Privacy Policy for ScriptFlow

Effective Date: 2026-09-11

1. Introduction

This Privacy Policy explains how ScriptFlow ("we", "our", or "us") collects, uses, and discloses information about you when you use our Android application (the "App"). ScriptFlow lets you write small JavaScript scripts and turn them into home screen widgets that run on your own device.

2. Information We Collect

ScriptFlow does not require an account, and we do not collect, transmit, or store personal information on our own servers. We do not operate a backend for the App: there is nothing for us to collect.

3. Your Scripts and Widget Data

The scripts you write, the widgets you configure, and any data your scripts save are stored locally on your device in the App's private storage. They are not uploaded to us and are not shared with anyone unless you export or share them yourself.

4. Script Execution

Your JavaScript runs on your device in an embedded JavaScript engine, inside the App's own sandbox. A script has access only to the App's scripting API and the data you make available to it. It cannot read other apps' data, and it runs with the permissions granted to ScriptFlow — nothing more.

5. Network Requests Made by Your Scripts

A script you write may fetch data from the internet — for example a weather API, a calendar feed, or your own server. Those requests are made directly from your device to the address the script names. They do not pass through our infrastructure, and we do not see, proxy, or log them.

Any data you send to a third-party service this way, including any API keys or tokens you place in a script, is handled by that service under its own privacy policy and terms. Please review them before sending personal data. Credentials you store in a script or in the App's settings remain on your device.

6. Scripts From Other People

If you import or paste a script written by someone else, that script runs with the same access as one you wrote yourself, including the ability to make network requests. Read a script before you run it, and only run scripts from sources you trust.

7. Permissions

The App requests internet access so that your scripts can fetch data. Any additional Android permission — such as location or notifications — is requested only when you use a feature or run a script that needs it, and only you can grant it. You may revoke a permission at any time in Android's system settings; scripts relying on it will then stop receiving that data.

8. Analytics and Advertising

ScriptFlow contains no analytics SDK, no advertising SDK, and no third-party tracking. We do not build user profiles. Note that Google Play collects standard installation, and (if you opt in) crash and performance statistics for apps distributed through the store; that collection is governed by
Google's Privacy Policy and is outside our control.

9. Data Retention and Deletion

Because your scripts and widget data live only on your device, you remain in control of them. You can delete an individual script or widget inside the App, and uninstalling ScriptFlow removes all of its local data from your device. There is no account for us to delete and no server-side copy to erase.

10. Children's Privacy

ScriptFlow is not directed at children under 13, and we do not knowingly collect personal information from children.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Changes take effect as soon as they are posted on this page, so please check it periodically.

12. Contact Us

If you have any questions about this Privacy Policy, please contact us at jonasborggren [at] gmail [dot] com.