floPrivacy policy
Flo is operated by Hunch & Craft LLC, California, United States. This policy covers the Flo app and this website. Contact support@flocaptions.com with privacy questions or requests.
Your video stays with you
Your selected video, draft, edits, preview, and exported video are stored or processed on your device. Flo’s captioning service does not upload the original video. Device backups may contain local Flo files, and copies saved to your photo library or shared elsewhere remain there until you remove them.
Cloud captions are your choice
When you allow cloud captions and request transcription, Flo extracts audio on your device and sends it through our Google Cloud service to ElevenLabs Scribe. Translation sends caption text, caption identifiers, language choices, and style information through Flo to Google Cloud’s Vertex AI model service. These submissions may contain personal information about you or people in your recording.
You can decline or withdraw cloud permission in Settings → Privacy & terms. This stops new AI uploads. It does not recall data already submitted or necessarily cancel a job the server has accepted. Existing local captions remain available for editing and export. Photo-library permissions and cloud permission are separate choices.
Guest identity and purchases
When a requested cloud or subscription feature needs an identity, Google Firebase Authentication creates a guest identifier. No Flo signup or email is required. A protected credential on your device maintains that identity. Existing email accounts use Firebase for authentication and recovery. These identifiers are pseudonymous, not anonymous.
If you subscribe, your app store processes the purchase, and RevenueCat helps Flo validate access, restore purchases, and track renewals. We receive subscription and transaction information and associate it with a service identifier. Flo does not receive your payment-card number. Purchase providers may also process device and connection information. Deleting Flo or its cloud identity does not cancel your store subscription.
What is retained
For background caption jobs, Flo temporarily stores submitted audio or text and results in private Google Cloud storage. Result access expires after one hour. Inputs are removed when processing finishes; a storage lifecycle rule schedules residual content for deletion after one day. Lifecycle deletion can take additional time. Some pilot requests use a synchronous path with a small in-memory transcription cache that expires after five minutes.
Separate service records include account or hashed identifiers, request IDs, payload hashes, timestamps, subscription status, and usage totals. They support recovery, duplicate protection, session allowances, security, accounting, and dispute handling. These records do not follow the one-day content deletion schedule. We retain them as needed for those purposes and applicable obligations; you may request access or deletion through our contact above. Application and infrastructure logs may contain request and connection metadata. Flo does not intentionally log audio or caption bodies.
Provider retention is separate from Flo’s temporary storage. The pilot does not promise zero retention at ElevenLabs. Provider processing, improvement controls, security monitoring, and deletion depend on our service configuration and applicable provider agreements. Google’s model service also has its own caching and abuse-monitoring provisions. Withdrawing permission is prospective, not a promise of immediate deletion across providers.
Firebase retains authentication information while an identity exists. Its published guidance describes deletion from live and backup systems within 180 days after a customer initiates identity deletion. Purchase, fraud-prevention, and legally required records may need to be retained after an account is deleted.
Feedback and support
When you send feedback, Flo submits your message, category, app and operating-system versions, interface language, and current screen to our private Google Cloud support inbox. Videos, captions, screenshots, and logs are not automatically attached. An account-linked service identifier supports duplicate protection and abuse prevention. Avoid sending passwords or private recordings.
Feedback and triage records are scheduled for deletion after 365 days, with separate submission-limit markers scheduled after 31 days. Cloud deletion is asynchronous. Local data or account deletion does not automatically erase previously submitted feedback. Include a report reference when requesting its removal.
Ads and this website
The free plan is designed to show ads during caption generation; Premium is ad-free. Current testing uses test ads where enabled, and some pilot builds disable ads entirely. Live advertising is not enabled in the current pilot. Where configured, Google Mobile Ads and its consent service may process device, connection, interaction, and consent information. Applicable ad privacy choices appear in the app. We will update these disclosures before enabling live advertising.
This website does not add advertising, analytics scripts, or a sign-in form. Its hosting providers process ordinary connection information, such as IP addresses and request details, to deliver and secure the pages. External links lead to sites governed by their own policies.
Your choices and requests
You can erase Flo’s local project and temporary exports from Privacy settings, withdraw cloud permission, or delete your cloud identity. These are separate actions. Removing local files does not remove originals in your library, previously shared copies, or provider records.
Depending on applicable law, you may have rights to access, correct, delete, receive a copy of, or restrict or object to processing of your information, and to complain to a relevant authority. Send a request through support@flocaptions.com. We may verify control of the relevant account, device identity, or purchase before acting. We will respond as required by applicable law. Do not send passwords, refresh tokens, or payment-card details. You will not be penalized for exercising applicable privacy rights.
Providers and location
Flo uses Google Cloud, ElevenLabs, Firebase, RevenueCat, and the applicable app store to provide the functions described above. Google’s advertising services are used only where configured. Data may be processed in the United States and other locations where these providers operate, subject to applicable agreements and safeguards. We do not promise that a selected caption language determines where data is processed.
- ElevenLabs privacy information
- Google model data handling
- Firebase privacy and retention
- RevenueCat privacy information
- Google privacy information
Children and changes
Flo is a creator tool and is not designed for children under 13. We do not knowingly collect their personal information. Contact us if you believe a child has submitted information so we can investigate and take appropriate action.
We will update this page when our practices change and revise its effective date. Material changes will be brought to your attention in the app or by another appropriate method. Changes to AI-sharing disclosures require renewed permission before affected processing.