Privacy Policy

This Privacy Policy explains how FlowState AI ("we," "us") collects, uses, and protects information when you use VibeCoder U (the "App") or buy a VibeCoder U membership. FlowState AI is a Disabled Veteran Owned & Operated business based in Texas.

1. Information we collect

When you buy a membership

Payments are processed by Stripe, Inc. Stripe collects your payment card details directly. We never see or store your full card number. Stripe shares with us the information needed to manage your purchase: your name, email address, billing details Stripe collects (such as country and postal code), what you bought, the amount, and payment status.

When you create an account

We collect your name, email address, and password. Your password is stored only as a secure one-way hash (scrambled so it can't be read back), never as plain text. We also store your membership status from Stripe, the dates your account was created and last used, and the progress you choose to save (learning-path steps and checklist ticks) so it follows you across devices.

When you contact us

If you email or call us, we keep the information you share so we can help you.

Information stored on your device

The App also saves your progress and your tutor conversation in your browser's local storage. If you're signed in, learning-path steps and checklist ticks are copied to your account. Your tutor conversation stays on your device; when you ask the AI tutor a question, your recent messages pass through our server to create the answer (see AI features below).

AI features

The AI tutor, AI blueprints, and AI-tailored scripts are powered by Claude, an AI model made by Anthropic. When you use them, your question and the project details you type are sent from our server to Anthropic's API to create the answer, and Anthropic processes them under its commercial terms and privacy policy. We do not store the content of your AI conversations on our servers. Your tutor chat history is saved only in your browser. We keep short-term counts of AI requests, tied to a temporary network identifier, only to prevent abuse and control costs. Please don't enter sensitive personal information (such as passwords, financial account numbers, or health information) into AI features.

Hosting and technical data

The App is hosted on Replit. Our hosting provider processes technical information such as IP address, device and browser details, and server logs to deliver and secure the service. The App does not use advertising cookies, analytics trackers, or third-party ad networks. It uses essential cookies only: one keeps you signed in (for up to 30 days, or until you sign out), and the owner of the business has a separate sign-in cookie for the admin area.

2. How we use information

• To give you access to what you purchased and provide support.
• To process payments, refunds, and cancellations.
• To send receipts and important messages about your membership.
• To keep your account secure and prevent fraud and misuse, such as shared accounts.
• To comply with legal, tax, and accounting obligations.
• To send marketing emails only if you agree to receive them. You can unsubscribe anytime.

3. How we share information

We share information only with service providers that help us run VibeCoder U (such as Stripe for payments, Replit for hosting and our database, Anthropic for AI features, and our email provider for account emails like password resets), when required by law or to protect our rights, or as part of a merger or sale of the business. We do not sell your personal information, and we do not share it for cross-context behavioral advertising.

4. How long we keep it

We keep your account until you delete it. You can delete your account at any time from your account page, which permanently removes your account and saved progress from our database. We keep purchase records as long as needed for tax, accounting, and legal purposes (generally up to seven years). We keep support messages as long as needed to help you. Information on your device stays until you clear it.

5. Your privacy rights

Depending on where you live (including Texas, California, and other U.S. states), you may have the right to access, correct, delete, or get a copy of your personal information, and to opt out of targeted advertising, sale, or profiling. We don't do those last three, but we honor requests from everyone regardless of location. You can see and update your details and delete your account yourself from your account page. For anything else, email ceo.flowstateai@gmail.com. We may need to verify your identity, and we'll respond within 45 days. If we deny your request, you can appeal by replying to our decision, and we'll respond to your appeal within 60 days. We will not discriminate against you for using your rights.

6. Children

VibeCoder U is not directed to children under 13, and we do not knowingly collect personal information from them. If you believe a child under 13 has given us information, email us and we will delete it. Anyone under 18 needs a parent or guardian's permission to purchase.

7. Security

We use reasonable safeguards and rely on trusted providers like Stripe for payment security. No method of transmission or storage is 100% secure, so we can't guarantee absolute security.

8. Changes to this policy

If we update this policy, we'll change the effective date at the top. If the changes are significant, we'll let members know by email.

9. Contact us

FlowState AI
Email: ceo.flowstateai@gmail.com
Phone: (214) 810-3131
Texas, United States