Privacy Policy for ClutterFlow

Effective date: May 12, 2026

This Privacy Policy explains how personal data is processed when you use the ClutterFlow Android app, this website, or support channels.

ClutterFlow is designed as a local-first app. Inventory data, photos, decisions, backups and settings generally stay on your device or in storage locations chosen by you. External transfers mainly happen when you actively use optional AI, location, map, source-checking or sharing features.

1. Controller and contact

Details about the controller, address and statutory provider information are available in the Legal Notice.

Support Show email address

2. Summary

ClutterFlow currently has no user account system and no cloud sync.
We currently do not operate a central backend for your inventory.
The app currently contains no advertising SDKs, no Firebase Analytics and no Crashlytics.
AI features are optional and use your own Gemini API key.
When you use AI features, selected content is sent directly to Google Gemini.
In-app feedback is optional and is sent to ClutterFlow.
Voluntary support is optionally processed through Google Play Billing.
Location, camera, NFC and notifications are used only for the relevant app feature.

3. App data processed locally

Depending on the features you use, the app processes locally on your device in particular:

Inventory data such as item names, categories, quantities, decisions and notes.
Storage data such as rooms, household places, box labels, box status, QR and NFC references.
Photos and media such as item photos, box photos, before/after photos, collages, GIFs or videos.
Progress and gamification data such as completed items, daily progress, levels and streaks.
Settings such as language, dark mode, break duration, selling threshold, AI enabled/disabled and monthly rent per square meter.
Housing Cost data such as estimated item footprint, replacement value, monthly housing cost per square meter and freed-space value.
Location data such as manually entered address, city, country, coordinates and local places.
Your Gemini API key if you enable AI. It is stored locally in encrypted form.
In debug or test builds, local logs of AI prompts in AIprompts.txt if the app creates this file.

This data is not automatically transmitted to us.

4. Android app permissions

Internet: for optional Gemini requests, local search functions, source checking, feedback, Google Play features and external links.
Camera: for item, box, area and before/after photos.
Precise/approximate location: optional, to find local recycling, disposal and donation places.
NFC: optional, to read and write box or place markers.
Notifications and vibration: for break timers and reminders.
Files/documents via system dialogs: for exports, backups, imports and sharing selected by you.

5. Outgoing app traffic

5.1 Google Gemini / Google AI Studio

The recipient is Google, in particular the Gemini API at generativelanguage.googleapis.com. The app sends the Gemini API key you entered for authentication. Depending on the feature, the following content may be transmitted:

API key check: API key and a short test prompt.
Photo, room, area or box analysis: image, language, selling threshold and analysis prompt.
Address verification and local places: address, city, postal code, coordinates, country and search task.
Housing Cost/rent estimates: location/region, country, currency and search task for a monthly housing-cost value per square meter.
Resale value estimates: location/region, country, item label, optional additional details and threshold values.
Sales listing: item label, category, location/region, country and preferred platforms.
Storage suggestions: item label and up to 40 open box/place targets with label, category, storage place and item count.
AI inventory search: search term and existing inventory labels.
Disposal and acceptance checks: item label, place type, name, address, acceptance notes and source URL.

Several features may use Gemini with Google Search/Grounding. Google may therefore also process search queries derived from the respective prompt. Please do not submit sensitive, confidential or special-category content to AI features if you do not want this data to be processed by Google.

5.2 Source and link checks

For local places or official disposal guidance, the app may check source URLs returned by Gemini. Short HEAD or limited GET requests are sent to the respective website. The target website may process technical access data such as IP address, time, user agent and URL.

5.3 Maps, calendar, print, sharing and file apps

If you open map links, export calendar entries, print documents, share files or place backups in a selected storage location, data is passed to the app or service selected by you.

5.4 In-app feedback

If you send feedback in the app, it is transmitted by HTTPS to ClutterFlow support: feedback type, message, language, app version, version code, package name, device manufacturer and model, Android SDK version, and the device-created timestamp. The support server may also process a server timestamp and a hash of the IP address for abuse prevention. Feedback may be forwarded by email to the support address.

5.5 Google Play and voluntary support

When downloading, updating or using the Play Store, Google processes its own data as the operator of Google Play. If you use the optional "Buy me a coffee" support feature, the purchase is processed through Google Play Billing. ClutterFlow does not receive full payment details such as credit card or bank data.

5.6 Notes for Google Play Data Safety

ClutterFlow does not sell personal data and does not use app content for advertising. Depending on the features you actively use, the following categories may be relevant for Google Play Data Safety in particular: photos or videos for Gemini analysis, location data for local services and Housing Cost, app information and performance/diagnostic context for feedback, user content from feedback messages, purchases through Google Play Billing, and files that you export, share or place in backups yourself.

