Privacy Policy

Last updated 26 August 2026

IterationFlow is an Australian business. This policy explains what we collect and how it is handled.

What we collect

• Account details: your email address and, if you sign in with Google or Apple, your name and (for Google) profile image.
• Billing details: handled by Stripe. We never see or store your card number.
• Usage counts: how many words we process for you each month, to enforce plan limits. The count, never the words themselves.
• How you found us: if you arrive through a link carrying campaign tags, we keep those tags, the host name of the site that referred you and the page you landed on, and we keep them only if you go on to create an account. The host name only, never the full referring address, because that can carry a search you typed or a private path.
• Four account milestones, as dates: when the account was created, when the trial started, when the first rewrite ran and when the first payment was made. Dates and the name of the milestone, nothing about what the rewrite was.

What we do not store

We do not store the content of your prompts or the optimized outputs. Nothing you type is written to our database or our logs; our systems record word counts to enforce plan limits, never the words themselves. To generate your rewrite, the text is sent to Anthropic, which retains API inputs and outputs for up to 30 days before deletion (longer only where its safety systems flag content), and does not train on them. Once your rewrite is returned, your prompt text is not accessible to us through our systems or through Anthropic’s console. Reference images you attach to a rewrite are handled the same way as your prompt text: processed in memory to generate the result, never written to our database or logs, and subject to the same Anthropic retention described above. Notes you choose to attach as context from your own files are read at rewrite time, sent with that one request, and handled the same way: never stored.

The desktop app

The IterationFlow app for Mac sends your prompts to the same service this website uses, under everything described above. Dictation in the app is transcribed on your device by macOS; audio is never sent to us or to anyone else. The app stores its sign-in token in your Mac’s Keychain.

Overseas processing

To generate optimizations, your prompt text is processed by Anthropic in the United States under Anthropic’s commercial terms, which prohibit training on customer content and require deletion of inputs and outputs within 30 days, as described above. Our other processors are Stripe (payments), Google and Apple (sign-in), Resend (sign-in emails), Neon (database, Sydney) and Vercel (hosting, Sydney region). By using IterationFlow you consent to this processing, including the United States processing described above.

Automated processing

IterationFlow rewrites text you provide. It does not make automated decisions that produce legal or similarly significant effects about you.

Access, correction, deletion

You can delete your account yourself from your dashboard, or email team@iterationflow.com to access, correct or delete your account data. Deleting your account removes your records from our database. Stripe retains billing records for as long as tax and financial law requires it to.

Contact

IterationFlow, team@iterationflow.com.