Privacy Policy

1. Introduction

Welcome to FlutterFlow, Inc. (“FlutterFlow”, “us”, “we”, or “our”), a Delaware corporation located at 11 N. Ellsworth Ave, Suite A, San Mateo, California 94401, USA.

This Privacy Policy explains how we collect, use, share and protect personal information when you use our Services (as defined in section 2). Please read this policy to understand how we handle your information. Unless otherwise defined in this Privacy Policy, the terms used in this Privacy Policy have the same meanings as in our Terms of Service.

2. Definitions

SERVICES means all products and services that FlutterFlow, Inc. offers and that link to this policy and any we launch in the future.

PERSONAL INFORMATION (or personal data) means information about an identified or identifiable living individual.

USAGE DATA has the meaning given in our Terms of Service: diagnostic, technical and usage information about how the Services are used, such as features used, pages visited and device information.

COOKIES are small files stored on your device (computer or mobile device). We also use similar technologies, such as pixels and local storage.

CONTROLLER means the person or organization that decides why and how personal information is used. FlutterFlow is the controller of the personal information described in this policy.

PROCESSOR (or service provider) means a person or organization that processes personal information on a controller’s behalf. When you build apps with the Services and we host data about your app’s users, you are the controller and FlutterFlow is your processor. That data is covered by our Data Processing Addendum, not this policy. If you are a user of an app built with FlutterFlow, please contact that app’s developer.

3. Information we collect

We collect:

• Account and billing information you give us, such as your name, email address, sign-in details, team membership and plan. Card details are handled by our payment processor, Stripe, not by us.
• Content you create or submit, such as projects, files, prompts and the output our AI features generate.
• Usage Data, collected automatically, such as features used, logs, IP address, browser and device type, and approximate location.
• Communications, such as support messages, survey responses and Marketplace or community posts.
• Information from third parties, such as sign-in providers, integrations you connect and payment providers.

Please don’t include personal information in your prompts, other than what you need to use our AI features. You’re responsible for any you include. Our Terms of Service don’t allow sensitive data, such as health information, in the Services. These practices apply to FlutterFlow's users, not the end users of their applications.

4. How we use information

We use personal information to:

• provide and maintain the Services, including AI and other interactive features you choose to use (legal basis: our contract with you);
• bill you and manage subscriptions (contract; legal obligation);
• provide customer support (contract; legitimate interests in helping you use the Services and resolving issues quickly);
• evaluate and improve the Services, including our AI features (legitimate interests in making sure our AI features produce accurate, reliable, well-designed output, catching problems when models or features change, and improving our products for all users);
• monitor how the Services are used and detect, prevent and fix technical issues (legitimate interests in keeping the Services reliable and working well);
• keep the Services secure and prevent fraud and abuse (legitimate interests in protecting our users, systems and business; legal obligation);
• send you service notices, including changes to our terms and this policy (contract; legitimate interests in keeping you informed about the Services);
• send marketing and show you FlutterFlow ads on other websites. You can unsubscribe or turn off advertising cookies at any time (consent where required, otherwise legitimate interests in promoting our products to existing and potential customers);
• comply with law and enforce our terms (legal obligation; legitimate interests in enforcing our agreements and establishing or defending legal claims);
• for any other purpose we describe when you provide the information, or with your consent (consent).

The legal bases above apply if you’re in the EEA, UK or Switzerland. Where we rely on legitimate interests, we have balanced them against your rights. For our use of content to evaluate and improve our AI features, we have done this in a written legitimate interests assessment, and you can ask us for more information about it at privacy@flutterflow.io. You can object to any processing based on legitimate interests (see section 10). Where we rely on consent, you can withdraw it at any time. We need some information, such as your email address, to provide the Services; without it, we can’t create your account. We don’t make decisions about you based solely on automated processing that have legal or similarly significant effects.

5. AI features

When you use our AI features, we send your prompts and relevant project content to AI model providers to generate a response. Today they are OpenAI, Anthropic and Google, and Runware for image generation. OpenAI, Anthropic and Google don’t keep your data after processing a request and don’t train their models on it. Runware states that it doesn’t train on your data, and it keeps generated images for up to 7 days by default.

Evaluating and improving our AI. We use your prompts and AI-generated output to test and improve our AI features. We don’t use them to train AI models; if that changes, we’ll update this policy and tell you first. Before prompts are used, we automatically remove email addresses and phone numbers, but it is your responsibility to keep personal information out of your prompts. We don’t use other project content, FlutterFlow Studio Enterprise content, or data about your app’s users for this. Evaluation data is deleted within 30 days after you delete the content or your account.

Your right to object. You can ask us to stop using your content this way by emailing privacy@flutterflow.io. We’ll exclude it and remove it from existing evaluation datasets within 30 days.

6. Disclosure of information

We don’t sell or rent your personal information to any third parties. We may disclose it only as needed, in the following ways:

• to service providers that help us run the Services, such as hosting, AI, analytics, support, email, billing and collaboration tools. They may use it only to provide services to us. The current list, with each provider’s purpose and location, is in our trust center, where you can subscribe to updates;
• to services you connect, such as GitHub, Codemagic, Firebase or Supabase, as required for the connections' functionality;
• to your team and the public, for content you share in a workspace, the Marketplace or the community;
• for law enforcement, where required by law or in response to valid requests by public authorities;
• in a business transaction, such as a merger, acquisition or asset sale. We’ll notify you before your information becomes subject to a different privacy policy.

