Privacy Policy
In short: ContextFlow has no accounts and no tracking. When you ask a question, your question and the text of the page (or the text you selected) are sent to our AI provider to generate the answer and are not stored by us. Your chats stay on your devices and, if you turn on chat sync, in your own iCloud, end-to-end encrypted.
1. Who we are
ContextFlow ("we") is a Safari extension with a companion app for iPhone, iPad and Mac. Contact: top10resource@gmail.com.
2. What we process and why
| Data | Why | Stored? |
|---|---|---|
| Your question and the text of the current page or your selection | To generate the answer you asked for | Not stored by ContextFlow. Passed to Anthropic (Claude) or, when Claude is unavailable, to OpenAI. Both keep API data only for a limited time (typically up to 30 days) for safety and abuse monitoring, and do not use it to train their models. For Google answers (the "Google" button, ContextFlow 2.1 and later) it is passed to Google instead, which searches Google for the answer and keeps the request for up to 30 days for debugging and abuse monitoring. |
| Short excerpts of your chats (titles, questions, answers and notes), only when you use AI search or "Ask your chats" (Pro, ContextFlow 2.4 and later) | To find the chat you describe, or to answer your question from your chats | Not stored by ContextFlow. Passed to Anthropic or OpenAI as above, only for that request. |
| A random installation ID generated by the extension | To apply the free daily allowance and prevent abuse | Yes, with request counters and app version, platform and language. Not connected to your name, e-mail or Apple Account. |
| A random ID generated by the ContextFlow app, and whether the extension is switched on and notifications are allowed (ContextFlow 2.4 and later) | To see how many people get from opening the app to using the extension, and improve that step | Yes, up to 180 days, once a day when you open the app, with app version, platform and language. Not connected to your name, e-mail or Apple Account. When you subscribe, the extension's installation ID is attached to the purchase so we can tell which installation has Pro. |
| Whether you installed ContextFlow after tapping or seeing an Apple Ads ad on the App Store, and if so which campaign, ad group and keyword (ContextFlow 2.4 and later, iPhone and iPad) | To see which of our App Store ads bring people who find ContextFlow useful, and stop paying for the rest | Yes, up to 180 days, with the app's random ID. Apple provides only campaign identifiers through its AdServices framework, never who you are; this is not tracking and needs no permission prompt. |
| Your IP address | Rate limiting | Only as a one-way hash that changes every day. |
| App Store subscription data (Apple-signed transaction: product, transaction IDs, expiry date, price paid and the App Store country) | To give you Pro access and handle renewals, refunds and cancellations, and to see which plans and countries ContextFlow is useful in | Yes, while the subscription is active and for up to 180 days after, together with the installation ID it is used from. Nothing more precise than the country. |
| Usage statistics (number of requests, response time, which quick action was used; for answers with your own API key: provider, model, number of tokens and whether it succeeded) | To keep the service reliable and improve it | Yes, up to 180 days, without page content or chat text. |
3. What we don't do
- No accounts, e-mail addresses or passwords.
- No browsing history: pages are read only when you open ContextFlow and ask something.
- No advertising, no tracking across apps or websites, no selling or sharing of data for marketing.
4. Data on your device
Chats, settings, the optional "About me" text and your own OpenAI or Anthropic API key (if you add one) are stored locally in Safari's extension storage. "About me" text is included in requests to personalize answers. With your own key, requests go directly from your device to the provider of that key (OpenAI or Anthropic) under your own account with them, and do not pass through our servers. After such an answer the extension sends us only the usage counters listed in section 2, never your key, your question or the page text. You can delete all chats in the extension settings; removing the app deletes everything.
Chat sync (ContextFlow 2.3 and later). With "Sync chats with iCloud" on in the extension settings (the default), your chats (up to the 50 most recent) are also kept in your private iCloud database so you can continue them on your other devices signed in to the same Apple Account. They are stored end-to-end encrypted with keys only your devices have: neither we nor Apple can read it, and they never pass through our servers. Turning the setting off stops syncing; deleting a chat, or "Delete all chats", also deletes it from iCloud.
5. Service providers
- Anthropic — generates answers with Claude; with your own Anthropic API key, requests go from your device straight to Anthropic (privacy policy).
- OpenAI — generates answers when Claude is unavailable, and with your own OpenAI key (privacy policy).
- Google — generates Google answers with Google Search through the Gemini API, only when you choose "Google" (privacy policy).
- Netlify — hosts our API (privacy policy).
- Supabase — database for counters and subscription records (privacy policy).
- Apple — processes payments (we never see your payment details) and, with chat sync on, keeps your end-to-end encrypted chat in your iCloud.
6. Earlier versions
Versions before 2.0 asked some users to create an account with an e-mail address. Those accounts are no longer used by ContextFlow. To have such an account deleted, e-mail us from the address you used and we will delete it within 30 days.
7. Your rights
You can ask us about the data linked to your installation ID or subscription, or request its deletion, at top10resource@gmail.com. Depending on where you live (e.g. the EU/UK under GDPR, California under CCPA) you may have additional rights, which we honour.
8. Children
ContextFlow is not directed at children under 13 and we do not knowingly collect their data.
9. Changes
We will post changes on this page and update the date above.