Hackflow is a flashcards app for creating decks and studying them. This Privacy Policy explains what information we handle when you use Hackflow and how we treat it.
Information we collect
- Account information — your email address and, optionally, a display name. Your password is never stored in plain text; we keep only a securely hashed (one-way) version of it.
- Google sign-in (optional) — if you choose to sign in with Google, we receive your email address and basic profile information (such as your name) from Google to create or link your account.
- Content you create — the decks, cards, and tags you add to Hackflow.
- Preferences — your interface language.
- Technical data — a session cookie that keeps you signed in and a cookie that remembers your language. We do not run third-party analytics or advertising trackers.
How we use your information
We use your information only to provide Hackflow: to create your account and sign you in, to store and display the decks and cards you create, to send password-reset emails when you request them, and to remember your language preference.
Cookies
We use two cookies: one to keep your session signed in, and one to remember your chosen language. We do not use cookies for advertising or cross-site tracking.
Public decks
If you set a deck to public, anyone with its link can open and study it, including people who are not signed in. Do not put private or sensitive information in a public deck.
Connected apps and API access
You can connect third-party assistants (such as ChatGPT or Claude) or your own integrations to Hackflow using OAuth or a personal API key. When you authorize a connection, that application can read and modify your decks, cards, and tags on your behalf, limited to your account. You can revoke a personal API key at any time on your profile page. Anything you send to a third-party assistant is also handled under that assistant's own privacy policy.
Where your data is stored
Hackflow is hosted on Vercel, our database is hosted on Neon, and password-reset emails are sent through an email (SMTP) provider. Your data may be processed in the regions where these providers operate.
Sharing
We do not sell your personal information. We share data only with the service providers above, and only as needed to operate Hackflow.
Security
Passwords are stored as bcrypt hashes and traffic is served over HTTPS. No method of storage or transmission is completely secure, but we take reasonable measures to protect your information.
Your rights
You can view and update your display name and email at any time on your profile page. To request deletion of your account and data, contact us at contact@hackflow.co.
Data retention
We keep your information for as long as your account exists. When your account is deleted, your decks and cards are removed.
Children
Hackflow is not directed at children under 13, and we do not knowingly collect information from them.
Changes to this policy
We may update this Privacy Policy from time to time. The "last updated" date on this page reflects the most recent change.
Contact
Questions about this policy? Email us at contact@hackflow.co.