Privacy Policy

Data Controller

The data controller is an individual entrepreneur based in France. For privacy reasons, the full name is not publicly disclosed. You can contact the app owner at: hi@ascendflow.app

Data We Collect

• Account Information: email address collected via Clerk to create, manage, and secure your account.
• Usage Data: habits, logs, and group-related interactions you create (habit name, status, dates).
• Invitation Data: email addresses of invited users submitted by premium users as part of the referral program, referral codes, invitation status, and expiration timestamps.
• AI Analysis Data: anonymized habit logs (without personal identifiers) used to generate personalized insights.

AscendFlow does not collect geolocation data, photos, videos, or sensitive personal data. We do not track users for advertising purposes.

How Your Data Is Used

• Provide and maintain user accounts
• Enable habit tracking and progress visualization
• Manage premium subscriptions and temporary access
• Process and validate referral invitations
• Enable group features between connected users
• Ensure secure authentication and prevent abuse
• Improve app performance and reliability
• Detect and fix technical issues and crashes

AscendFlow does not sell or rent personal data and does not use personal data for advertising or profiling.

Referral & Invitation Program

AscendFlow offers a referral program allowing premium users to invite friends by submitting their email address through the Service. Invitation emails are sent solely to deliver the referral code and onboarding information.

Invitation emails are processed for the sole purpose of enabling the referral program and are not used for marketing or retained beyond their validity period. Referral codes expire automatically after a short period and cannot be reused.

When a referral code is redeemed, a temporary link is created between user accounts to enable shared group features. This link is automatically removed if the invited user does not subscribe to a premium plan at the end of the trial period.

AI-Powered Insights & Privacy

AscendFlow uses Artificial Intelligence to provide personalized habit coaching and insights. We take a privacy-first approach to these features:

• Anonymization: No personal identifiers (name, email, Clerk ID) are ever sent to AI models. The AI only receives raw habit data to provide context for its advice.
• Zero Data Retention: We exclusively use Enterprise-grade models configured with "Zero Data Retention" policies. This means your data is processed in real-time and is never stored by the AI provider or used to train their models.
• Non-Binding Advice: AI-generated insights are for informational purposes only and do not constitute professional medical or psychological advice.

Legal Basis for Processing (GDPR)

AscendFlow processes personal data under the following legal bases:

• Contractual necessity (Article 6(1)(b)) to provide core app functionality, premium features, and referral benefits.
• Legitimate interest (Article 6(1)(f)) to ensure platform security, prevent fraud, and manage referrals.
• Consent where explicitly required by law.
Legitimate interest (Article 6(1)(f)) to provide AI-driven insights while ensuring data is anonymized and not retained.

Third-Party Services

• Clerk (authentication)
• Vercel (hosting - EU servers)
• Paddle (subscriptions)
• RevenueCat (subscription management)
• Apple App Store / StoreKit
• Google Play Billing
• Sentry (error monitoring)
• Vercel AI Gateway (AI processing infrastructure)
• OpenAI / Anthropic (AI models - via Zero Data Retention policy)

These providers act as data processors under GDPR and process data only according to AscendFlow’s instructions.

Data Retention

Account data is retained for as long as the account remains active. Invitation emails and referral data are retained only for the duration necessary to operate the referral program and are deleted after expiration or redemption.

Your Rights (GDPR)

• Access your personal data
• Rectify inaccurate information
• Request deletion of your account and data
• Object to certain processing activities
• (Coming soon) Export your data

To exercise your rights, contact: hi@ascendflow.app

Data Security

Industry-standard security measures are implemented to protect personal data. While we take reasonable precautions, no system is completely secure.

Children's Privacy

AscendFlow is not intended for children under 13. We do not knowingly collect personal data from children.

Changes to This Policy

This Privacy Policy may be updated from time to time. Updates will be posted on this page with a revised date.