Privacy Policy

011. Data Collection & Types

We collect your email via Google/GitHub OAuth for identification. For system operation, we store: task texts, strategic plans, progression data (XP, levels), and activity logs (action timestamps).

022. AI Processing (OpenRouter)

FluxOS uses OpenRouter to access third-party LLMs. Your prompts are transmitted for processing, but we do NOT use your private content for model training without consent. We log token usage for technical monitoring of infrastructure.

033. Analytics & Cookies

• PostHog: Product analytics, data strictly hosted on EU servers (GDPR compliant).
• Vercel Analytics: Technical performance monitoring.
• Cookies: Only necessary cookies for maintaining the Supabase session.

044. Security & RLS

We use the Row Level Security (RLS) architecture in Supabase. Your data is logically isolated at the database level and is only accessible to your authenticated account.

055. Data Erasure (Right to be Forgotten)

We fully support the right to erasure. Upon account deletion, we perform a "hard delete" — all your tasks, plans, logs, and email records are permanently removed from our production databases without the possibility of recovery.