Privacy Policy

Last updated: May 2026

The short version: We collect only what we need to run Flowtable. We never sell your data. You can delete your account and all your data at any time.

1. Who we are

Flowtable is a cash flow tracking tool for UK freelancers and sole traders ("we", "us", "our"). If you have any questions about this policy, contact us at hello@flowtable.co.uk.

2. What data we collect

Account information — your email address and password (stored securely via Supabase Auth)
Financial data you enter — transactions, invoices, budgets and categories you create within the app
Payment information — if you upgrade to Pro, your payment is processed by Stripe. We store your Stripe customer ID and subscription status, but never your card details
Usage data — basic analytics to help us improve the product

3. How we use your data

To operate your account and display your financial data
To process subscription payments via Stripe
To send you account-related emails (confirmation, password reset)
To improve the product based on usage patterns

We do not use your data for advertising. We do not sell your data to third parties. Ever.

4. Data storage and security

Your data is stored securely using Supabase, a GDPR-compliant cloud database provider. All data is encrypted in transit (HTTPS) and at rest. Row-level security ensures your data is only accessible by you.

5. Third-party services

Supabase — database and authentication (Privacy Policy)
Stripe — payment processing (Privacy Policy)
Netlify — website hosting (Privacy Policy)

6. Your rights (GDPR)

Right to access — request a copy of your data at any time
Right to erasure — delete your account and all associated data
Right to portability — export your transaction data as CSV at any time
Right to rectification — correct any inaccurate data we hold

To exercise any of these rights, email hello@flowtable.co.uk and we will respond within 30 days.

7. Cookies

Authentication cookies — essential cookies set by Supabase to keep you logged in. Strictly necessary and cannot be disabled.
No tracking cookies — we do not use Google Analytics, Facebook Pixel, or any advertising cookies.

8. Data retention

We retain your data for as long as your account is active. If you delete your account, all personal data and financial records are permanently deleted within 30 days.

9. Changes to this policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by email.

10. Contact

Questions? Email us at hello@flowtable.co.uk.