Privacy Policy

Last updated: November 7, 2026

Who we are: Cursor Flow is operated by Prince Ruhul, Sylhet, Bangladesh. Contact: hello@cursorfllow.com.

What we collect and why

• Account data: email address and name, to create and secure your account.
• Voice and text you dictate: when you use Cursor Flow Cloud (online dictation and AI correction), audio and the resulting text are sent over an encrypted connection to our servers and to our cloud speech-recognition and AI processing providers, only to produce your text. Our speech-recognition provider may retain audio for up to 30 days for abuse monitoring and service restoration. This retention is outside our direct control; after that period it is deleted. Cursor Flow itself does not store your audio after processing. In offline mode, speech recognition runs entirely on your computer and audio is not uploaded.
• Phone-to-PC features: text, files, and images you send between your phone and PC travel over an encrypted connection, directly over your local network or through our relay when you are away. Relayed items are deleted immediately after delivery; anything not delivered is permanently purged after 24 hours.
• History, vocabulary and styles: stored on your PC so you can review and reuse them. You can delete them in the app.
• Usage data: basic app events and usage counts, to run plans and limits.
• Crash reports: when the app crashes, we receive the error details, app version, and operating system version, to fix bugs. Crash reports do not include your dictated text.
• Payment data: card and international checkout data is handled by Lemon Squeezy, our Merchant of Record for those payments. We never see your full card details. Bangladesh bKash payments are a separate local payment path; we use the account email, sender number and transaction ID you submit to verify the payment and activate your plan.

Service providers (by type)

Cloud database and hosting (Supabase), product analytics (PostHog), card and international payment processing (Lemon Squeezy), and local Bangladesh payments (bKash), cloud speech-recognition and AI text processing providers, and website hosting/CDN (Cloudflare and our site host). They process data only on our instructions.

Retention

Account data is kept while your account is active and deleted within 30 days of a deletion request.

Your rights

You can access, correct, export, or delete your data, and object to processing, by emailing hello@cursorfllow.com. If you are in the EU/UK you may also complain to your local data protection authority.

Cookies

The website uses essential cookies. We use PostHog for product analytics, on the website and in the apps, to understand which features are used and where people get stuck (for example page views, button clicks, app events, device and app version). Analytics never include your audio or dictated text. PostHog runs on its US Cloud, so this analytics data is processed in the United States. It sets a first-party cookie (named ph_…) to recognise repeat visits, and may record anonymised session replays of website visits to help us fix confusing pages; every text field is masked in those replays. If your browser sends a Do Not Track signal, the website loads no analytics at all. You can also ask us to delete your analytics data or opt you out by emailing us. We do not sell your personal data or use it for advertising.

Children

Cursor Flow is not intended for children under 13 (16 in the EU).

Changes

We will post updates here and notify you of material changes.