The fine print

Privacy Policy

How Lydia Studio products handle your data.

Effective date: May 6, 2026

Lydia Studio (“we,” “us,” “our”) builds tools designed to respect your privacy. This policy explains what information we collect, how we use it, and the choices you have. It applies to the Lydia Studio website (lydiastud.io) and to our products: FlowMate, JustToday, FlowWell, and FlowMate for Flow Club (formerly Flow Club Companion) (collectively, the “Services”).

Data practices vary by product. Read the per-product sections below for details specific to the app you use.

Our Commitments

These principles apply to every Lydia Studio product:

  • We do not sell your personal information.
  • We do not use your personal information for advertising or share it with advertisers.
  • We collect only the data needed to operate the product you use.
  • You can delete your account and your data at any time.

Information We Collect

Account information

When you create a Lydia Studio account, we collect your email address and, if you sign in with a third-party provider (Google, Apple), the basic profile information that provider returns (such as your name and avatar URL).

Content you create

When you use a product, we store the content you create within it. Examples:

  • FlowMate: focus session history, intents, steps, notes, preferences, and aggregate stats.
  • JustToday: routines, focus items, brain-dump entries, projects, daily snapshots, and check-ins.
  • FlowWell: movement session logs and preferences.

Subscription information

If you subscribe to a paid (Pro) tier, our payment processors (Stripe for web, RevenueCat for mobile in-app purchases) handle your payment details. We do not see or store your full card number. We receive and store identifiers such as a Stripe customer ID, a RevenueCat customer ID, your subscription status, plan, and renewal/cancellation events.

Technical information

Our hosting providers automatically log standard request metadata (such as IP address, user agent, and timestamps) for security, abuse prevention, and reliability.

Information you choose to send

If you contact us through our support form or by email, we receive the information you include in that message.

How We Use Information

We use the information we collect to:

  • Provide, maintain, and improve the Services.
  • Authenticate you and keep your account secure.
  • Process subscriptions and manage Pro entitlements across our apps.
  • Sync your content across your devices.
  • Respond to support requests and feedback.
  • Detect, prevent, and address fraud, abuse, and security incidents.
  • Comply with legal obligations.

Service Providers

We use a small set of third-party service providers to operate the Services. These providers process information on our behalf, under their own privacy policies:

  • Supabase — database and authentication infrastructure. Privacy
  • Vercel — hosting for our websites and APIs. Privacy
  • Stripe — web subscription payments. Privacy
  • RevenueCat — mobile in-app purchase management. Privacy
  • Apple and Google — sign-in providers and mobile app store billing. Apple privacy · Google privacy
  • OpenAI — used by FlowMate's “Generate steps” feature to turn your focus intent into suggested steps. Your intent text is sent to OpenAI but is not stored on our servers. Privacy
  • Tally — hosts our support and feedback forms. Privacy
  • Expo — builds and delivers our mobile apps. Privacy

We may also disclose information when required by law, to protect our rights, or in connection with a business transfer (such as a merger or acquisition). If that happens, we will update this policy.

Cookies and Local Storage

On the web, we use a small number of cookies and browser storage entries to keep you signed in and remember your preferences (theme, audio settings, recent session drafts). On mobile, we use device storage and the secure keystore for the same purposes.

We do not use third-party advertising cookies. Clearing your browser storage or uninstalling the mobile app will remove this local data.

Data Retention

We keep your account information and content for as long as your account is active. If you delete your account, we delete or anonymize your personal information within a reasonable period, except where we are required to retain it for legal, accounting, or fraud-prevention reasons (for example, payment records).

Some products limit visible history on the free tier (for example, FlowMate shows the most recent 30 days of session history to free users and 90 days to Pro subscribers). Specific retention behavior is described in the per-product notes below.

Security

We use HTTPS for all web traffic, store mobile authentication tokens in the device's secure keystore, and rely on Supabase for encrypted data storage. No system is perfectly secure; we cannot guarantee absolute security but we work to protect your information using industry-standard practices.

