Your flows are yours.

01 — Identity

Who we are

In shortWe built FlowMaster for debaters, not for your data.

FlowMaster Debate ("FlowMaster", "we", "us") is a macOS app for taking debate flows, collaborating with teammates in real time, and getting AI help with responses, cross-examination, fact-checking, and round analysis.

This policy covers the FlowMaster macOS app and this website, flowmasterdebate.com. The website is a static page: it sets no cookies and runs no analytics or tracking scripts. If anything here is unclear, email us — see § 13.

02 — Collection

Information we collect

In shortAn email address, your flows, and the basics needed to sync them and run your plan.

Account

Your email address, a display name, an optional profile photo, and an internal user ID. Sign-in runs through our Cloudflare-hosted API. Passwords are transmitted over HTTPS and stored only as salted, one-way scrypt hashes — never as plain text.

Your content

Debate flows (titles, formats, the text in your grid, edit timestamps), documents you attach for AI features (case files, evidence blocks), AI chat messages, and the results of AI analyses you run. If you choose to record a round, the resulting transcript is also part of your account content.

Collaboration

Share codes you generate or accept, the list of accounts a flow is shared with, and presence information (your display name, whether you're active in a flow, and when you were last seen).

Plan & billing

Your subscription status and plan (free, Pro, or team), the Apple transaction identifiers we use to verify a purchase, any team membership or access-key redemption, and referral-invite status. We do not receive or store your credit-card or payment-method details — Apple handles that (see § 05).

Technical

Authentication tokens, IP address, device-session information, and standard Cloudflare request and security logs used to keep the service running and protect it from abuse.

What we never collect

• No advertising identifiers and no third-party analytics or tracking SDKs.
• No background audio. FlowMaster uses your microphone only when you deliberately start an optional Round Analysis recording. Raw recordings are not retained by FlowMaster after processing.
• No location data and no access to your contacts.
• No card numbers or payment-method details — subscription billing is handled entirely by Apple.

03 — Purpose

How we use your information

In shortTo run the app you signed up for — never for advertising.

• Provide the service — store your flows, sync them across sessions, and keep an offline copy working on your Mac.
• Real-time collaboration — show teammates your edits and presence on flows you've chosen to share.
• AI features you invoke — generate the suggestions, questions, fact-checks, and analyses you ask for (see § 04).
• Optional round transcription — transcribe a recording only when you choose to record and submit one for Round Analysis (see § 04).
• Plans & entitlements — verify your subscription, unlock Pro or team features, apply referral rewards, and enforce plan limits (see § 05).
• Security & support — authenticate requests, prevent abuse, and answer your emails.

We do not use your information for advertising, and we never sell it.

04 — Intelligence

AI features & what gets shared

In shortAI runs only when you invoke it, your content is used only to generate your result, and it never trains anyone's models.

FlowMaster's AI surfaces — response suggestions, cross-examination questions, fact-checking, round analysis, and the AI chat — run only when you invoke them. Nothing is analyzed in the background.

When you use an AI feature, the relevant content is sent over an encrypted connection to our servers and then to the provider needed for that feature. Perplexity processes search-grounded suggestions and fact-checks; OpenAI processes agent-style AI features and optional audio transcription. Inputs can include the part of your flow you're working from, documents you attach, your chat message, or — for Round Analysis — your case file and the context you provide.

Optional audio recording

Round Analysis can include a recording only if you press Start Recording and grant macOS microphone permission. The temporary recording is uploaded over HTTPS and sent to OpenAI's audio-transcription API. FlowMaster does not write the raw audio to D1 or R2, and the temporary file on your Mac is removed after it is read for upload. The transcript is combined with your flow and case material to generate the analysis.

• No training on your content. We do not use your flows, documents, messages, recordings, or transcripts to train AI models. Perplexity and OpenAI state that customer API content is not used for model training by default.
• Processing only. Content sent to an AI provider is used to generate the feature you requested and is handled under that provider's API data terms. OpenAI's audio-transcription endpoint states that it retains no application state or abuse-monitoring content for that endpoint.
• Chats and results sync. AI chat messages, analysis transcripts, and generated results can be stored in your cloud account so you can reopen them. They remain until you delete the item or your account.
• Check the output. AI can be wrong. Verify a suggestion the way you'd verify any card before reading it in a round.

05 — Billing

Payments & subscriptions

In shortPro is billed by Apple. We see that you paid — never how you paid.

FlowMaster is free to download and free to use solo. Pro ($4.99/month or $39.99/year) and team plans are optional. All consumer subscriptions are sold as In-App Purchases through the Mac App Store and are billed and managed by Apple.

• Apple handles payment. Your payment method, card number, and billing address stay with Apple. We never receive or store them.
• What we receive. To unlock and keep your plan in sync, Apple gives us a signed record of your transaction — a product ID, a transaction identifier, and renewal/expiration status. We store this to grant Pro and to reconcile renewals, refunds, and cancellations.
• Team plans. Coaches are invoiced directly (outside Apple) and receive one-time access keys to distribute; we record which account redeemed a key and the team's roster and seat count.
• Manage or cancel any subscription in App Store → your name → Subscriptions. Refunds are requested through Apple at reportaproblem.apple.com.

