Legal
Privacy Policy
Last updated: June 25, 2026
Information we collect
We collect the minimum information needed to operate Prompt InFlow. This includes basic account data when you sign in (name, email, profile picture), content you save (favorites), and standard technical information such as IP address, browser type and device data captured in server logs.
Google Sign-In
When you authenticate using Google, we receive your email address, name and profile picture from Google. We use this information solely to create and manage your Prompt InFlow account. We never post to your Google account or access any other Google service on your behalf.
Favorites and account data
Prompts you save as favorites are stored in our database and linked to your account identifier. This data is only visible to you and is protected by row-level security policies. You can delete your favorites at any time from the Favorites page.
Cookies
Essential cookies keep you signed in and remember your theme preference. Our analytics tools — Google Analytics and Microsoft Clarity — also set their own cookies for all visitors so we can measure aggregate usage. We do not use advertising cookies and we do not sell or share your personal data with advertisers.
Generation limits and rate limiting
The prompt generator is free and requires no account, so we enforce fair-use limits (5 generations per minute and 20 per hour) by identifying anonymous visitors through a salted SHA-256 hash of their IP address and browser user-agent. The raw IP address is never stored. This record is used only to enforce the generation limit and is automatically deleted after 24 hours.
Voice input
The generator's microphone button lets you dictate your goal instead of typing it. When you use it, a short audio recording (up to 60 seconds) is sent to Google Gemini solely to be transcribed into text. The audio itself is not stored or retained by us — the transcription is used only to fill the goal text field, exactly as if you had typed it.
Analytics
We use Google Analytics 4 and Microsoft Clarity to understand how visitors use Prompt InFlow in aggregate. These tools collect anonymized usage data such as page views, navigation paths and device information. We do not share personal data with advertisers.
Data security
All data is transmitted over HTTPS. Account and favorites data is stored in a managed Postgres database with strict row-level security policies. We follow industry best practices to protect the information we handle.
Third-party services
Prompt InFlow uses Google (authentication, Gemini API for generation, Analytics), Microsoft Clarity (analytics) and Supabase (database and auth infrastructure). Each provider has its own privacy policy governing data they receive.
Contact
Questions about this Privacy Policy? Email us at contact@promptinflow.com and we will respond as soon as possible.