FlintFlintby Torch
⚠ Draft for review — accurate to how Flint works today, but not yet reviewed by a lawyer.

Privacy Policy

Last updated: July 19, 2026 (draft)

The short version

Flint keeps your progress in your own browser, sends the text you ask it to work on to an AI provider to generate a result, and uses privacy-minded analytics to improve the product. We don't sell your data.

What we store on your device

Your lessons, streak, saved prompts (Playbook), and voice profile live in your browser's localStorage — on your device, not our servers (until accounts launch). Clearing your browser storage clears them.

What you send to the AI

When you run Forge, a Skill, Studio, or a lesson, the text you enter is sent to our AI provider (Anthropic) to generate the result, then returned to you. Don't paste confidential, personal-health, or payment information. See the Safe to upload lesson for what's fine to share.

Analytics and errors

We use PostHog (product analytics) and Sentry (error monitoring) to see what's working and fix what breaks. We don't record prompt text or AI output, and we hash your IP before it's used, so it isn't stored in the clear. We honor the Global Privacy Control signal — if your browser sends it, we turn analytics off for you. Retention: analytics events ~12 months, error logs ~90 days. If we market to the EU/UK we'll add a cookie-consent banner that blocks non-essential analytics until you opt in.

Who we share data with (sub-processors)

We use a small set of vendors to run Flint; each sees only what it needs:

  • Anthropic — runs the AI that generates your results.
  • Railway — hosting.
  • Cloudflare — content delivery and abuse protection.
  • PostHog — product analytics.
  • Sentry — error monitoring.
  • Stripe — payments (when paid plans are live).

We don't sell your data. [Your lawyer may add links to each vendor's DPA.]

Payments (when live)

Paid plans are processed by Stripe; card details go to Stripe, not to us. We store only what's needed to know your plan status.

Your choices & rights

You can clear your on-device data anytime by clearing browser storage. Depending on where you live, you may have rights to access or delete data we hold (e.g. under CCPA/GDPR) — email us and we'll act within 30 days. When accounts are live: we keep account and plan data while your account is active and delete it within 30 days of a deletion request; billing records are kept about 7 years for tax and accounting. Flint is not directed to children under 13.

Contact

Questions about privacy: [email protected].

See also our Terms of Service.