7. Analytics, cookies and advertising

We use cookies and similar technologies, such as web beacons, tags and scripts, to collect and track information and to improve the Services. These include:

• Strictly necessary cookies, such as session, preference and security cookies, for sign-in, security and remembering your choices;
• Analytics cookies to understand how the Services are used;
• Advertising cookies to serve you with advertisements that may be relevant to you and your interests. We use Google Ads on our websites for this, including to show FlutterFlow ads to people who have visited our websites.

Google Analytics. Google Analytics is a web analytics service offered by Google that tracks and reports website traffic. This data is shared with other Google services, and Google may use it to contextualize and personalize the ads of its own advertising network. See the Google Privacy Terms.

Firebase and Mixpanel. In our products, we use Google Analytics for Firebase and Mixpanel to understand how features are used. You can opt out of certain Firebase features through your mobile device settings, such as your device’s advertising settings, or by following Google’s instructions in its Privacy Policy.

Your choices. When you first visit our website, a cookie banner asks for your choices. Where the law requires it, for example in the EEA and UK, we don’t set non-essential cookies until you accept them. You can change your choices at any time using the Cookie settings link in our website footer. We also honor Global Privacy Control signals by turning off advertising cookies. You can also set your browser to refuse all cookies or to tell you when a cookie is being sent. If you refuse cookies, some parts of the Services may not work.

8. Payments

We use Stripe to process payments. We don’t store your payment card details; you provide them directly to Stripe, whose use of your information is governed by its Privacy Policy. Stripe adheres to PCI-DSS standards.

9. Retention, transfers and security

Retention. We keep personal information only as long as we need it for the purposes in this policy or as the law requires. When you delete content or your account, we delete the related personal information, including from backups and logs, within 30 days. Billing records are kept for 10 years, as tax and accounting law requires. We keep Usage Data for a shorter time, unless we need it to keep the Services secure or improve them, or the law requires us to keep it longer. We may keep information longer where the law requires it or to resolve disputes and enforce our agreements.

International transfers. We are based in the United States and process personal information there. Some of our service providers process it in other countries. When we transfer personal information from the EEA, UK or Switzerland, we use the European Commission’s Standard Contractual Clauses and the UK International Data Transfer Addendum. You can ask us for a copy at privacy@flutterflow.io.

Security. We protect personal information with measures such as encryption, access controls and multi-factor authentication, and our security program is audited annually under SOC 2 Type II. No method of transmission over the Internet or electronic storage is 100% secure, so we can’t guarantee absolute security.

10. Your data protection rights

Everyone. You can update your account information in your settings, delete projects or your account, and unsubscribe from marketing emails using the link in each email.

EEA, UK and Switzerland (GDPR). You have the right to access, correct or delete your personal information; to restrict or object to how we use it, including for AI evaluation and direct marketing; to receive it in a portable format; and to withdraw consent at any time. You can also lodge a complaint with your local data protection authority.

California and other US states. Residents of California and other states with privacy laws, such as Colorado, Connecticut, Virginia and Texas, may have the right to know what personal information we collect, use and disclose; to access, correct or delete it; and to opt out of the sale or sharing of personal information and targeted advertising. We don’t sell or rent your personal information. Our advertising cookies may count as “sharing” or targeted advertising under these laws. You can opt out using the Cookie settings link in our website footer or a Global Privacy Control signal. We don’t use sensitive personal information for purposes that would require a right to limit it. If we decline your request, you can appeal by replying to our decision. We won’t discriminate against you for exercising your rights.

California notice at collection. In the past 12 months, we collected identifiers, commercial information, internet activity, approximate geolocation and user content, from the sources and for the purposes in sections 3 and 4. We disclosed these categories to service providers for business purposes. Through advertising cookies, we also made identifiers and internet activity available to advertising partners. We keep them as described in section 9.

How to make a request. Email privacy@flutterflow.io. We’ll verify your identity, usually through your account email, and respond within the time the law requires. An authorized agent can make a request for you with your written permission. If you’re a user of an app built with FlutterFlow, send your request to that app’s developer.

Do Not Track. There’s no common standard for browser “Do Not Track” signals, so we don’t respond to them. We do honor Global Privacy Control signals, as described above.

11. Children’s privacy

Our Services are not intended for use by anyone under 13 (or under 16 in Europe). We don’t knowingly collect personal information from them. If you believe a child has given us personal information, contact privacy@flutterflow.io and we’ll delete it.

12. Links to other sites

Our Services may link to third-party sites, integrations and Marketplace items that we don’t operate. We’re not responsible for their content or privacy practices, so please review their privacy policies.

13. Changes to this Privacy Policy

We may update this policy from time to time. We’ll notify you of material changes by email and/or a prominent notice in the Services before they take effect, and update the “Last updated” date at the top of this policy.

14. Contact us

If you have any questions about this Privacy Policy, contact us:

• By email: privacy@flutterflow.io
• By mail: FlutterFlow, Inc., 11 N. Ellsworth Ave, Suite A, San Mateo, California 94401, USA
• EU representative: Instant EU GDPR Representative Ltd, Office 2, 12A Lower Main Street, Lucan, Co. Dublin K78 X5P8, Ireland (contact@gdprlocal.com)
• UK representative: GDPRLocal Ltd., 1st Floor Front Suite, 27-29 North Street, Brighton BN1 1EB, England (contact@gdprlocal.com)