Privacy Policy — Flots

Last updated: July 28, 2026

See French version

Data controller : Micro-entreprise Sinyx Studio, represented by Killian Vincent (reachable via the contact tab on our site). Full identification details in the Legal Notice.

1. Types of data collected, linked to the user or used to track you

Data potentially collected (linked or not to you)

  • Device identifiers (device ID), usage and diagnostics (crash logs, performance) — to ensure proper functioning, statistical analysis and service maintenance.
  • Account information (name, e-mail) — if the user registers an account; used for authentication, profile management and multi-device synchronization.
  • User content (notes, projects, attachments) — managed for the app's functionality (stored locally or in a synchronized space depending on your infrastructure).
  • Website session identifier (see section 3 "Tracking") — subject to your consent.

Sensitive or optional data

  • Access to camera or microphone — only if the user uses a feature that requires it (e.g. adding a photo to a note). These accesses are clearly requested and optional.
  • Location — No location collection (precise or approximate) is planned for Flots.

2. Purposes of collection and use

  • Identifiers, usage, diagnostics — improvement of stability, bug detection, anonymous analytics to understand general usage.
  • Account information (name, email) — authentication, account recovery, synchronization between devices.
  • User content — create, modify, synchronize your notes, projects, reminders.

3. Tracking on the marketing website

Our marketing website (flots.app) uses an audience-measurement tool that we operate ourselves, without going through a third-party service. On your first visit, a session identifier is created and stored in your browser. It allows us to:

  • Measure site traffic and better understand general page usage.
  • Ensure continuity between your visit to the website and your first use of the Flots application.

This tool is only activated after your consent, collected via the banner shown on your first visit. You can change your choice at any time via the "Manage cookies" link in the footer. In the absence of consent, no identifier is created on our servers.

We do not share this identifier with any third party for commercial or advertising purposes.

4. Legal basis for processing

  • Contract performance — account information and user content, necessary to provide the service (GDPR art. 6.1.b).
  • Consent — website session identifier and audience measurement (GDPR art. 6.1.a); withdrawable at any time via "Manage cookies".
  • Legitimate interest — diagnostic logs, security and fraud prevention, strictly necessary for the proper functioning of the service (GDPR art. 6.1.f).

5. Subprocessors

Flots deliberately limits its reliance on third-party providers. Only two subprocessors are involved in the processing of your data, for essential technical needs:

  • Hetzner Online GmbH (Germany) — hosting of our servers and of all the application's data.
  • Paddle.com Market Ltd ("Paddle") — payment and billing processing for subscriptions purchased on our website.

Outside of these two providers, all infrastructure and processing (application, synchronization, support) is operated in-house by the Flots team. No other data is shared with a third party.

6. Data retention

  • Account and user content — retained as long as your account is active, then deleted within 30 days after account deletion.
  • Session identifier / cookie consent — retained for a maximum of 13 months, in accordance with CNIL recommendations.
  • Technical and diagnostic logs — retained for as long as necessary to resolve incidents, then deleted or anonymized.

7. Security and storage

  • Encryption in transit (SSL/TLS) — all communications with servers are secure.
  • Secure storage — your data is stored on secure servers, with encryption measures at rest and access control.
  • Deletion requests — possibility for the user to request the deletion of their data (account, content) at any time, in accordance with transparency obligations.

8. User rights and transparency

  • Full access to the privacy policy — via a visible link in the application or on the site.
  • Data management possibility — the user can consult, export or request the deletion of their personal data, in accordance with the GDPR (right of access, rectification, erasure and portability).
  • Right to lodge a complaint — if you believe your rights are not being respected, French residents may lodge a complaint with the CNIL.

9. Links and transparency

  • Link to the privacy policy — available at any time from the application and on the official website: https://flots.app/privacy/en
  • Review of the privacy policy — any change to the application affecting this privacy policy will result in an update to this policy, and will be notified to users.