06 — Storage

Where your data lives

In shortCloudflare for accounts, flows, files, and sync; an offline copy on your own Mac; AI providers only when you invoke an AI feature.

• Cloud database & storage — account records, flows, plan status, AI chats, transcripts, and analysis results are stored in Cloudflare D1; profile photos and team files are stored in Cloudflare R2.
• Service infrastructure — the API runs on Cloudflare Workers, with Durable Objects and KV supporting real-time collaboration, sessions, caching, and abuse prevention. Cloudflare encrypts data in transit and at rest.
• Temporary AI uploads — documents and optional raw audio submitted for an AI request are held only long enough to process that request; FlowMaster does not persist those raw uploads in D1 or R2. Generated text, transcripts, and results may be saved to your account as described above.
• Your Mac — FlowMaster is offline-first. A local copy of your flows lives in the app's Application Support folder so tournament Wi-Fi can't cost you a flow, and it syncs when you're back online.

Cloudflare and our AI providers operate internationally. Depending on where you use FlowMaster and which feature you invoke, information may be processed in the United States or other countries where those providers operate.

07 — Disclosure

How information is shared

In shortWith teammates you invite and the providers that run the service. Never with advertisers or data brokers.

• Collaborators you choose — people you share a flow with (or whose share code you accept) can see that flow's content, plus your display name, profile photo, and presence. There are no public flows.
• Service providers — Cloudflare (hosting, authentication infrastructure, database, storage, sync, and security), Perplexity (search-grounded AI), OpenAI (agent AI and optional audio transcription), and Apple (App Store subscription billing) process data on our behalf to run the service, under their own security and confidentiality commitments.
• Coaches & teams — if you join a team, the coach who manages that team can see that your account occupies a seat on their roster.
• Legal — we may disclose information if required by law, or to protect FlowMaster's users and the service itself.
• Business transfer — if FlowMaster is ever acquired or transferred, your data goes with it under protections at least as strong as this policy.

We never sell personal information, never share it for advertising, and do not participate in cross-app tracking.

08 — Protection

Security

In shortEncrypted in transit, authenticated on every request, access-controlled on every flow.

• Traffic between the app, our servers, and our providers is encrypted in transit (HTTPS/TLS).
• Every request is authenticated. If you choose "keep me signed in", your sign-in token is stored in the macOS Keychain — Apple's encrypted credential store.
• Repeated failed sign-in attempts are rate-limited and temporarily locked to protect your account from guessing.
• Access control is enforced server-side on every operation. Sharing requires an explicit share code and an acceptance step.
• Cloud data is encrypted at rest by our storage providers.

No system is perfectly secure. If you believe you've found a vulnerability, email us (§ 13) — those messages get read first.

09 — Lifecycle

Retention & deletion

In shortWe keep your content while your account is active. Ask, and we delete it.

• Flows & account data — kept while your account is active. Deleting a flow removes it from our systems, and collaborators lose access.
• Attached documents — kept only as long as needed to produce the result you requested.
• Recordings, transcripts & analyses — raw audio is not retained by FlowMaster after the transcription request completes. The transcript and generated analysis are stored with your account until you delete that result or your account.
• Billing records — subscription and transaction records are kept as long as needed to run your plan and meet tax and accounting obligations.
• Local data — the offline copy on your Mac stays on your Mac until you delete the flow or remove the app's data.
• Account deletion — use Settings → Account → Delete Account to permanently remove your account and associated content. If you cannot access the app, email us from your account address; support requests are completed within 30 days. Residual copies in routine backups roll off on their normal schedule after deletion.

10 — Control

Your rights & choices

In shortAccess, correct, export, or delete your data — one email is all it takes.

Depending on where you live (for example, the EU/UK under GDPR or California under the CCPA/CPRA), you may have the right to access, correct, export, or delete your personal information. We honor these requests for everyone, wherever you live. We don't sell or "share" personal information as defined by the CCPA, and we will never treat you differently for exercising a privacy right.

To make a request, email us from your account's email address — we verify ownership before acting on any request. You also have direct controls in the app: edit your profile, delete flows, leave shared flows, permanently delete your account under Settings → Account, and manage your subscription through the App Store.

11 — Age

Children's privacy

In shortBuilt for competitive debaters. Not for children under 8.

FlowMaster is built for competitive debaters — typically middle school, high school, and college students. It is not directed at children under 8, and we do not knowingly collect personal information from them. If you believe a child under 8 has created an account, contact us and we will delete it. If you are under 18, please use FlowMaster with a parent's or guardian's permission.

12 — Updates

Changes to this policy

In shortIf the policy changes, the date at the top changes — and material changes get called out.

When we update this policy, we'll revise the effective date at the top of this page. If a change meaningfully affects how your information is handled, we'll call it out on this site and, where appropriate, in the app before it takes effect.

13 — Contact

Contact us

In shortA real person reads every email, usually within a day or two.

For privacy questions, data requests, or anything else in this policy, email support@flowmasterdebate.com with the subject "Privacy request". For everything else, see the Support page.