On this page
Privacy Policy
Last updated: July 2026
Pathflow ("we", "us", "our") operates the hosted web application at pathflow.me. This policy describes how we collect, use, and protect your personal information.
What we collect
Account information
- Email address and password (hashed) when you create an account
- Session cookies used to keep you signed in
Application data
- Tasks, projects, habits, goals, finance records, work logs, daily notes, and other content you create in the app
- Settings such as work roles and preferences
Usage data
- Basic server logs (IP address, request timestamps) for security and reliability
- AI feature usage counts for quota enforcement
We do not sell your personal data.
How we use your data
- To provide and operate the Pathflow service
- To authenticate your account and keep sessions secure
- To generate AI planner suggestions and reports when you request them
- To respond to support requests
- To improve reliability and prevent abuse
AI processing
When you use AI features, relevant context from your account (such as task titles, work log entries, and project summaries) is sent to our AI provider (OpenRouter) to generate responses. We do not use your data to train public models.
Cookies and sessions
Pathflow uses session cookies managed by Better Auth to maintain your login state. These are essential for the service to function.
On public marketing pages (home, blog, pricing, etc.), we may use Google Tag Manager with Google Analytics 4 to understand aggregate traffic. You can block these with browser extensions or opt-out tools provided by Google.
Data storage and retention
Your data is stored in a PostgreSQL database on infrastructure we operate. We retain your data for as long as your account is active. If you delete your account, we will remove your personal data within a reasonable period, subject to backup retention cycles.
Your rights
You may:
- Access and update your data through the app
- Request a copy of your data by contacting us
- Request account deletion by emailing support@pathflow.me
Security
We use HTTPS, password hashing, and per-user data scoping. No system is perfectly secure; use a strong, unique password.
Children
Pathflow is not directed at children under 13. We do not knowingly collect data from children.
Changes
We may update this policy from time to time. Material changes will be noted on this page.
Contact
Questions about privacy: support@pathflow.me