Privacy Policy

Last updated: July 14, 2026

The short version

KeptInFlow is a local-first desktop app. Your notes, snips, and settings live on your computer. We run no accounts, no analytics, and no ad tracking. The one time your content leaves your machine is when you ask an AI to do something with it, and where it goes then depends on which of the two paths below you are using.

If you bring your own API key

Your key is stored in the Windows credential store and is read only by the app's native code. It is never sent to us. Prompts and attachments go directly from your machine to the provider you chose (OpenAI, Anthropic, Google, xAI, or OpenRouter), under that provider's privacy policy. They do not pass through any server we operate.

If you use the included AI

This covers the free monthly actions you get without a key, and the AI-included subscription. Here your request does pass through a proxy service we operate: the prompt, any attached snip or file, and any audio you dictate are relayed through our proxy to the AI provider that serves the request (currently Google), using our API key rather than yours.

The proxy holds a monthly usage counter keyed to your email address or license key, so it can enforce your plan's limits. That counter expires about a month after it is set. We do not store or log the content of your requests or the AI's responses, and we do not use them to train anything. The AI provider handles the request under its own privacy policy.

Purchases

Payments, invoices, and license keys are handled by Lemon Squeezy, our merchant of record, under their privacy policy. We receive the information needed to validate your license (such as your email address and license key status) and nothing else.

Software updates

The app checks a public release feed to offer updates. This is an ordinary HTTPS request and is not used to identify you.

Once per launch the app also asks our server for the oldest version still supported, so a build with a serious problem can be retired. If you have activated a license, that request includes your version number and a one-way fingerprint of your license key. A fingerprint is a hash: it cannot be turned back into your key, and it tells us only that a license was used, and when. We use it to see which licenses are active and which builds are still out there. During a trial the app has no license, so the request carries nothing about you at all. Nothing you write, capture, record, or copy is ever part of it.

Contact

Questions? Email johnwhitworth@gmail.com.