YOUR DATA

Privacy notice

Effective 8 November 2026 · Revision 2026-11-08

Framilton Flow is a private-beta voice-writing app for Android and Linux, with a browser writing workspace, operated under the Framilton Technologies name. Privacy, access, correction, withdrawal and deletion requests: adithya.claude@gmail.com. This notice covers the app, account portal and web workspace. The beta account and cloud features are intended for adults aged 18 or older.

What goes where

Data handling by feature
Feature	Data and purpose	Recipient / storage
Google sign-in	Basic Google profile, email, Firebase user ID and authentication/session information to create and manage your optional account.	Google / Firebase Authentication. SDK sessions use private Android app storage or browser session storage on this portal.
Speech recognition	Audio you explicitly record to turn speech into text, with configured dictionary hints where supported.	Your selected OpenAI or xAI API, Android's selected speech service, or a supported local model. Android system recognition may send audio online.
AI writing / Tamil translation	Recognized or selected text and instructions to rewrite or translate it, when enabled.	Your selected OpenAI or xAI writing API, using your own key. Provider charges and data policies apply.
Drafts and history	Writing, original dictation recovery and optional history to continue or recover your work.	On the device. Android drafts/history and keys are encrypted at rest; history is off by default and capped at the latest 50 dictations. Linux uses private local files; storage protections depend on your system.
Browser writing workspace	Text you type, draft settings and history you explicitly choose to save, for editing and recovery on this browser.	In browser memory by default. Optional saved drafts/history use this browser's local storage, separated by Firebase user ID. They are not encrypted by the app, are not synced to Firebase/Android/Linux, and can be read by someone with access to this browser profile. Local settings let you clear them. Copy/export sends the text to your clipboard or downloads.
Personalization sync	Selected language/formatting/style preferences, dictionary and snippets for use across devices, only when separately enabled.	The existing Framilton personalization service hosted on Supabase. It uses a separate account. Audio, API keys, drafts and history are excluded from this sync payload.
Android floating dictation	Focused editable-field metadata, focus/selection changes and clipboard insertion to return text to the intended field.	Processed locally by the accessibility service. Password/noneditable fields are blocked; surrounding text is not read for this feature. Insertion replaces Android clipboard contents.
Website and support	IP address, browser/network request information needed to serve and secure the site; email and request details if you contact support.	Firebase Hosting / Google infrastructure and the support mailbox. This portal loads Firebase Auth on the account page; policy pages require no third-party scripts.

Your choices before processing

Signing in does not start dictation, enable cloud AI, enable personalization sync, or grant a paid plan. Android asks separately before audio recognition that may use a server, AI text processing, and accessibility access. You can decline and use available local tools. Choosing a different cloud provider requires its own consent. Review or withdraw these Android permissions in Settings → Privacy & recognition. New cloud requests are blocked after withdrawal; already-submitted requests cannot be recalled.

On Android, on-device-only mode requires supported recognition hardware/service and downloaded language models; it does not fall back online and blocks cloud writing/translation. Linux local/cloud behavior depends on its selected model and provider settings. The Android consent controls do not change an already-installed Linux configuration.

AI can change meaning. Bubble confirmation can insert the processed result without a second preview; check the result and use original-dictation recovery when needed. Do not record others without their permission, or submit information you lack authority to share.

Retention and deletion

Firebase account information stays until that identity is deleted. The account page and Android profile offer Firebase identity deletion with confirmation and recent-login checks. This does not delete your Google account, local writing/keys/history, or the separate personalization sync account. Request deletion of associated Framilton Flow hosted data here, including the separate sync profile. Pausing sync or signing out stops future synchronization; it does not erase existing server data.

Android temporary audio is removed after processing/cancellation. Local drafts, recovery text, dictionary, snippets and settings remain until you clear them, remove app data or uninstall as applicable; optional history can be deleted in the app. Linux recovery/configuration files and backups you create need separate removal. Local consent choices are retained in private Android settings until withdrawal, reset or removal of app data. Support correspondence is kept while needed to resolve the request, verify deletion and meet applicable legal duties. Where retention is legally required, we explain the category and reason rather than promise immediate erasure.

Browser workspace text is temporary unless you choose to remember a draft or save history. Saved entries remain until you clear them in workspace Settings/history or remove this site's browser data; browser storage eviction can also remove them. Signing out hides your workspace but does not erase previously saved browser data. Clear it before deleting your Firebase identity; if the identity is already deleted, use your browser's site-data controls. The browser editor does not record audio or call an AI writing provider.

Providers may retain submitted audio/text and security logs under their own terms, account controls and legal obligations. Cancellation or local deletion does not guarantee deletion of an already-submitted provider request. We do not promise zero retention or India-only processing. For a provider-data deletion request, contact us and the provider for the API account you control.

Security and sharing

Network account and provider connections use HTTPS. Android stores API keys encrypted in private app storage with app backups/device transfer disabled; an unlocked device can still display your saved text. Tokens and provider keys are excluded from personalization sync. The web portal uses Firebase-managed session storage and does not copy credentials into custom logs or analytics. We do not sell personal data or run advertising/analytics SDKs in this portal. Infrastructure providers process data to operate their services, and data may be disclosed when required by applicable law.

Copy, Share and text insertion send text to the clipboard or the app you choose, which follows its own privacy rules. Providers and hosting services may process data outside India. Their current terms and account settings govern that processing; review them before enabling a feature.

Provider policies

Requests and changes

Contact adithya.claude@gmail.com to ask what Framilton-held data relates to you, request correction or deletion, withdraw permission, or raise a concern. We may verify account ownership; never send a password, API key or identity document unless an appropriate secure process has been agreed. We will identify any limits caused by shared accounts, required retention, or provider-controlled records. Material processing changes will be reflected in this notice and, where needed, renewed in-app consent.