Privacy Policy

Scope

This policy describes how the FlowSky developer handles information in FlowSky for Bluesky and its login relay. Apple, Bluesky, Cloudflare, GitHub and other providers process information under their own policies when you use their services.

Your account and information on the device

You authorize your Bluesky account through your provider’s sign-in page on your phone. FlowSky does not ask you to send your Bluesky password to the developer. The app stores OAuth credentials in Apple Keychain on the Apple TV, and keeps preferences, cached profile information and purchase entitlement information on the device. Media and feed data may also be cached locally.

The app requests account, feed and media information from Bluesky and relevant content hosts. Those services receive network requests and information needed to handle them. Signing out removes FlowSky’s saved OAuth credentials and profile cache; it does not delete your Bluesky account or content.

Temporary login relay

A Cloudflare-hosted relay connects the phone authorization flow to the Apple TV. It temporarily holds pairing information, the authorization URL (which may include your account handle), the expected issuer, a hash of the polling secret, and the authorization callback or error. Pairing records expire after five minutes and are deleted earlier after the callback is successfully retrieved.

The phone authorization flow uses a short-lived, secure pairing cookie. The relay does not receive or store OAuth access tokens, refresh tokens, the PKCE verifier, DPoP private keys, or feed and media content. Cloudflare may process IP addresses and request metadata to deliver and protect its service. Application observability is disabled in the relay’s deployment configuration.

Purchases

Apple processes payments. FlowSky uses StoreKit transaction information to verify purchases and determine Pro access, and stores an entitlement summary on the device. The developer does not receive your payment card details and does not operate a separate purchase server.

Support and these pages

If you contact support, the developer receives your email address and the information you choose to send, and uses them to respond and resolve the request. Keep passwords, authorization codes, tokens and private content out of support messages. Support correspondence is retained as needed to handle the request and meet applicable obligations.

These support and policy pages use no analytics scripts, advertising, or cookies. GitHub Pages hosts this website and processes network requests, including IP addresses, to deliver and protect the service. The app currently contains no third-party analytics or advertising SDK. The developer does not sell personal information or use it for targeted advertising.

Your choices and changes

Use FlowSky’s sign-out option to remove saved login credentials. Manage your account, content and account deletion with Bluesky or your account provider; manage purchases with Apple. Contact the developer below about information supplied to support or privacy questions. This policy will be updated when relevant data practices change.