Flow Privacy & Data

Guest workspace data

Whether or not you are signed in, your normal Flow workspace data — boards, sections, tasks, sub-tasks, notes, and tags — remains in this browser's storage unless you explicitly export it. Flow does not upload that browser workspace anywhere on its own.

Signing in to a Pyips account

Creating or signing in to a free Pyips account establishes your account identity only. Account authentication uses Django's password hashing, CSRF protection, and a Secure HttpOnly session cookie rather than storing an authentication token in localStorage. Signed-in sessions last up to 30 days and survive browser close or restart; closing the browser does not sign you out. There is no idle timeout. Signing in does not automatically send your browser workspace to a server.

Fonts and third parties

Pyips pages load their fonts from pyips.com itself. Opening a page does not send your IP address, browser details or the page you came from to a third-party font provider, and the pages make no other third-party request.

Space Flow sessions

A Pyips account can belong to one or more Spaces. If a Space has enabled Flow (the task/board app) and you have access to it, the Account window offers a way to open that Space's Flow data: as a read-only preview, or, with edit or manage access, as an editable session. In an editable session, most edits — Task and Sub-task titles, notes, creation, deletion, moving Tasks between Sections, and Queue, Board, Section and Tag changes — are saved to Pyips through your authenticated session; a few kinds of change are not saved there yet and are reverted with a notice rather than lost silently. While an edit has not yet been confirmed saved, Pyips keeps a copy of the text you typed (titles, notes and new items) in this browser's storage so it can offer to restore it if the page closes or the connection drops; that copy is removed once the edit is saved, if you discard it, and when you sign out. Opening or closing a Space's Flow data never reads from or writes to your local browser workspace — the two remain separate the whole time.

Use Sign out to end the current browser session. The Account window also has Sign out all devices, which revokes every active Pyips session for your account, including this browser. Your separate Guest Flow workspace stays on this device. Password changes and password resets also invalidate existing signed-in sessions. Pyips does not show a list of signed-in devices or sessions.

Backups

Manual workspace backups remain files you explicitly download. On supported browsers, automatic backups can write full-workspace JSON files into a location you approve through the browser's folder picker. Pyips does not silently choose or gain access to arbitrary folders on your device.

Disconnecting a backup folder forgets Flow's saved access and does not delete your files. Flow only deletes files it can prove it created and that still match its recorded size and SHA-256 fingerprint. Whole-folder deletion is offered only when Flow can prove the folder was created by Flow and an audit finds no unknown or changed content.

Ordinary network information

Because Flow is served over the web, the hosting/CDN stack may receive ordinary request metadata such as IP address, browser/user-agent information, requested URL, and timestamps. Signed-in API requests also carry the session information needed to authenticate the account and, where applicable, a Space's Flow session.

Your responsibility for recovery

Browser storage can be cleared by browser settings, profile removal, device loss, storage pressure, or other local events. Your local browser workspace is not currently backed up anywhere else automatically, so keep current workspace backups outside the browser working copy if that data matters. A Space's saved Flow edits reduce dependence on one browser for that specific data, but should not be treated as a substitute for your own backups of your local workspace.

How long we keep data

Ordinary account and Space activity history is kept for 1 year by default. Security and governance history — sign-in, membership, ownership, and similar accountability-sensitive events — is kept for 2 years by default. Expired or already-used email-verification and password-reset links are removed within 7 days. Idempotency/undo receipts for Space edits are kept for 30 days. A shared Space you delete, and boards, tasks and other Flow content you delete, stay recoverable for 30 days and are then permanently removed. Invitations are removed 7 days after they are accepted, revoked or expire. When a share link is revoked or expires, its secret link is destroyed 7 days later; the record that you shared something stays in your share history. The database backups Pyips's own deployments make are deleted after 30 days. None of these periods change based on whether an account is free or paid.

Deleting your account

There is not yet a delete-account button in the Account window. Until there is, ask at contact@pyips.com from the email address on your account and the deletion is started for you. Starting it requires your password. Your account is deactivated immediately and every device you were signed in on is signed out. You then have 28 days to sign in again and explicitly cancel the deletion before it becomes permanent — simply not visiting Pyips during that window does not cancel it, and signing back in does not automatically cancel it either; cancelling does not bring back the sessions that were signed out, so you sign in afresh. If you are the sole owner of a shared Space (including an archived one) or Collective, it has to be dealt with first, because Pyips does not pick a new owner for you. Pyips does not yet have an ownership-transfer control, so today the way to do that is to delete the shared Space. A shared Space you have already deleted also counts until its own 30-day recovery period is over: your account is then erased the night after that Space is permanently removed, so deleting your account never shortens the recovery time of a shared Space.

Once the 28 days pass (or immediately, if you make a valid legal request for erasure), your account and your personal Space are permanently removed together — your personal Space does not get a second 30-day recovery period, because the 28 days are its recovery period. Your email address, password, and profile information are erased, and the same email address can be used to open an unrelated new account afterward. Content you created inside a Space you shared with others belongs to that Space and is not deleted with your account — instead, your name is replaced with "Former member" on it. Security-relevant history that names you may be kept for its normal retention period in the same de-identified form. A minimal internal record of each permanent erasure (an opaque ID, what kind of thing it was, and when — never your email, name or content) is kept for 60 days in a file outside the database, so that restoring an older database backup re-applies the erasure before Pyips reopens. That record protects against a database restore on our server; it is not a second copy stored anywhere else.

Collaboration history

Pyips does not keep a separate record of who you have worked with. Who is or was a member of a Space or Collective is part of that Space's membership and activity history, which follows the retention periods above. Simply being added to the same Space as someone does not add them to any personal list, and does not give either of you access to the other's data. If Pyips later offers "people you've recently worked with" or friends/contacts (Buds), that will be described here first and will be built from things you choose to do, not from sharing a Space.

Contact

Questions about Flow privacy or data handling can be sent to contact@pyips.com.