Privacy Policy

Updated: October 17, 2026

This Privacy Policy describes how WeddingFlow and its marketing website handle your information. Other FlowPlan products may have different features and privacy notices. We are committed to protecting your privacy and being transparent about our practices.

1. Who We Are

FlowPlan apps are developed and published by FlowPlan (contact [email protected]). Our apps are distributed through platforms including Etsy, Gumroad, and our own websites.

2. Data We Collect

2.1 Local Plans and Optional Cloud Sync

WeddingFlow stores a copy of your wedding plan in your browser on your device. If you have never enabled cloud sync or joined a shared plan, your plan is not uploaded by WeddingFlow. You can use the planner without creating an email-and-password account.

If you turn on cloud sync or join a plan with a sync code, WeddingFlow uses Supabase to store and synchronize your plan and uploaded photos online. The shared plan includes names, dates, budgets, guest and vendor details, notes, settings and the other information you enter. Each connected browser receives an anonymous authentication session and an identifier; this does not require an email address or password. Supabase also processes the connection information needed to provide the service.

Keep your sync code private: anyone with that code can join, view and edit the shared plan. Synced photos are stored in a private bucket: the app retrieves them for authenticated devices that belong to the shared plan. A stored photo link alone does not grant access. Cloud photos need an internet connection and active plan membership. Cloud sync is not end-to-end encrypted.

2.2 License Keys

Your purchase access key unlocks the app through a local validation check. If you turn on cloud sync, the key is also sent to Supabase for server-side validation and stored with the cloud plan. Your purchase access key and your plan's sync code serve different purposes; the access key alone does not identify your shared plan.

2.3 Purchases, Support and Checklist Requests

Purchase platforms process the information you provide during checkout. If you contact us, we receive the contact details and message you send. The free checklist on getplanmywedding.com is a direct PDF download. You do not need to provide an email address, complete a spam check or subscribe to marketing, and we do not email a copy. Website analytics may record which format link you click; a click does not confirm that you saved the file.

If you used the previous checklist request form, its records include your email address, paper-size choice, request identifier, request time and notice version in Supabase. That form did not subscribe you to marketing or send an email. It used Cloudflare Turnstile and short-lived rate-limit records derived from your email address. Old rate-limit windows were cleared as new requests arrived; they may remain longer when the service is idle. Existing records have not been deleted as part of the move to direct downloads. We review checklist request records after 90 days to decide whether they are still needed. This is a manual review, not automatic deletion. You can request deletion by emailing [email protected].

2.4 Website Analytics

Our marketing website (getplanmywedding.com) uses Google Analytics 4 to measure site traffic, referral sources (including UTM campaign parameters), and page interactions. Google Analytics sets cookies on your device and processes usage data including your IP address. This data is processed by Google LLC in accordance with Google's Privacy Policy. We use this information solely to understand how visitors discover and use our site so we can improve it.

Our marketing website also uses the Pinterest tag to measure how visitors arriving from Pinterest interact with the site (page visits and purchases). The Pinterest tag sets cookies on your device and processes usage data in accordance with Pinterest's Privacy Policy.

WeddingFlow does not include the marketing website's Google Analytics or Pinterest tags. Optional cloud sync still communicates with Supabase as described above.

3. Storage, Sync and Backups

• The local plan is specific to the browser or installed app you use. Clearing browser data can remove that local copy.
• Cloud sync is optional. Connected devices exchange plan changes when online; keep regular backups rather than relying on sync as your only backup.
• Joining a shared plan replaces the current plan on that device. Back up anything you want to keep before joining.
• Turn off on this device stops plan synchronization on that device. It does not delete the cloud plan or other devices' copies. After a successful disconnect, this app stops displaying cloud photos on that device. If disconnecting fails, the app keeps the connection so you can retry.
• Remove from the cloud, available under Settings → Cloud sync while connected, is a separate action that any plan member can choose. It pauses cloud writes, removes the plan's cloud photos in checked batches, then removes the shared plan and invalidates its sync code. If interrupted, the app keeps retry access and shows Retry cloud removal; removal is not complete until the remaining photos and plan are removed. Local plans, exports, downloaded images and previously cached copies on other devices are not erased. Provider backup or retention policies are separate from removal of the active cloud copy. Contact us if you need help.
• Keep original photos separately. A backup of a previously synced plan may contain cloud image links instead of the image files themselves; those links require online access to the shared plan and stop displaying after disconnecting or cloud removal.

4. Data Sharing

We do not sell your wedding-plan data. If you choose cloud sync, Supabase processes the cloud plan and photos to provide that feature, and devices joined with your code can access the shared plan. Photo access requires authenticated plan membership. Anyone you allow to view a photo may save or share a copy outside the app. Website analytics and purchase platforms process information as described in this policy.

5. Third-Party Platforms

When you purchase a FlowPlan app, the transaction is processed by the platform through which you buy (e.g., Stripe, Etsy or Gumroad). These platforms have their own privacy policies governing the purchase transaction, payment processing, and any account information you provide to them. We encourage you to review their respective privacy policies:

• Stripe: stripe.com/privacy
• Supabase: supabase.com/privacy (optional cloud service)
• Etsy: etsy.com/legal/privacy
• Gumroad: gumroad.com/privacy

6. Children's Privacy

FlowPlan apps are not directed at children under the age of 13. We do not knowingly collect information from children.

7. Data Security

Protect both your device and any shared plan. Local copies depend on your device's security; cloud plan and photo access use anonymous sessions and plan membership. Private storage does not prevent an authorized viewer from keeping a copy. We recommend:

• Using a device passcode or biometric lock
• Regularly backing up your data using the app's Export feature
• Being cautious when sharing your device, sync code, backup files or photo links with others

8. Your Rights

You can manage local and shared copies using the controls below. Contact us about access, correction or deletion requests, including any cloud data you cannot manage through the app:

• Export your data at any time using the app's built-in backup feature
• Remove a local copy by clearing browser site data; this does not remove an existing cloud copy. Use the cloud controls described above for the shared plan.
• Transfer your data to another device using the Export and Import features

9. Service Workers and Caching

WeddingFlow uses a service worker to cache app files for offline functionality and faster loading. Plan text and photos stored directly on your device remain available locally. Version 1.4.3 no longer persistently caches cloud photos for offline use; it downloads them while online into temporary memory. The updated service worker removes its older cloud-photo cache when activated. Older installed versions may need updating. Previously downloaded images, exported copies, other browser caches and provider caches cannot be recalled by this change. Clearing browser site data removes that browser's local plan and caches; it does not remove an existing cloud copy.

10. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated "Last updated" date. Continued use of any FlowPlan app after changes constitutes acceptance of the updated policy.

11. Contact Us

If you have questions about this Privacy Policy, contact us through your purchase platform (Etsy or Gumroad message) or by email at [email protected].