Privacy Policy

1. Introduction

1.1 This Privacy Policy ("Policy") describes how Flowcraft Tech Private Limited, a company incorporated under the laws of India ("Flowcraft", "we", "us" or "our"), handles information in connection with the Kata mobile application (the "App") and the website at kata.flow-craft.in (the "Website", and together with the App, the "Services").

1.2 By downloading, installing, accessing or using the Services, you acknowledge that you have read and understood this Policy. If you do not agree with this Policy, you must not use the Services.

1.3 This Policy forms part of, and should be read together with, the terms that govern your use of the App, including the Licensed Application End User License Agreement published by Apple Inc. (the "Terms"). Capitalised terms not defined in this Policy have the meanings given to them in the Terms.

2. Scope

2.1 This Policy applies only to information processed by Flowcraft in connection with the Services.

2.2 The Services operate on, and interact with, products and services provided by third parties, including Apple Inc. (the App Store, iCloud, CloudKit and the operating system of your device), our website hosting provider and our email service provider (together, "Third-Party Services"). Your use of Third-Party Services is governed by the terms and privacy policies of their respective providers. Flowcraft does not control, and is not responsible for, the practices of any Third-Party Service.

3. Content You Create

3.1 Tasks, notes, projects, areas, checklists and any other content you enter into the App ("User Content") are stored locally on your device.

3.2 If you are signed in to iCloud on your device, the App synchronises User Content with your private iCloud storage using Apple's CloudKit service. Such storage is provided by Apple under your Apple Account and is subject to Apple's terms and privacy policy.

3.3 In the ordinary operation of the Services, Flowcraft does not receive, access or store User Content. The App does not require you to create an account with Flowcraft.

3.4 You are solely responsible for your User Content, for the security of your device and your Apple Account, and for maintaining such backups of your User Content as you consider appropriate. The App provides a data export function for this purpose.

4. Information We May Collect

4.1 Information you provide to us. If you contact us (for example, by email) or subscribe to product updates through the Website, we may collect the information you provide, such as your name, email address and the contents of your message.

4.2 Purchase information. In-app purchases and subscriptions are processed by Apple. Flowcraft does not receive your payment card or other financial details. We may receive transaction, subscription-status and aggregated sales information from Apple in connection with such purchases.

4.3 Diagnostic information. If you have elected, in your device settings, to share analytics with app developers, Apple may make crash reports and related diagnostic information available to us, subject to Apple's policies. The App may also record technical logs on your device for troubleshooting purposes.

4.4 Website information. When you visit the Website, our hosting provider may automatically process technical information, such as your IP address, browser type and the date and time of your request, for the purposes of delivering and securing the Website.

4.5 Usage analytics. As at the date of this Policy, the App does not collect usage analytics. Should this change, we will update this Policy accordingly.

5. Device Permissions

5.1 Calendar. If you grant the App access to your device calendar, the App reads calendar events on your device solely to display them within the App. Calendar data is not transmitted to Flowcraft.

5.2 Notifications. Reminders and similar alerts are scheduled locally on your device.

5.3 You may withdraw any permission at any time through your device settings. Withdrawing a permission may limit the functionality of the App.

6. How We Use Information

We may use the information described in Section 4 to:

(a) provide, operate, maintain and improve the Services;

(b) respond to your enquiries and provide support;

(c) send you product updates, where you have consented to receive them;

(d) diagnose technical problems and maintain the security and integrity of the Services;

(e) comply with applicable laws, regulations, legal processes and lawful requests of governmental authorities; and

(f) establish, exercise or defend legal claims, enforce the Terms, and protect the rights, property and safety of Flowcraft, our users and others.

7. Basis of Processing

We process personal data on the basis of your consent, which you may withdraw at any time, or for such other legitimate uses as are permitted under applicable law, including the Digital Personal Data Protection Act, 2023 ("DPDP Act"). Withdrawal of consent does not affect the lawfulness of processing carried out before such withdrawal.

8. Disclosure of Information

8.1 We do not sell personal data.

8.2 We may disclose information:

(a) to service providers who process information on our behalf, such as website hosting and email service providers, subject to appropriate contractual obligations;

(b) where required by applicable law, regulation, legal process or a request from a governmental or regulatory authority;

(c) where we believe in good faith that disclosure is necessary to protect the rights, property or safety of Flowcraft, our users or others, or to detect, prevent or address fraud, security or technical issues;

(d) in connection with any merger, acquisition, restructuring, financing, or sale of all or part of our business or assets, in which case information may be transferred to the relevant counterparty or successor; and

(e) with your consent.

9. Security

9.1 We implement reasonable security practices and procedures appropriate to the nature of the information we process. The App's local database uses the data protection features of your device's operating system.

9.2 No method of transmission over the internet or of electronic storage is completely secure. While we endeavour to protect information, we cannot guarantee its absolute security.

9.3 To the maximum extent permitted by applicable law, Flowcraft shall not be liable for any loss, corruption, unavailability of, or unauthorised access to, User Content or other information stored on your device or in any Third-Party Service, including iCloud.

10. Retention and Deletion

10.1 We retain personal data only for as long as necessary for the purposes set out in this Policy, or as required or permitted by applicable law.

10.2 User Content remains under your control. The App's "Erase All Data" function deletes User Content from your device and, where iCloud synchronisation is enabled, from the App's storage in your iCloud account. This action is irreversible. Deleting the App from your device may not delete User Content stored in your iCloud account.

10.3 You may unsubscribe from product updates at any time using the link provided in any such communication.

11. Your Rights

11.1 Subject to applicable law, including the DPDP Act, you may have the right to request access to, correction, completion, updating or erasure of personal data that we hold about you, to withdraw consent, to nominate another individual to exercise your rights in the event of your death or incapacity, and to grievance redressal.

11.2 You may exercise these rights by contacting us as set out in Section 16. We may need to verify your identity before acting on a request, and we may decline or limit a request where permitted by applicable law.

11.3 As User Content is not held by Flowcraft, requests concerning User Content are best exercised through the export and erase functions available within the App.

12. International Transfers

Our service providers may process information in jurisdictions outside India. Where information is transferred outside India, such transfer will be undertaken in accordance with applicable law.

13. Children

The Services are not directed at children. Under the DPDP Act, a child is an individual below the age of eighteen years. We do not knowingly collect personal data from children. If you are below the age of eighteen, you should use the Services only with the involvement and consent of a parent or lawful guardian. If we become aware that we have collected personal data from a child without verifiable parental consent, we will take steps to delete such data.

14. Changes to this Policy

We may amend this Policy from time to time at our discretion. The amended Policy will be posted on the Website with a revised "Last updated" date and will take effect upon posting, unless otherwise stated. Your continued use of the Services after the amended Policy takes effect constitutes your acknowledgement of it.

15. Governing Law and Jurisdiction

This Policy shall be governed by and construed in accordance with the laws of India. Subject to any mandatory provisions of applicable law, the courts at Bengaluru, Karnataka, India shall have exclusive jurisdiction over any matter arising out of or in connection with this Policy.

16. Contact and Grievance Officer

For any questions, requests or grievances in connection with this Policy, please contact:

Grievance Officer
Flowcraft Tech Private Limited
Email: hello@flow-craft.in

If you are not satisfied with our response to a grievance, you may approach the Data Protection Board of India in accordance with the DPDP Act.