Privacy Policy

Flock Capital, LLC, a Delaware limited liability company with its principal place of business in Seattle, Washington (“Flock”, “we”) runs Flock ID, the account for Flock's apps, and is the controller of the personal data described here. Contact: contact@flock.holdings. Each Flock app has its own policy for data it keeps inside the app.

• Account: username, display name, email address, avatar, and the date you joined; a linked Bluesky/atproto identity (DID and handle) if you add one.
• Sign-in methods: your password (only as an Argon2 hash), passkey public keys, your authenticator secret (encrypted), backup codes (hashed), and trusted browsers.
• Sessions and security log: for each sign-in and security event, the time, IP address, approximate location derived from it (city and country), and browser/device description. You can see these in Account → Security and Sessions.
• Connected apps: which Flock apps you've signed in to, with what permissions, and when.
• Billing: a copy of your subscriptions and what they unlock (plan, price, status, renewal date, the last four digits and brand of the card), your Stripe customer id, and a record of the terms you accepted at checkout (time, version, IP). Card numbers go to Stripe and never reach us.
• App licences: for desktop apps with device limits, each device's name, platform and a hashed device id (never the raw hardware id).
• Messages: the emails we send you (codes, security notices, receipts) are generated by us and sent through Resend.

• To run your account and sign you in to Flock apps — performing our contract with you.
• To keep accounts secure: rate limits, bot detection, new-device emails, the security log, recovery — our legitimate interest in security and preventing fraud.
• To take payments and keep tax records — contract and legal obligation.
• To tell you about changes to your account, billing, or these documents — contract and legal obligation.

We don't sell your data, show ads, or use it to train AI models, and we don't use analytics or advertising trackers on Flock ID.

Flock apps you sign in to get your Flock ID number and, if the sign-in screen says so, your name, username, avatar, email, linked atproto identity and which of that app's features you've paid for.

Service providers who process data for us under contract (each provider's data processing terms; Stripe's Data Processing Agreement is part of its Services Agreement, stripe.com/legal/dpa):

Other services, only when you use them: when you set a new password we check it against breached passwords with Have I Been Pwned, sending only the first five characters of a hash of it (never the password). When you sign in with Bluesky, your browser talks to your own atproto server, and we look up your public profile on Bluesky's public directory.

We disclose data to authorities only when the law requires it, and we tell you unless we're not allowed to.

Flock ID runs in the United States. When we move personal data from the EU, UK or Switzerland to the US or elsewhere, we rely on the providers' Data Privacy Framework certification or the European Commission's standard contractual clauses (with the UK addendum).

• Your account, sign-in methods, sessions, security log and billing copy: until you delete your account. Deletion runs 14 days after you ask, then removes them.
• Sessions end after 30 days without use (90 days at most); sign-in codes expire within minutes; device records unused for 13 months are deleted.
• After deletion we keep: your Flock ID number with the deletion date (so it's never reused); the Stripe customer id, with no personal details left at Stripe, so tax records can be found; your checkout consent records, as proof of what you agreed to; and records of actions our staff took on your account.
• Invoices are kept by Stripe for as long as tax law requires.
• Server logs are kept by Vercel for a short period for debugging and security.

You can download everything we hold about you as a JSON file, and delete your account, in Account → Your data. You can correct your details in Account → Profile. Depending on where you live you also have the right to object to or restrict processing, to data portability, and to complain to your data-protection authority. For anything else, email contact@flock.holdings; we answer within 30 days.

In the last 12 months we collected the categories above: identifiers (username, email, IP address, account ids), commercial information (subscriptions), internet activity (sign-in events), and approximate geolocation. We use them for the business purposes listed in “Why we use it”. We don't sell or share personal information for cross-context behavioural advertising, and we don't use sensitive personal information beyond what's needed to provide the service. You have the right to know, delete and correct your personal information, and not to be discriminated against for exercising these rights. Use the tools in Account → Your data or email contact@flock.holdings; an authorised agent may contact us on your behalf.

Flock ID only sets cookies it needs to work. None are for analytics or advertising.

On payment pages, Stripe sets its own cookies to prevent fraud; see Stripe's privacy policy.

Flock ID isn't for anyone under 16. If you think a child has given us data, email contact@flock.holdings and we'll delete it.

We'll email you before a material change takes effect. The version and effective date are at the top of this page.

Flock Capital, LLC, contact@flock.holdings.