Privacy policy

Noirly Flow is run by Aneesh Pissay, based in India, who is responsible for the data Flow holds (“we”, “us”).

You sign in to Flow with a Noirly account, which is provided by Noirly Identity. Your account itself (email, name, password, Google sign-in and sign-in records) is covered by the Noirly Identity privacy policy. This policy covers what Flow itself keeps.

• Your profile in Flow: the name, email address and picture Noirly Identity shares with Flow when you sign in, and anything you add to your Flow profile (display name, title, timezone, bio).
• Your work: workspaces, projects, board columns, tasks (titles, descriptions, status, priority, start and due dates, repeats, checklists, subtasks, tags, assignees), and comments.
• Team information: workspace memberships and roles, and invite links you create.
• Activity history: a record of changes in each workspace (who created, edited, completed or commented on what, and when), which members of that workspace can see and export.
• Presence: while you have a project open, other members can see that you are online and viewing it. This is not stored after you leave.

Flow does not collect your location, contacts, photos or files from your device, advertising IDs, or usage analytics. The Android app asks only for internet access and contains no advertising, analytics or crash-reporting SDKs.

• To provide Flow: store your work, keep it in sync across the web and your devices, and show it to you.
• To share a workspace's content with its members, and to show live updates and presence.
• To keep the service secure and working, for example by checking that requests come from a signed-in member.

We do not sell your data, use it for advertising, or build profiles of you.

• You: your personal workspace is visible only to you.
• Members of your team workspaces see that workspace's projects, tasks, comments and activity, and your name and picture. Viewers can read but not change things.
• Noirly Identity signs you in. Flow asks it only to confirm who you are.
• Service providers that host Flow's servers, database and live-update service for us and process data only on our instructions.
• Authorities, only if the law requires it.

We do not share your data with anyone else.

On the web, Flow uses strictly necessary cookies to keep you signed in and protect sign-in (session and security cookies), and remembers your theme in your browser. The Android app keeps its sign-in tokens in Android's encrypted keystore and remembers the last workspace and project you opened. Both are removed when you sign out or uninstall the app.

All traffic between your device and Flow is encrypted (HTTPS and secure WebSockets). Every request is checked against your Noirly sign-in and your role in the workspace before data is returned or changed.

• Your profile and work: for as long as you have a Noirly account, or until you delete them.
• Tasks you delete are hidden straight away and kept only as part of the workspace's history.
• When your account is deleted, Flow deletes your data straight away (see below). Copies in our hosting provider's backups are overwritten on their normal backup cycle.

You can delete your account and your Flow data at any time:

• In the Android app: Menu → Delete account.
• On the web: noirly.identity.aneesh-pissay.in/delete-account.

This deletes your Flow profile, your personal workspace, team workspaces where you are the only member, and your comments, activity and invites. In team workspaces shared with others, tasks you created stay with the team (they belong to the workspace) but are no longer linked to you, and if you owned the workspace, ownership passes to another member. This cannot be undone.

You can see and change your work and Flow profile in the app, export a workspace's activity as CSV, and delete your account as described above. Depending on where you live (including under India's Digital Personal Data Protection Act, 2023), you may also have the right to request a copy of your data, to have it corrected or erased, and to complain to a data protection authority. To make a request, email contact@aneesh-pissay.in.

Noirly Flow is not meant for children under 13, and we do not knowingly collect their data. If you believe a child is using Flow, contact us and we will delete their data.

If we change this policy, we will update the date at the top of this page. For significant changes we will tell you in the app or by email before they take effect.

Questions about privacy in Noirly Flow? Email contact@aneesh-pissay.in. For your Noirly account itself, see the Noirly Identity privacy policy.