How SmartFlow AI Protects Your Flow

To provide a seamless task management experience, SmartFlow AI processes and stores several types of data depending on your interactions with the app:

• Account Details: Your name, email address, profile picture URL, and Firebase authentication unique identifier.
• Workspace Data: Task descriptions, priority levels, deadlines, status states, habit trackers, streaks, reminders, and user preferences.
• AI Assistant Inputs: Text prompts and voice recordings sent to the productivity assistant for voice transcription or task creation.

We use the information we collect to operate and optimize the SmartFlow AI platform. Specifically:

• To display your tasks, calendar events, habits, and dashboard metrics in real-time.
• To power the scheduling co-pilot, enabling auto-generation of subtasks, habit recommendations, and task prioritization suggestions.
• To send browser notifications, email reminders, and smart alerts for upcoming deadlines.
• To diagnose technical issues, fix bugs, and measure application performance.

SmartFlow AI offers integrations with Google APIs and AI APIs to enhance productivity:

• Google Calendar: If connected, the app exports your tasks to Google Calendar and pulls calendar events to display in the SmartFlow dashboard. We only read and write event details with your explicit OAuth consent.
• Gmail Integration: Used strictly to scan subject lines/metadata to identify deadlines or invoices for automatic task creation. Gmail data is processed in-memory and is not persistently saved on our servers.
• Gemini & Groq AI: User prompts and task titles are analyzed by Google Gemini or Groq APIs to generate smart schedules. This data is not used by our partners to train public models.

Note: You can disconnect your Google Account and revoke all OAuth scopes at any time directly through the Profile configuration page or via Google Security Settings.

All account records, task items, habits, and configuration settings are hosted securely inside Google Firebase Infrastructure:

• Data is read and written using Firebase Firestore and Realtime Database, protected by server-side security rules that prevent unauthorized database access.
• Connections are encrypted in transit using industry-standard TLS (HTTPS) protocol.
• Sensitive integrations credentials (such as Google OAuth refresh tokens) are encrypted before storage.

While we apply stringent security rules, no electronic storage system is 100% secure. We advise users not to store highly sensitive personal credentials (e.g. social security numbers or credit card details) inside task descriptions.

We believe in complete data transparency and grant you full control over your productivity workspace:

• Data Access & Portability: You can inspect all tasks and configuration details through the app interface.
• Data Correction: You can edit task titles, descriptions, and habit statuses at any time.
• Data Deletion: You can delete individual tasks, clear habit history, or request a complete wipe of your Firebase Auth account and all related database records.

To request total account erasure, please navigate to the Profile Settings or email our support desk.