Privacy Policy

Effective date: May 11, 2026

This Privacy Policy describes how Flow POS (“Flow POS,” “we,” “our,” or “us”) collects, uses, and handles information when you use the Flow POS mobile application, website at https://stripeflow.app, Flow POS API services, contact form, and related support services (collectively, the “Service”). For privacy questions or data requests, contact us at info@stripeflow.app.

1. Information We Collect

We collect information you provide, information we receive from Stripe when you connect your account, information generated by your use of Flow POS, and limited technical information needed to operate the Service.

Account, Login, and Stripe Connection Information

  • Merchant identity: Your Flow POS sign-in email, one-time code verification records, merchant name, business name, country, default currency, and connected Stripe account ID.
  • Stripe account status: Account onboarding, verification, capability, payout, balance, notification, and account-management information returned by Stripe and displayed in Flow POS.
  • OAuth and session data: Stripe OAuth state, connected-account references, session state, and related security metadata used to connect and protect your account.

Payment and Business Activity

  • Transactions: Amount, currency, status, payment method label, payment intent or charge identifiers, receipt URLs, refund/dispute metadata, and timestamps.
  • Hosted Stripe objects: Invoice, payment link, and subscription link information that Flow POS creates or displays for you, including hosted URLs, descriptions, status, and related Stripe identifiers.
  • Customer sharing details: Customer email, customer name, descriptions, receipt URLs, hosted payment URLs, and message metadata when you ask Flow POS to send or share invoices, links, subscription links, or receipts.

Terminal, Reader, Device, and Permission Information

  • Reader setup: Stripe Terminal locations, reader IDs, labels, device type, serial or registration details when available, connection status, saved reader preference, and reader label overrides.
  • Device capabilities: Device platform, app version, operating system, native shell capabilities, Tap to Pay support, NFC availability, USB availability, and diagnostic information.
  • Permissions: Flow POS may request location, Bluetooth or nearby-device, NFC, and USB access where required for Stripe Terminal, Tap to Pay, reader discovery, reader connection, or tap-to-share features.

Website, Contact, and Support Information

  • Contact form: Name, email address, message content, and mail delivery metadata when you contact Flow POS from the website or app.
  • Operational logs: IP address, browser or device type, timestamps, API request metadata, error reports, and diagnostics used to operate, secure, and troubleshoot the Service.

Information Stored on Your Device

Flow POS may store your merchant profile, app preferences, OAuth state, saved reader preference, and reader label preferences in app storage or the device shell. Signing out, clearing app data, uninstalling the app, or deleting the app clears local device data, but it does not delete Stripe records or automatically remove Flow POS server records.

2. Stripe Account Connection

Flow POS connects to Stripe through Stripe-supported authorization and account-management flows. We do not ask for or store your Stripe password. Depending on your setup, you may sign in with email and a one-time code, continue through Stripe OAuth, complete Stripe onboarding, or open Stripe-hosted account-management screens.

When you use Flow POS, we may read from or create Stripe records on your behalf, including charges, PaymentIntents, invoices, payment links, subscription links, Terminal locations, reader registrations, balances, payouts, disputes, account notices, and related objects needed for the features you use.

Flow POS does not currently provide an in-app account deletion, Stripe account closure, or Stripe disconnect button. You can sign out from Flow POS Settings to clear the local merchant session on that device. Stripe account deletion or closure is handled in Stripe Dashboard. For Flow POS account or privacy questions, contact us at info@stripeflow.app.

3. Payment Data Handling

Flow POS does not store raw credit or debit card numbers, CVC codes, or magnetic stripe data. Card collection and tokenization are handled by Stripe through Stripe Terminal, Tap to Pay, Stripe-hosted pages, and Stripe's native payment SDKs.

  • Tap to Pay and card reader payments are collected through Stripe Terminal and supported native device capabilities.
  • Manual card entry is collected through Stripe's secure native flow and tokenized by Stripe.
  • Payment links, invoices, and subscription links are paid on Stripe-hosted pages.
  • Flow POS receives tokenized references, Stripe object IDs, statuses, receipt URLs, and related business metadata, not the underlying card number or CVC.

For details about Stripe's payment-data practices, review Stripe's Privacy Policy.

