AI Services & Apps Privacy Supplement

Effective Date: May 21, 2026

Supplement Notice: This statement supplements the Smart Bay General Privacy Policy. It specifically governs the data handling practices for our cloud-connected, artificial intelligence, and account-based ecosystem, including Flow AI Assistant, Flow AI Photo Editor, Flow AI Recorder, and the Flow Account Center.

1. ACCOUNT, SOCIAL LOGINS & PAYMENT DATA

Unlike our local utility tools, our AI ecosystem utilizes a unified account structure to synchronize your data and premium access:

Account Details: When you register via the Flow Account Center, we collect your email address, username, and encrypted passwords to establish your identity profile.
Social Media Login & Google API Compliance: If you choose to authenticate using third-party single sign-on parameters (such as Google OAuth), we obtain your verified email and username tokens. Our use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
Subscription & Payment Processing: Transaction infrastructures and dynamic in-app purchase validation are securely managed by Google Play Billing and RevenueCat. You may review their active protective metrics here: Google Privacy & Terms and RevenueCat Privacy Policy.

2. STATUTORY DATA CATEGORIES (CCPA ALIGNMENT)

To comply with the California Consumer Privacy Act (CCPA) and other US state laws, the table below defines the exact categories of personal information processed across our AI application portfolio over the preceding 12 months:

Statutory Category (CCPA)	Collected Elements & Technical Purpose	Retention Period
Category A: Identifiers	Account emails, profile usernames, device IDs, IP addresses, and secure authentication tokens.	Maintained until user executes account deletion.
Category B: Customer Records	Dynamic purchase history, subscription statuses, and basic premium transaction logs.	Maintained until user executes account deletion.
Category F: Internet Activity	Text dialogue prompts, feature interaction history, and operational metadata.	Maintained until user executes account deletion.
Category G: Geolocation Data	Imprecise location metrics derived automatically from IP addresses for cloud server assignment.	Up to 1 year.
Category H: Sensory Data	Temporary microphone voice streams (Flow AI Assistant/Recorder) and uploaded image pixels (Flow AI Photo Editor).	Processed in real-time; cloud buffer is rapidly purged upon task completion.

3. HOW OUR AI PRODUCTS PROCESS YOUR CONTENT

Our applications leverage advanced machine learning models (primarily via Google Cloud Vertex AI infrastructure) to execute computational features under strict constraints:

Flow AI Assistant (Voice & Text Assistant): Captures your real-time text input or hold-to-speak voice streams to process natural language replies. Conversation logs are cached inside your profile container to preserve active dialogue context but can be manually cleared.
Flow AI Photo Editor (Creative Studio): Uploads user-selected graphics to execute resolution enhancements, portrait retouches, or distraction removals. Image arrays are processed strictly in real-time, and uploaded source binary files are rapidly purged from computational memory queues immediately after execution.
Flow AI Recorder (Smart Transcription): Transmits local AAC recordings to cloud nodes solely to deliver speech-to-text transcriptions and structural summaries. The original audio data is discarded instantly once text compilation completes.

Core Zero-Training Guarantee: We enforce rigid enterprise contracts with our computational cloud vendors. Your private text prompts, local voice recordings, and original image files are NEVER sold, rented, or utilized to train third-party public foundational models.

4. ANALYTICS, COOKIES & SYSTEM PERMISSIONS

We log analytical metadata automatically via Firebase Analytics and Google Analytics to monitor cloud stability and manage Vertex AI background capacities. To completely opt-out of Google tracking pipelines across web interfaces, you may install the utility available at https://tools.google.com/dlpage/gaoptout.

To unlock these multi-modal features, the Apps may require standard Android system permissions, including Microphone (for voice input), Camera/Storage/Gallery (for image editing), Location (for contextual automation), Contacts (for assistant calling tasks), and System Overlay (for floating windows). You hold absolute authority to grant or revoke these privileges at any time within your device's system settings.