6. Website, hosting and support

When this website is accessed, the hosting provider may process server log data such as IP address, time, requested file, referrer, browser and operating system.
To our current knowledge, this website does not set analytics, advertising or tracking cookies.
If you contact us by email, we process your email address, message and voluntarily provided attachments to handle the request.
If you use in-app feedback, we process the feedback data described above to handle the request, analyze errors and prevent abuse.

7. Purposes and legal bases

Providing app functionality for local inventory, decisions, photos, boxes, backups, exports and restore features.
Optional AI, location, local-services and Housing Cost features when you enable the feature, enter the API key or grant a permission.
Technical operation and security, such as website logs, abuse prevention, troubleshooting, source checking and secure delivery.
Support, in-app feedback and communication to handle your requests.
Processing voluntary support through Google Play Billing.
Legal obligations where retention or disclosure is legally required.

8. Recipients and service providers

Google Gemini / Google AI Studio only when AI features are actively used.
Google Play and Google Play Billing for distribution, updates, store functions and optional purchases.
ClutterFlow feedback endpoint and support mailbox if you send in-app feedback.
Hosting provider for operating this website and server logs.
Android apps or services selected by you for sharing, printing, calendar, maps, files and backups.
Operators of official source websites for source or link checks.

We do not sell personal data and do not share app content with advertising networks.

9. International transfers

When Google Gemini, Google Play, map/search services, hosting or other third-party providers are used, processing outside the European Economic Area may occur. Where we select providers ourselves, we look for appropriate safeguards, such as adequacy decisions by the EU Commission or standard contractual clauses. For services you use with your own account or API key, the terms of the respective provider also apply.

10. Retention and deletion

Local app data remains on your device until you delete it in the app, via Android or by uninstalling the app.
Exports and backups remain in the folders selected by you until you delete them there.
The Gemini API key remains locally encrypted until you remove it, disable AI or delete app data.
In debug or test builds, AIprompts.txt remains locally or in your documents folder until you delete the file.
In-app feedback and support emails are stored only as long as necessary for handling, follow-up, error analysis, abuse prevention and legal record purposes.
IP addresses from in-app feedback are not stored in clear text, but at most as a hash.
Website logs are stored according to the hosting provider's rules and then deleted or anonymized.

ClutterFlow currently does not offer a ClutterFlow user account. Therefore, there is no server-side app account that we could delete.

Request data deletion

You can request deletion of server-side data controlled by ClutterFlow at any time by emailing support [at] clutterflow [dot] com. Please use "ClutterFlow data deletion" as the subject and briefly describe which request or feedback message the deletion relates to.

We delete identifiable in-app feedback, support messages and voluntarily submitted attachments, unless legal retention duties or legitimate record-keeping or abuse-prevention reasons require continued storage.
Local app data, photos, backups, exports and the Gemini API key are stored on your device or in storage locations chosen by you. You can remove this data in the app, through Android, by deleting the files or by uninstalling the app.
Data processed by Google Gemini, Google Play, Google Play Billing or other third-party providers selected by you must be deleted through the respective provider.

11. Security

The Gemini API key is stored locally using Android Keystore and AES-GCM encryption.
The app sandbox is protected by Android; automatic Android cloud backup for the app is disabled.
Network requests to Gemini, the feedback endpoint and websites use HTTPS where the target address supports HTTPS.
Feedback and support data is stored in a server area that is not publicly served; the IP address is stored at most as a hash.
Backups, exports, photos and shared files are outside our control once you export or share them.

12. Automated decisions

AI results in ClutterFlow are suggestions for decluttering, inventory, selling, disposal or local places. They do not have legal effect and do not make decisions with similarly significant effects.

13. Children and minors

ClutterFlow is not directed at children. AI features using the Gemini API require that you are allowed to use the relevant Google services; under Google's terms, the Gemini API is intended only for eligible users.

14. Your rights

If the GDPR applies to you, you have in particular the following rights:

Access, rectification and erasure.
Restriction of processing and data portability.
Objection to processing based on legitimate interests.
Withdrawal of consent with effect for the future.
Lodging a complaint with a data protection supervisory authority.

For Austria, this is in particular the Austrian Data Protection Authority. You may also contact the supervisory authority of your usual place of residence.

Many app data items are stored only locally on your device. In such cases, we do not have access to this data and cannot centrally change or delete it.

15. Third-party documentation

16. Changes to this Privacy Policy

We may update this Privacy Policy if features, data flows, service providers or legal requirements change. The current version will be published on this website.