The fine print
Privacy Policy
How Lydia Studio products handle your data.
Effective date: October 30, 2026
Lydia Studio (“we,” “us,” “our”) builds tools designed to respect your privacy. This policy explains what information we collect, how we use it, and the choices you have. It applies to the Lydia Studio website (lydiastud.io) and to our products: FlowMate, JustToday, Circles, Meantime, and FlowMate for Flow Club (formerly Flow Club Companion) (collectively, the “Services”).
Data practices vary by product. Read the per-product sections below for details specific to the app you use.
Our Commitments
These principles apply to every Lydia Studio product:
- We do not sell your personal information.
- We do not use your personal information for advertising or share it with advertisers.
- We collect only the data needed to operate the product you use.
- You can delete your account and your data at any time, yourself, at lydiastud.io/account/delete (each app’s settings link there too).
Information We Collect
Account information
When you create a Lydia Studio account, we collect your email address and, if you sign in with a third-party provider (Google, Apple), the basic profile information that provider returns (such as your name and avatar URL).
Content you create
When you use a product, we store the content you create within it. Examples:
- FlowMate: focus session history, intents, steps, notes, preferences, and aggregate stats.
- JustToday: routines, focus items, brain-dump entries, projects, daily snapshots, and check-ins.
- Circles: the people you add and the details you choose to record about them, plus the interactions, timeline entries, and reminders you log.
- Meantime: moments (short text and voice-note transcripts), daily check-ins, open-loop and tone tags, an optional “who is this about?” note, and preferences.
Information about other people
Some products let you record information about people in your life: Circles is built for it, and a Meantime moment can mention someone by name. This information is entered by you, visible only to you, and used only to show it back to you. We do not contact the people you add, look them up, combine their details with information from other sources, or share them with anyone. You are responsible for the information you choose to record about others. Please keep only what you would be comfortable with them knowing you keep, and remove it if they ask.
Subscription information
If you subscribe to a paid (Pro) tier, our payment processors (Stripe for web, RevenueCat for mobile in-app purchases) handle your payment details. We do not see or store your full card number. We receive and store identifiers such as a Stripe customer ID, a RevenueCat customer ID, your subscription status, plan, and renewal/cancellation events.
Technical information
Our hosting providers automatically log standard request metadata (such as IP address, user agent, and timestamps) for security, abuse prevention, and reliability.
Information you choose to send
If you contact us through our support form or by email, we receive the information you include in that message.
How We Use Information
We use the information we collect to:
- Provide, maintain, and improve the Services.
- Authenticate you and keep your account secure.
- Process subscriptions and manage Pro entitlements across our apps.
- Sync your content across your devices.
- Respond to support requests and feedback.
- Detect, prevent, and address fraud, abuse, and security incidents.
- Comply with legal obligations.
Service Providers
We use a small set of third-party service providers to operate the Services. These providers process information on our behalf, under their own privacy policies:
- Supabase: database and authentication infrastructure. Privacy
- Vercel: hosting for our websites and APIs. Privacy
- Stripe: web subscription payments. Privacy
- RevenueCat: mobile in-app purchase management. Privacy
- Apple and Google: sign-in providers and mobile app store billing. Apple privacy · Google privacy
- OpenAI: used by FlowMate's “Generate steps” feature to turn your focus intent into suggested steps. Your intent text is sent to OpenAI but is not stored on our servers. Privacy
- Tally: hosts our support and feedback forms. Privacy
- Kit: runs our email newsletter. If you subscribe, the email address you enter is sent to Kit and stored there; you can unsubscribe from any email we send. Privacy
- Expo: builds and delivers our mobile apps. Privacy
We may also disclose information when required by law, to protect our rights, or in connection with a business transfer (such as a merger or acquisition). If that happens, we will update this policy.
Cookies and Local Storage
On the web, we use a small number of cookies and browser storage entries to keep you signed in and remember your preferences (theme, audio settings, recent session drafts). On mobile, we use device storage and the secure keystore for the same purposes.
We do not use third-party advertising cookies. Clearing your browser storage or uninstalling the mobile app will remove this local data.
Data Retention
We keep your account information and content for as long as your account is active. If you delete your account, your account and the content in every app are deleted immediately, and any web (Stripe) subscription is cancelled. Copies in our routine database backups are overwritten as those backups expire. Payment records held by Stripe, Apple, or Google are kept as they require for legal and accounting purposes.
Some products limit visible history on the free tier (for example, FlowMate shows the most recent 30 days of session history to free users and all of it to Pro subscribers). Specific retention behavior is described in the per-product notes below.
Security
We use HTTPS for all web traffic, store mobile authentication tokens in the device's secure keystore, and rely on Supabase for encrypted data storage. No system is perfectly secure; we cannot guarantee absolute security but we work to protect your information using industry-standard practices.
Your Rights and Choices
Depending on where you live, you may have rights under laws like the GDPR (EU/UK), CCPA/CPRA (California), or other privacy laws. These can include the right to:
- Access the personal information we hold about you.
- Correct inaccurate information.
- Delete your information.
- Export a copy of your information.
- Object to or restrict certain processing.
- Lodge a complaint with your local data protection authority.
To exercise any of these rights, email [email protected] from the address associated with your account. We may need to verify your identity before responding.
International Users
The Services are operated from the United States, and our service providers may process data in the United States and other countries. If you use the Services from outside the United States, your information will be transferred to and processed in countries that may have different data protection laws than yours.
Children
The Services are not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, please contact us at [email protected] and we will take steps to delete it.
