the App processes, why it is processed, when it is shared, and the choices available to you.

Contact: [email protected]

1. Important Screen Time privacy notice

Flux uses Apple's Family Controls, Managed Settings, and Device Activity frameworks to provide app blocking and focus features.

  • The names of apps you select for blocking and your per-app usage history are not sent to Flux's analytics, advertising, subscription, or cloud providers.
  • Apple supplies privacy-preserving tokens for selected apps and categories. Flux stores the information needed to operate blocking features on your device and in its app group.
  • Flux may store or sync high-level progress information, such as focus minutes, streaks, completed or cancelled block counts, and an estimated screen-time goal. This is not a list of the apps you use or your per-app usage.

2. Information we process

Depending on the features you use, we may process the following categories.

Account and profile information

  • Email address, name, account or user identifier, and chosen sign-in provider.
  • Profile and onboarding information such as age group, focus goal, estimated daily screen-time goal, and selected motivation.
  • App version, last-seen date, premium status, and acquisition source.

Progress and app-usage information

  • App opens and onboarding steps.
  • Focus minutes, streak information, block completion or cancellation counts, and similar product interactions.
  • Notification permission and Screen Time permission outcomes.

We do not send the names of selected apps, per-app Screen Time, or the content of an optional Shield photo to analytics or advertising providers.

Purchases and subscriptions

  • Product identifier, purchase or subscription status, free-trial status, renewal, cancellation, refund, price, currency, and related transaction information supplied by Apple and processed by RevenueCat.
  • Flux does not receive or store your full payment-card number. App Store payments are processed by Apple.

Advertising attribution and measurement

We use AppsFlyer to understand which advertisements lead to App installs and valuable in-app actions. Depending on device settings, permissions, and the measurement method available, attribution information may include:

  • IP address, user agent, device type, operating-system version, locale, app version, Identifier for Vendors (IDFV), an AppsFlyer-generated identifier, and the advertising identifier (IDFA) when Apple App Tracking Transparency permission is granted;
  • campaign, ad-set, ad, placement, click, impression, and install or first-open information; and
  • events such as app activation, completed registration, trial start, subscription, purchase, value, and currency.

AppsFlyer may provide qualifying attribution and conversion information to advertising partners, including Meta Platforms, Inc. (Facebook and Instagram), so that we can measure and optimize advertising for Flux. When AppsFlyer's Advanced Data Sharing is enabled, qualifying iOS events may be measured even where an IDFA is unavailable, using limited device, network, and event information where permitted.

Analytics and diagnostics

  • PostHog processes product-interaction events used to understand and improve the App. Flux disables automatic screen capture and session replay and does not intentionally send selected-app names or per-app Screen Time to PostHog.
  • Sentry processes crash, performance, and technical diagnostic information. Flux disables Sentry's default collection of personally identifiable information.

3. App Tracking Transparency and advertising choices

On supported Apple devices, Flux requests permission through Apple's App Tracking Transparency (ATT) framework before accessing the IDFA or engaging in tracking that requires ATT permission. If you decline, the IDFA is not available to Flux or AppsFlyer. Aggregated or privacy-preserving attribution provided through Apple, Meta, or AppsFlyer may still operate where permitted.

You can review or change ATT permission in iOS Settings > Privacy & Security > Tracking. You can also limit ad personalization through the privacy controls provided by Apple and Meta.

4. How we use information

We use information to:

  • provide accounts, restore profiles, operate subscriptions, and deliver App features;
  • maintain blocking, focus, progress, and support functionality;
  • analyze reliability, diagnose crashes, and improve performance;
  • understand onboarding and feature usage;
  • attribute installs and in-app events to advertising campaigns;
  • measure and improve Flux marketing; and
  • comply with legal obligations, prevent fraud, and enforce our terms.

5. Service providers and recipients

We use the following providers for the purposes described above. Their handling of information is governed by their own terms and privacy policies.

| Provider | Purpose | Privacy policy | | --- | --- | --- | | Apple | App distribution, Sign in with Apple, in-app payments, Screen Time frameworks, SKAdNetwork/AdAttributionKit | https://www.apple.com/legal/privacy/ | | Google | Optional Google Sign-In | https://policies.google.com/privacy | | Supabase | Authentication, account database, cloud profile and progress sync, account deletion | https://supabase.com/privacy | | RevenueCat | Subscription, trial, purchase, entitlement, renewal, cancellation, and refund management | https://www.revenuecat.com/privacy | | AppsFlyer | Mobile attribution, deep links, campaign measurement, and event postbacks | https://www.appsflyer.com/legal/privacy-policy/ | | Meta Platforms | Facebook and Instagram advertising attribution, measurement, and optimization | https://www.facebook.com/privacy/policy/ | | PostHog | Product analytics in the EU region | https://posthog.com/privacy | | Sentry | Crash and performance diagnostics | https://sentry.io/privacy/ |

We may also disclose information when required by law, to protect users or the App, or as part of a merger, financing, acquisition, or sale of assets, subject to appropriate safeguards.

6. Sale and sharing of personal information

We do not sell personal information for money. Some privacy laws may define certain disclosures for advertising measurement or optimization as "sharing," "targeted advertising," or a "sale" even when no money is exchanged. Where those laws apply, you may request to opt out by contacting us at [email protected] and by using the platform privacy controls described above.

We do not knowingly sell or share for targeted advertising the personal information of children under 16.

7. Legal bases

Where the GDPR, UK GDPR, or similar law applies, we process information under one or more of the following legal bases:

  • performance of a contract, where processing is necessary to provide the App or a requested subscription;
  • consent, including ATT permission where required;
  • legitimate interests, such as product analytics, security, fraud prevention, and improving our services, where those interests are not overridden by your rights; and
  • compliance with legal obligations.

You may withdraw consent at any time. Withdrawal does not affect processing that occurred before withdrawal.

8. Retention

  • On-device information remains until it is deleted through the App, the account is deleted, or the App is removed, subject to iOS behavior and backups.
  • Account, profile, and progress information stored through Supabase is retained while the account is active and is deleted or de-identified when the account is deleted, unless retention is legally required.
  • Purchase and subscription records are retained as required to provide entitlements, process refunds, prevent fraud, and meet legal or accounting obligations.
  • Analytics, attribution, and diagnostic providers retain information according to our account settings and their published retention policies.

We retain information only for as long as reasonably necessary for the purposes described in this Policy.

9. Your rights and controls

Depending on your location, you may have rights to access, correct, export, delete, restrict, or object to processing of your personal information, withdraw consent, or opt out of certain advertising disclosures.

Flux provides account deletion and data export controls in the App. You may also contact [email protected]. We may need to verify your identity before completing a request. You may have the right to complain to your local data-protection authority.

10. International transfers

Our providers may process information in Israel, the European Economic Area, the United States, and other countries. Where required, transfers are protected using recognized legal mechanisms such as adequacy decisions, contractual safeguards, or standard contractual clauses.

11. Security

We use reasonable administrative, technical, and organizational safeguards designed to protect information. No transmission or storage system can be guaranteed to be completely secure.

12. Children

Flux is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child has provided personal information, contact us so we can investigate and delete it where appropriate.

13. Changes to this Policy

We may update this Policy as our practices or legal requirements change. We will update the date above and provide additional notice when required.

14. Contact us

For privacy questions or requests, contact:

Flux
Israel
[email protected]