Privacy Policy

Last updated 19 September 2026

1. What CountFlow is
CountFlow ("the App") is an app for counting retail stock, at app.countflow.dev. A store signs up, adds its people and its bays, and the App hands out bays to count and keeps the record of what was counted and by whom. This policy explains what the App collects, why, and what you can do about it.

2. What we collect
Your account: an email address and a password, which is stored scrambled (hashed) by our sign-in provider and cannot be read by anyone at CountFlow. Your profile: your name as your manager enters it, your role, and optionally an email address, a photo, and a four-digit PIN for shared store devices — PINs are stored scrambled too, so they can be reset but never read. Your work: the bays you are assigned and count, times, flags you raise, notes, training results, the zones you cover, the store's floor plans and the daily log. A few preferences stay on your own device, such as light or dark mode and which store you are looking at. When something breaks, an automatic error report is sent to our monitoring service carrying which store and which screen, never who you are, with IP address storage switched off. Our sign-in page uses Cloudflare Turnstile to keep automated sign-ups out. We do not collect location, contacts, advertising identifiers, or any third-party analytics or tracking cookies.

3. Why we collect it
To run the service you or your employer signed up for: to sign you in, show you your work, keep your store's counting records, tell your manager what needs attention, keep the service secure, and fix it when it breaks. Nothing else.

4. Who can see it
Managers and admins at your store can see that store's roster, counting records and reports — that is the purpose of the App. Every store is walled off from every other store, enforced by the database itself rather than by the screens. We may access a store's data to support or repair the service, and where the law requires it, but we do not browse it otherwise. We never sell, rent or share your information with advertisers or data brokers.

5. Who processes it for us
Supabase (database, sign-in and file storage, United States); Vercel (hosting the App); Cloudflare (bot protection on the sign-in page); Sentry (error reports, United States); GitHub (encrypted weekly backups). They process data on our behalf and may not use it for their own purposes.

6. Photos
A profile photo is optional, and a store's manager can switch photos off for the whole store. A photo is stored at an address made of two random identifiers: anyone holding that exact address can view the image, which is what keeps the App fast and free, but nobody can browse or list the photos. You can remove your photo at any time, and your manager can remove it for you.

7. How long we keep it
Counting records are kept while the store is active, because they are the store's own history. Backups are kept for 90 days and then deleted, as are error reports. If a store closes its account we delete its data within 30 days, except anything the law requires us to keep.

8. Your choices and rights
You can ask us for a copy of your information, to correct something wrong, to delete your account and personal information, or to stop processing it where the law gives you that right. Write to privacy@countflow.dev and we will answer within 30 days. Some information has to stay: your store's counting records belong to the store, and removing your name from them would falsify the store's own history, so we disconnect them from you rather than rewrite them. Depending on where you live you may have specific rights under laws such as the GDPR or the CCPA; we apply the same standards to everyone.

9. Security
Sign-in is handled by a specialist provider, passwords and PINs are stored scrambled, and everything travels encrypted. No part of the App writes to the database directly: every change goes through a checked, server-side rule, each store's data is isolated at the database level, and administrative actions are written to an audit log. No system is perfect; if a breach ever affects your information we will tell you and the relevant regulator promptly.

10. Children
CountFlow is a workplace tool and is not intended for children under 13. We do not knowingly collect their information. If you believe a child has an account, write to us and we will remove it.

11. Changes
If this policy changes in a way that matters, we will say so in the App before it takes effect, and the date above will change.

12. Contact
Questions about this policy, or a request about your information: privacy@countflow.dev.