Per-Product Notes
FlowMate
An audio-guided focus timer (web at flowmate.club; mobile on iOS and Android).
- You can use FlowMate without an account; an account is only needed to sync history across devices or to subscribe to Pro.
- Free users see the most recent 30 days of session history; Pro users see all of it. Older sessions are kept either way, so upgrading brings them back.
- The “Generate steps” feature sends your focus intent text to OpenAI to produce step suggestions. We do not store this intent on our servers.
- FlowMate does not access your microphone or record audio.
JustToday
A neurodivergent-friendly daily routine and task tool (web at justtoday.app; mobile on iOS and Android).
- Your routines, focus items, brain-dump entries, projects, daily snapshots, and check-ins are stored in your account so they sync across devices.
- Items you delete are marked as deleted and removed from your view immediately. We retain a soft-deleted copy briefly to support offline sync, then permanently remove it.
- If you join a pod, its other members can see your name and profile picture, the titles of tasks you choose to commit to it, how those tasks went (finished, or also tried and skipped, depending on the setting you pick for each task), and your reactions. Nothing else in your account is shared with them.
- JustToday uses your microphone only while you are dictating (after you tap the microphone button). Speech is turned into text by your browser’s built-in speech recognition; depending on your browser, that may happen on the browser maker’s servers (for example, Google for Chrome). JustToday does not record audio or send it to our servers.
Circles
A private journal for keeping up with the people you care about (web at circles.lydiastud.io, installable to your phone’s home screen).
- Circles requires an account. The people you add, and the interactions, timeline entries, and reminders you log, are stored in your account so they sync across your devices.
- For each person you can record a name and, if you choose, pronouns, birthday, phone number, email address, location, company and role, relationship type, where you met, and notes. Every field except the name is optional.
- Everything in Circles is visible only to you. Circles has no sharing or social features. The people you add do not need an account, are never notified, and are never contacted by us.
- If you import contacts from a vCard (.vcf) or CSV file, the file is read in your browser and is not uploaded. Only the contacts you leave selected are saved, and only their name, phone number, email address, company, role, birthday, and notes.
- Reminders appear inside Circles. Circles does not send email or push notifications.
- Circles does not use AI features; nothing you enter is sent to an AI provider.
- Deleting a person permanently deletes them along with their interactions, timeline entries, and reminders. Deleting your account permanently deletes all of your Circles data.
Meantime
A personal memory of everyday life: capture what happened in a few words or a quick voice note, then look back over a week or a month. You can optionally turn a stretch into an editable summary for yourself or to share with someone.
- Signing in collects the same account information described above (email address, and basic profile information if you use Google or Apple sign-in), used to authenticate you and sync your data across devices.
- Your moments, daily check-ins, and preferences are stored on your device, and — if you sign in — in your account so they sync across devices.
- Voice capture is transcribed to text on your device; the audio is not recorded or sent to our servers. The microphone is used only while you are recording a voice note.
- Summaries are generated on your device only when you choose to make one, and are not stored. Nothing is shared until you review it and choose to.
- A moment you write may mention another person by name (an optional “who is this about?” tag, or the note text itself). That is personal content you enter and control; we do not look it up, enrich it, or share it, and it is included when you export or delete your data.
- You can export a full copy of your data, or delete all of it, from within the app at any time. Items you delete are marked as deleted and removed from your view immediately; we retain a soft-deleted copy briefly to support offline sync, then permanently remove it.
- Reminders are a single daily local notification you can turn on or off; it is scheduled on your device and never mentions what you wrote.
FlowMate for Flow Club (formerly Flow Club Companion)
A browser extension that enhances Flow Club sessions with audio cues and task management. The extension has two modes: without sign-in (local-only, default) and with optional FlowMate sign-in.
Without sign-in (default)
- Data collection: none. No data is transmitted off your device.
- Storage: audio settings, user-created task lists, and the latest 3 auto-captured Flow Club goal lists are stored locally in your browser using extension storage.
- Where it runs: only on Flow Club session pages at https://in.flow.club.
- What it reads: the session timer and break/focus phase from the page so audio cues stay in sync, and the goals you set on a Flow Club session (so they can be saved to the latest-3 list).
With optional FlowMate sign-in
Sign-in is optional and the extension is fully functional without it. If you sign in:
- Account information: your email address (read from your FlowMate account) is shown in the extension popup and used to authenticate API calls. The Supabase access and refresh tokens are stored locally in extension storage so you stay signed in.
- Sent to FlowMate (flowmate.club): session start/end timestamps, planned and actual duration, optional intent text you write, the tasks you worked on and which you checked off, optional notes, and any task lists you explicitly choose to save with “Save to FlowMate.”
- Received from FlowMate: on-demand only, saved checklists you ask the extension to import via the cloud-download button.
- Offline behavior: if FlowMate is unreachable, session log entries queue locally and flush automatically when connectivity returns.
- Sign out: you can sign out at any time from the popup's account menu, which clears the stored tokens.
What it never does
The extension does not use analytics or third-party tracking, does not read your browsing history or pages outside Flow Club, does not record keystrokes or mouse movement, and does not collect any information about other Flow Club attendees.
Changes to This Policy
We may update this Privacy Policy from time to time. When we do, we will update the effective date at the top of this page. If the changes are material, we will provide a more prominent notice (for example, by email or in-app message). Your continued use of the Services after the changes take effect means you accept the updated policy.
Contact
Questions, requests, or concerns about this policy? Reach us at [email protected] or through our support page.