Your Rights and Choices

Depending on where you live, you may have rights under laws like the GDPR (EU/UK), CCPA/CPRA (California), or other privacy laws. These can include the right to:

  • Access the personal information we hold about you.
  • Correct inaccurate information.
  • Delete your information.
  • Export a copy of your information.
  • Object to or restrict certain processing.
  • Lodge a complaint with your local data protection authority.

To exercise any of these rights, email [email protected] from the address associated with your account. We may need to verify your identity before responding.

International Users

The Services are operated from the United States, and our service providers may process data in the United States and other countries. If you use the Services from outside the United States, your information will be transferred to and processed in countries that may have different data protection laws than yours.

Children

The Services are not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, please contact us at [email protected] and we will take steps to delete it.

Per-Product Notes

FlowMate

FlowMate

An audio-guided focus timer (web at flowmate.club; mobile on iOS and Android).

  • You can use FlowMate without an account; an account is only needed to sync history across devices or to subscribe to Pro.
  • Free users see the most recent 30 days of session history; Pro users see 90 days.
  • The “Generate steps” feature sends your focus intent text to OpenAI to produce step suggestions. We do not store this intent on our servers.
  • FlowMate does not access your microphone or record audio.
JustToday

JustToday

A neurodivergent-friendly daily routine and task tool (web at justtoday.app; mobile on iOS and Android).

  • Your routines, focus items, brain-dump entries, projects, daily snapshots, and check-ins are stored in your account so they sync across devices.
  • Items you delete are marked as deleted and removed from your view immediately. We retain a soft-deleted copy briefly to support offline sync, then permanently remove it.
  • JustToday does not access your microphone or record audio.
FlowWell

FlowWell

A movement and exercise companion (mobile, in development).

  • Movement session logs and preferences are stored on your device and, if you sign in, in your account.
  • This section will be expanded before public release.
Browser extension · Part of FlowMate

FlowMate for Flow Club (formerly Flow Club Companion)

A browser extension that enhances Flow Club sessions with audio cues and task management. The extension has two modes — without sign-in (local-only, default) and with optional FlowMate sign-in.

Without sign-in (default)

  • Data collection: none. No data is transmitted off your device.
  • Storage: audio settings, user-created task lists, and the latest 3 auto-captured Flow Club goal lists are stored locally in your browser using extension storage.
  • Where it runs: only on Flow Club session pages at https://in.flow.club.
  • What it reads: the session timer and break/focus phase from the page so audio cues stay in sync, and the goals you set on a Flow Club session (so they can be saved to the latest-3 list).

With optional FlowMate sign-in

Sign-in is optional and the extension is fully functional without it. If you sign in:

  • Account information: your email address (read from your FlowMate account) is shown in the extension popup and used to authenticate API calls. The Supabase access and refresh tokens are stored locally in extension storage so you stay signed in.
  • Sent to FlowMate (flowmate.club): session start/end timestamps, planned and actual duration, optional intent text you write, the tasks you worked on and which you checked off, optional notes, and any task lists you explicitly choose to save with “Save to FlowMate.”
  • Received from FlowMate: on-demand only — saved checklists you ask the extension to import via the cloud-download button.
  • Offline behavior: if FlowMate is unreachable, session log entries queue locally and flush automatically when connectivity returns.
  • Sign out: you can sign out at any time from the popup's account menu, which clears the stored tokens.

What it never does

The extension does not use analytics or third-party tracking, does not read your browsing history or pages outside Flow Club, does not record keystrokes or mouse movement, and does not collect any information about other Flow Club attendees.

Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will update the effective date at the top of this page. If the changes are material, we will provide a more prominent notice (for example, by email or in-app message). Your continued use of the Services after the changes take effect means you accept the updated policy.

Contact

Questions, requests, or concerns about this policy? Reach us at [email protected] or through our support page.