Privacy Policy

Data Controller

The data controller is an individual entrepreneur based in France. For privacy reasons, the full name is not publicly disclosed. You can contact the app owner at: hi@ascendflow.app

Data We Collect

• Account Information: email address collected via Clerk to create, manage, and secure your account.
• Usage Data: habits, logs, and group-related interactions you create (habit name, status, dates).
• Invitation Data: email addresses of invited users submitted by premium users as part of the referral program, referral codes, invitation status, and expiration timestamps.

AscendFlow does not collect geolocation data, photos, videos, or sensitive personal data. We do not track users for advertising purposes.

How Your Data Is Used

• Provide and maintain user accounts
• Enable habit tracking and progress visualization
• Manage premium subscriptions and temporary access
• Process and validate referral invitations
• Enable group features between connected users
• Ensure secure authentication and prevent abuse
• Improve app performance and reliability
• Detect and fix technical issues and crashes

AscendFlow does not sell or rent personal data and does not use personal data for advertising or profiling.

Referral & Invitation Program

AscendFlow offers a referral program allowing premium users to invite friends by submitting their email address through the Service. Invitation emails are sent solely to deliver the referral code and onboarding information.

Invitation emails are processed for the sole purpose of enabling the referral program and are not used for marketing or retained beyond their validity period. Referral codes expire automatically after a short period and cannot be reused.

When a referral code is redeemed, a temporary link is created between user accounts to enable shared group features. This link is automatically removed if the invited user does not subscribe to a premium plan at the end of the trial period.

Legal Basis for Processing (GDPR)

AscendFlow processes personal data under the following legal bases:

• Contractual necessity (Article 6(1)(b)) to provide core app functionality, premium features, and referral benefits.
• Legitimate interest (Article 6(1)(f)) to ensure platform security, prevent fraud, and manage referrals.
• Consent where explicitly required by law.

Third-Party Services

• Clerk (authentication)
• Vercel (hosting - EU servers)
• Paddle (subscriptions)
• RevenueCat (subscription management)
• Apple App Store / StoreKit
• Google Play Billing
• Sentry (error monitoring)

These providers act as data processors under GDPR and process data only according to AscendFlow’s instructions.

Data Retention

Account data is retained for as long as the account remains active. Invitation emails and referral data are retained only for the duration necessary to operate the referral program and are deleted after expiration or redemption.

Your Rights (GDPR)

• Access your personal data
• Rectify inaccurate information
• Request deletion of your account and data
• Object to certain processing activities
• (Coming soon) Export your data

To exercise your rights, contact: hi@ascendflow.app

Data Security

Industry-standard security measures are implemented to protect personal data. While we take reasonable precautions, no system is completely secure.

Children's Privacy

AscendFlow is not intended for children under 13. We do not knowingly collect personal data from children.

Changes to This Policy

This Privacy Policy may be updated from time to time. Updates will be posted on this page with a revised date.