4. How We Use Information

We use information to:

  • Provide, operate, secure, and improve Flow POS.
  • Verify merchant access with one-time codes and connected Stripe account references.
  • Create and display charges, invoices, payment links, subscription links, receipts, balances, payouts, disputes, and account status.
  • Set up and manage Stripe Terminal readers, Terminal locations, Tap to Pay, saved reader preferences, and app preferences.
  • Send customer links, invoices, receipts, service messages, and support replies when you request them.
  • Diagnose technical problems, prevent misuse, maintain security, and comply with legal obligations.

5. Analytics and Advertising

We use operational logs, app diagnostics, and Stripe-provided account and payment events to operate the Service and understand reliability issues. We do not sell personal information and we do not use your information for third-party targeted advertising. If we add a third-party analytics or crash-reporting provider that processes personal information, we will update this policy before using it for that purpose.

Flow POS does not send marketing or promotional emails today. Emails from Flow POS are limited to service, support, verification, invoice, payment link, subscription link, receipt, and other messages needed to provide features you request.

6. Information Sharing

We do not sell or rent your personal information. We share information only as needed for the Service and the purposes described in this policy:

  • Stripe: Payment processing, account connection, Stripe-hosted checkout, Terminal, Tap to Pay, balances, payouts, account management, and financial infrastructure.
  • Mail delivery service: Delivery of website contact messages, support messages, verification emails, customer-requested links, invoices, subscription links, and receipts.
  • Device and platform services: When you choose to share by email, SMS, clipboard, browser, NFC tap, or another device feature, your device, operating system, carrier, mail provider, or recipient app may process that share action.
  • Legal and safety: We may disclose information if required by law or to protect Flow POS, our users, Stripe, or the public.
  • Business transfers: If Flow POS is involved in a merger, acquisition, financing, or sale of assets, information may be transferred as part of that transaction.

7. Data Retention

We retain Flow POS-controlled information for as long as needed to provide the Service, support users, maintain security, resolve disputes, and meet legal, tax, accounting, and operational requirements. Stripe retains Stripe account, payment, payout, and compliance records according to Stripe's own policies and legal obligations.

Local app data remains on your device until you sign out, clear app data, uninstall the app, delete the app, or your device removes it. Signing out clears the local merchant session and saved reader preference on that device; it does not delete Stripe-owned records or automatically remove Flow POS server records.

Stripe account deletion or closure is handled in Stripe Dashboard. Flow POS may retain operational records as needed or required. For questions about Flow POS data practices, contact info@stripeflow.app.

8. Your Choices and Rights

Depending on your location, you may have rights to access, correct, delete, or receive a copy of certain personal information, and to object to or restrict certain processing. We handle requests as required by applicable law and may retain records as needed or required. To contact us, email info@stripeflow.app.

  • You can sign out in Flow POS Settings or delete the app to clear local app data on that device.
  • You can manage Stripe account deletion or closure, business, tax, branding, customer, product, payout, and billing settings directly in Stripe Dashboard.
  • You can control device permissions such as location, Bluetooth, nearby devices, NFC, and USB through your device settings.
  • Flow POS does not send marketing or promotional emails today.

9. Security

We use reasonable technical and organizational safeguards designed to protect information against unauthorized access, loss, misuse, and alteration. Payment card collection and PCI DSS payment-data handling are provided by Stripe. No internet or electronic storage system can be guaranteed to be 100% secure.

10. Children's Privacy

The Service is not directed to individuals under 18 years of age. We do not knowingly collect personal information from children. If you believe a child has provided personal information to Flow POS, contact us so we can take appropriate action.

11. Third-Party Services

Flow POS integrates with third-party services, including Stripe and device/platform services you choose to use for sharing links or receipts. Their privacy practices are governed by their own policies. Review Stripe's Privacy Policy for Stripe-controlled account and payment data.

12. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will revise the effective date at the top of this page. Continued use of the Service after a policy update means the updated policy applies to your use going forward.

13. Contact Us

If you have questions about this Privacy Policy, our data practices, disconnect questions, or Stripe account deletion and closure questions, contact:

Flow POS
Website: https://stripeflow.app
Email: info@stripeflow.app