Privacy Policy
Last updated 8 September 2026
OurFlow is a private memory space for a group of friends. This page says exactly what the app collects, who can see it, and how to make it go away. It is written to be read, not to be survived.
OurFlow is operated by the developer of the OurFlow app. For anything in this policy, including a request to access or delete your data, write to privacy@ourflow.de.
| What | Why | Where it comes from |
|---|---|---|
| Your name and handle | So your crew can find you and see who did what | You, when you sign up |
| A user identifier and email address | To sign you in and keep your account yours | Apple or Google, when you sign in |
| Photos and video you add | They are the app | You |
| Titles, notes and dates | They are the app | You |
| A place name and coordinate | Only when you ask a memory where it happened | Your phone, with your permission |
| Your birthday | Optional. It is what lets a day know whose it is | You, if you give it |
We do not collect your contacts, your browsing, your advertising identifier, or your location in the background. There is no analytics SDK in the app and no third party that receives your content.
If you use Sign in with Apple and choose to hide your email address, Apple gives us a relay address instead of your real one. That is fine — we never need your real address, and we never try to work it out.
The app stores your data with Google Firebase (Firebase Authentication, Cloud Firestore and Cloud Storage), acting as our processor. Firebase's own privacy information is at firebase.google.com/support/privacy. Data may be processed on Google servers outside your country; transfers out of the EEA and the UK rely on the European Commission's Standard Contractual Clauses.
We do not use any other third-party service. Nobody buys, rents, or is given your content.
In the app: You → Settings → Delete my account. It removes your account, your handle, your profile, every crew where you were the only member, and every AirFlow drop that was yours.
Memories in crews that other people are also in belong to that group, and stay with them — the same way a photograph you gave a friend stays theirs. If you want those removed too, delete them, or leave the crew, before you delete your account. You can also ask us at privacy@ourflow.de, or use the web form.
If you are in the EEA or the UK, the GDPR gives you the right to access, correct, export, restrict, object to, and delete what we hold about you. Our legal basis is the performance of our contract with you (Art. 6(1)(b)) for running the app, and your consent (Art. 6(1)(a)) for camera, photo library and location access, which you can withdraw in iOS Settings at any time. Write to privacy@ourflow.de and you will get an answer within 30 days. You may also complain to your local supervisory authority.
OurFlow is not intended for children under 13, and we do not knowingly collect anything from them. If you believe a child has an account, write to us and it will be removed.
Everything travels over TLS. What a crew holds is readable only by accounts on that crew's roster, enforced on the server rather than in the app. On your phone, the journal is written with iOS file protection.
If this policy changes in a way that matters, the app will say so before the change takes effect. The date at the top always says when it was last touched.