Privacy Policy

Flamely is a privacy-first, local-first desktop time tracking app. This Privacy Policy explains how Flamely ("Flamely," "we," "us," or "our") collects, uses, stores, and shares information when you use the Flamely desktop app, website, account services, cloud sync features, and related services.

By using Flamely, you agree to the collection and use of information described in this Privacy Policy.

1. Local-First Design

Flamely is designed to work locally first. Your time tracking data is stored on your device in a local SQLite database by default.

This means core tracking can work even if:

• you are offline;
• our cloud services are unavailable;
• authentication is unavailable;
• network access fails.

Flamely is not local-only. If you create an account, enable cloud sync, restore from backup, or use paid subscription features, some information may be sent to our cloud providers so we can provide those services.

2. Information We Collect

We collect different information depending on how you use Flamely.

Account Information

If you create an account, we may collect:

• name or display name;
• email address;
• authentication identifier;
• account settings;
• subscription status;
• support communications.

Subscription and Billing Information

If you purchase a paid subscription, payments are processed by Paddle, which acts as our merchant of record. We may receive and store:

• subscription status;
• plan type;
• renewal date;
• cancellation status;
• payment processor customer ID;
• limited billing metadata needed for account access and support.

We do not store full credit card numbers.

Time Tracking Data

Flamely may store or process:

• projects;
• focus sessions;
• work, idle, and break time;
• session start and end times;
• daily and weekly totals;
• app names;
• window titles, if enabled;
• app usage segments;
• activity metrics such as clicks, scroll count, keyboard activity count, mouse movement distance, and intensity scores;
• notification preferences;
• focus templates;
• app auto-start rules;
• report and export settings.

Flamely does not intentionally collect:

• passwords;
• exact keystroke contents;
• screenshots;
• screen recordings;
• message contents;
• file contents.

Device and Technical Information

We may collect limited technical information needed to operate the service, such as:

• device identifier;
• app version;
• operating system;
• error logs;
• sync status;
• diagnostic information;
• IP address when contacting our cloud services or website.

Website Information

When you visit flamely.app, we may collect basic website analytics, cookies, or server logs if enabled. This may include:

• pages visited;
• approximate location from IP address;
• browser type;
• device type;
• referral source.

3. How We Use Information

We use information to:

• provide local time tracking;
• show dashboards, reports, and project summaries;
• support focus sessions and notifications;
• authenticate users;
• provide optional cloud sync and backup;
• restore account-linked data across devices;
• manage subscriptions and entitlements;
• respond to support requests;
• improve reliability, security, and product quality;
• prevent abuse or unauthorized access;
• comply with legal obligations.

4. Cloud Sync and Supabase

Flamely may use Supabase for authentication, optional sync, backup, and account-linked data.

If you enable account or sync features, some local data may be uploaded to cloud infrastructure. This may include:

• account profile;
• project data;
• time entries;
• app usage summaries or segments;
• focus templates;
• settings;
• sync events;
• subscription entitlement data.

The local app remains the primary source of truth for tracking. Cloud services are not required for basic time tracking.

5. Payment Processing

Payments are processed by Paddle, which acts as our merchant of record. Your payment information is handled according to Paddle's own terms and privacy policy.

We receive only the information needed to manage your subscription, provide paid features, and support billing questions.

6. How We Share Information

We do not sell your personal information.

We may share information with service providers that help us operate Flamely, including:

• authentication and database providers, such as Supabase;
• payment processors, such as Paddle;
• hosting providers;
• email and support providers;
• analytics or error monitoring providers, if enabled;
• legal or compliance advisors.

We may also disclose information if required by law, to protect rights and safety, to prevent fraud or abuse, or as part of a business transfer such as a merger, acquisition, or sale of assets.

7. Your Choices

You can control many types of data collection in Flamely settings, including:

• whether to track applications;
• whether to track window titles;
• whether to show app icons;
• notification preferences;
• data retention settings;
• background sync, if available;
• export options.

If you do not want data synced to the cloud, do not enable cloud sync or account-linked backup features.

8. Data Retention

Local tracking data remains on your device until you delete it, export it, reset the app, or use a retention cleanup feature.

Cloud data, if enabled, is retained as long as needed to provide the service, maintain your account, comply with legal obligations, resolve disputes, enforce agreements, and support backup and sync.

You may request deletion of cloud account data by contacting mir@flamely.app.

9. Data Security

We use reasonable technical and organizational measures to protect information. However, no system is completely secure.

Because Flamely stores data locally, you are also responsible for protecting your device, operating system account, backups, and exported files.

10. Data Exports and Deletion

Flamely may allow you to export local data from the desktop app.

You may request access to or deletion of cloud account data by contacting mir@flamely.app. We may need to verify your identity before processing requests.

Deletion of cloud data may not delete data stored locally on your devices. You may need to delete local data separately from the desktop app or your device.

11. International Users

Flamely is operated from Lahore, Punjab, Pakistan. If you use Flamely from outside Pakistan, your information may be transferred to and processed in Pakistan and in any other country where our service providers operate, including the United States and the European Union (for Supabase and Paddle infrastructure).

By using Flamely, you consent to this cross-border transfer of information. Data protection laws in these jurisdictions may differ from those in your home country.

12. Children's Privacy

Flamely is not intended for children under 13, or the minimum age required by law in your jurisdiction. We do not knowingly collect personal information from children.

13. Privacy Rights

Depending on where you live, you may have rights to access, correct, delete, restrict, or export certain personal information.

To make a privacy request, contact mir@flamely.app.

If privacy laws such as GDPR, UK GDPR, CCPA/CPRA, or other state privacy laws apply to you, you may have additional rights. We will respond to legally required requests according to applicable law.

14. Changes To This Privacy Policy

We may update this Privacy Policy from time to time. If changes are material, we will provide notice through the app, website, email, or another reasonable method.

15. Contact

Flamely is operated from Lahore, Punjab, Pakistan. For privacy questions, contact:

• Privacy and legal: mir@flamely.app
• Support and billing: support@flamely.app
• Bug reports: reports@flamely.app
• Website: flamely.app