On-device file processing

Privacy Policy for FlowKit & FlowKit Tracker

Last updated: November 1, 2026

FlowKit Team provides FlowKit: PDF, Image & Utility Tools and FlowKit Tracker: Warranty, Receipt, Invoice & Subscription Tracker. This policy explains local file processing, device permissions, third-party services and your choices. Features and services described below apply to the app in which they are available.

1. Your files and local processing

FlowKit processes documents, images and text on your device. FlowKit Tracker stores the warranty, receipt, invoice and subscription records you enter locally. We do not operate a server that receives your files for processing or storage. This does not mean that every app feature or third-party component operates without an internet connection.

When you choose to share, export, print or open a file in another app, the selected content is passed to your chosen destination. That app or service may upload or otherwise process it under its own privacy policy. Copies you export are outside FlowKit's control.

2. Local records, retention and deletion

The apps may keep imported files, generated outputs, recent-operation records, preferences and temporary processing files on the device. Temporary files may remain until the relevant cleanup action, app cleanup or operating-system cache management removes them. We do not promise immediate deletion after every operation or forensic secure erasure.

You can use the available delete and cleanup controls to remove local records or copies. Deleting a history entry does not necessarily delete its source or exported file. Clearing app storage or uninstalling removes app-private data; files exported to Downloads, shared folders, backups or other apps must be deleted separately. Keep copies of important documents before clearing app storage. Removing the app does not cancel a Google Play subscription.

3. Travel Vault and authentication

FlowKit's Travel Vault encrypts vault records and attachments locally using AES-GCM with keys protected by Android Keystore. Hardware-backed key protection depends on the device; it is not guaranteed on every phone. PIN verification uses a locally stored salted PBKDF2 hash. Biometric authentication is handled by Android; the app receives an authentication result, not your fingerprint or face template.

The vault uses Android screen-capture protection to restrict screenshots and recording on supported devices. This does not prevent someone from photographing the display. These vault-specific safeguards should not be understood as a claim that every exported file or every Tracker record uses the same vault encryption.

4. Permissions and device access

FlowKit's current Android release does not request live device-location, contacts, SMS/call-log, local-network discovery or accessibility-service access. Removing GPS metadata from a photo is different from requesting your current location. Permissions can be managed in Android settings; disabling an optional permission may make the related feature unavailable.

5. Google services and technical data

FlowKit uses Google ML Kit for supported recognition, scanning and image features, and Google Play services for certain components. Processing document/image content on the device is separate from SDK technical-data processing. Google documents that ML Kit SDKs collect technical information such as device and app information, installation identifiers, performance metrics, API configuration and error/event information for diagnostics and usage analytics. The exact data depends on the SDK, version and feature. This is why we do not make a blanket claim that no data is collected by any component.

The document scanner's models, scanning logic and interface may be downloaded by Google Play services. Initial setup or component updates may require internet access. We do not integrate advertising SDKs or a separate marketing analytics service in FlowKit.

See ML Kit data disclosures and Google's Privacy Policy for Google's processing. We do not control Google's retention of its service data.

6. Purchases and subscriptions

Google Play Billing handles optional monthly, yearly and lifetime Pro purchases. We do not receive your payment-card number or bank credentials. The app receives and processes purchase status and related purchase identifiers or tokens to determine and restore Pro access. Google handles payment and account records under its own policies.

Eligible users may receive a 7-day free trial on an eligible monthly or yearly plan. Availability, eligibility, price and renewal terms are shown in the app and Google Play checkout. Unless cancelled before the trial ends, the selected subscription becomes paid and renews automatically until cancelled. Lifetime purchases are one-time purchases, not recurring subscriptions. Manage or cancel Google Play subscriptions.

7. Support, children and external services

If you email flowkit.team@gmail.com, your email address, message and any attachments you choose to send are processed to respond to your request through our email provider. Do not send passwords, PINs or sensitive documents unnecessarily. You may contact us to request deletion of support correspondence, subject to applicable record-retention obligations. We do not have access to your app-private files to delete them remotely.

The apps are utility tools. We do not ask for children's personal information to use local file features. If a child sends personal information through a support message, a parent or guardian can contact us about removal. This statement is not a certification under any children's privacy or advertising program.

External links open third-party services under their own policies. On our website, playing an embedded YouTube video connects to YouTube, which may process data under Google's privacy policy. This mobile-app policy does not imply that visiting a hosted website produces no server or service logs.

8. Updates and contact

We will update this page and its revision date when these practices change. For privacy questions or requests, contact FlowKit Team at flowkit.team@gmail.com. Website: flowkit.com.tr.