Privacy Policy

1. Who we are

InayaFlow is a product operated by Inaya Flow Limited, a company registered in England and Wales ("we", "us", "our"). This policy covers our website and app at inayaflow.ai and subdomains.

2. What we collect

When you use InayaFlow, we collect:

• Account data: email address, password (hashed, never stored in plain text)
• Onboarding data: your content niche, preferred tone, posting goal, posting frequency, country
• TikTok handle: optional, used to personalise your brief
• Location data: your IP address is used at onboarding to detect your country. We do not store precise location.
• Waitlist data: if you join a waitlist, we collect your email and country
• Contact form data: name (optional), email, category, message
• Payment data: handled by Stripe, we never see your full card number
• Usage data: which features you use, frequency of use — used to improve the product

3. Why we collect it

• To create and manage your account
• To personalise your daily brief based on your niche, tone, and goals
• To determine eligibility (we currently serve US-based creators only)
• To process payments and manage subscriptions
• To respond to your support requests
• To improve the product based on aggregate usage

4. Who we share it with

We share limited data with third-party service providers who help us run InayaFlow:

• Supabase — stores your account data, onboarding info, and contact messages
• Vercel — hosts our website and app
• ipapi.co — used at onboarding for country detection (receives your IP address, no other info)
• Anthropic (Claude API) — generates your daily ideas. Receives your niche, tone, and goal. Does NOT receive your email, name, or account info.
• Apify / Clockworks — scrapes public TikTok trend data. Does NOT receive any of your personal data.
• Stripe — processes payments. Receives billing info. We only see payment status.

We do not sell your personal data to anyone, ever.

5. How long we keep it

• Active accounts: we keep your data for as long as your account is active
• Deleted accounts: within 30 days of deletion request, we delete your personal data from our active systems. Backups are purged within 90 days.
• Waitlist entries: kept until we launch in your country, then email is deleted if you don't sign up
• Contact messages: kept for 1 year for support continuity, then deleted
• Payment records: kept for 7 years as required by tax and accounting law

6. Your rights

Depending on your location, you have the right to:

• Access the personal data we hold about you
• Correct inaccurate data
• Request deletion of your data
• Object to or restrict our processing
• Request a copy of your data in a portable format
• Withdraw consent at any time

To exercise any of these rights, contact us. We respond within 30 days.

7. Cookies

We use essential cookies to keep you logged in and to make the site work. We do not use advertising or tracking cookies. You can disable cookies in your browser, but some features (like staying logged in) will stop working.

8. Security

We use industry-standard security measures including encrypted connections (HTTPS), secure password hashing, and restricted access to our databases. No system is 100% secure, but we take your data seriously.

9. Children

InayaFlow is not intended for users under 18. We do not knowingly collect data from minors. If you believe we have collected data from someone under 18, contact us and we will delete it.

10. Changes to this policy

We may update this policy as we grow or as laws change. When we do, we will update the "Last updated" date above. Significant changes will be emailed to you if you have an account.

11. Contact

Questions about your privacy or this policy? Contact us.