01Who We Are
FlowLearn (flowlearn.io) is operated by MB Verslas Academy, a company registered in Lithuania, European Union. We are the data controller for the personal data processed through our platform.
As an EU-based entity, we comply fully with the General Data Protection Regulation (GDPR) and applicable Lithuanian data protection law.
02What We Collect
We collect only the data necessary to operate FlowLearn. Here is exactly what we collect and why.
Account information
When you register, we collect your name and email address. This is required to create your account, authenticate you, and communicate important service updates.
Course and learning data
We store course content created by instructors (text, screenshots of course material) and learner progress data (completed steps, AI tutor conversation history). This data powers the learning experience and analytics dashboards.
Voice recordings
Instructors may record voice input to create or update lesson content. These recordings are processed immediately into text-based lesson material and then permanently deleted. We do not store, archive, or retain any voice data.
Payment information
Payments are processed entirely by Stripe. FlowLearn never receives, processes, or stores your credit card number, CVV, or full payment details. We only receive confirmation of payment status from Stripe.
03How We Use Your Data
We use your personal data for these specific purposes:
- Providing and operating the FlowLearn platform
- Authenticating your account and managing sessions
- Delivering AI-powered tutoring tailored to your learning progress
- Generating and improving course content from instructor input
- Producing analytics and insights for course creators
- Processing payments through Stripe
- Sending essential service communications (not marketing)
We do not use your data for advertising. We do not build advertising profiles. We do not sell your data to anyone, ever.
04AI Processing
FlowLearn uses third-party AI services to power its tutoring and course generation features. When you interact with the AI tutor or when instructors create course content, relevant data is sent to these providers for processing.
We select AI providers that offer data processing agreements compatible with GDPR requirements. Course content and learner interactions sent to these providers are used solely to generate responses and are not used to train their models, in accordance with their respective API data usage policies.
05Cookies
FlowLearn uses essential cookies only. We do not use advertising cookies, tracking cookies, or third-party marketing cookies.
We may introduce analytics cookies (such as Google Analytics) in the future to understand how the platform is used. If we do, we will update this policy and provide you with the ability to opt out before any analytics cookies are set.
06Data Storage & Security
All data is stored on private servers located in the European Union. We do not use US-based cloud hosting for primary data storage. Session data is stored in Redis on the same EU-based infrastructure.
We implement appropriate technical and organizational measures to protect your data, including encrypted connections (TLS), secure authentication, and access controls limiting data access to authorized personnel only.
07Third-Party Services
Beyond the AI providers listed above, we share data with the following third-party service:
We do not sell, rent, or trade your personal data with any third party. Data is shared with the services above only to the extent necessary to operate FlowLearn.
08Your Rights Under GDPR
As a user of FlowLearn, you have the following rights under the General Data Protection Regulation:
- Access. Request a copy of all personal data we hold about you
- Rectification. Correct any inaccurate or incomplete personal data
- Erasure. Request deletion of your personal data
- Portability. Receive your data in a structured, machine-readable format
- Restriction. Request that we limit how we process your data
- Objection. Object to processing of your data for specific purposes
To exercise any of these rights, contact us at support@flowlearn.io. We will respond within 30 days. If you are unsatisfied with our response, you have the right to lodge a complaint with the Lithuanian State Data Protection Inspectorate (VDAI) or your local EU data protection authority.
09Data Retention
We retain your account data for as long as your account is active. Course content and learning progress are retained to provide the service.
When you delete your account, we will delete your personal data within 30 days. Some data may be retained longer where required by law (for example, payment records for tax compliance).
Voice recordings are never retained. They are deleted immediately after processing into lesson material.
10Children’s Privacy
FlowLearn is not directed at children under the age of 16. We do not knowingly collect personal data from children under 16. If you believe a child under 16 has provided us with personal data, please contact us at support@flowlearn.io and we will delete it promptly.
11Changes to This Policy
We may update this privacy policy from time to time. When we make significant changes, we will notify you by email or through a notice on the platform. The “Effective” date at the top of this page indicates when the policy was last revised.
12Contact Us
If you have any questions about this privacy policy or how we handle your data, reach out to us: