flowcode
- The documents do not say whether your data trains AI.
- Your data is used for personalized ads, including by third-party ad companies.
- Data is shared with partners and affiliates; you can opt out.
- The documents do not say who can read your content.
QR scans, ads tracking, a content license, auto-renewing non-refundable plans.
Agent Trust Hub uses AI and may make mistakes. Review reports and confirm their contents before relying on them.
Collected
Account details, QR scans, device IDs, cookies, sometimes precise location, forms, and partner data.
Read the exact line
Privacy policy
“If you scan our QR Codes using a dtx mobile application or a browser through which you have given dtx a geolocation consent, dtx may also collect your precise geolocation during your scans”
Training
They run the service, market, customize ads across the internet, and improve products.
Read the exact line
Privacy policy
“customize the content and advertising individuals see on our Sites, across the Internet, and elsewhere;”
Sharing
Brands, vendors, affiliates, ad partners, and others can get your data; California sale/sharing has an opt-out.
Read the exact line
Privacy policy
“To Brands and Creators: We disclose information to Brands and Creators.”
Kept
No single deadline; some IDs last years after a contract, payment data up to 7 years.
Read the exact line
Privacy policy
“We plan to retain the California IP address associated with account logins on our own websites for several years for account authentication, fraud detection, and other cybersecurity purposes.”
Controls
Cookie settings, ad opt-outs, marketing unsubscribe, and privacy requests by email or a form.
Read the exact line
Privacy policy
“Californians can opt out of our “sales” and “sharing” by following the instructions on our Your Privacy Choices form”
Fine print
18+, auto-renewing non-refundable plans, they can close you anytime.
Read the exact line
Terms of service
“Unless required by applicable law, your Subscription Plan payments are non-refundable, provided That. if we suspend, withdraw or terminate any Subscription Plan service at any time, we may issue a pro-rata refund”
Expand “Read the exact line” to see the source alongside the explanation.
What you can turn off
The controls and opt-outs their own documents describe, and where they say to find them.
Opt out of sale and sharing
Your Privacy Choices form (also [email protected])
Cancel a subscription
Billing page → Flowcode Plan Subscription → Cancel Plan, or [email protected]
or access
Email [email protected] (California: same; cookie settings in site footer)
If a switch is not where they say, the deletion request above still applies.
Line by line
The lines that matter most, worst first.
They get a forever license to use, change, and whatever you upload, even after you leave.
Read the exact line
Terms of service
“You hereby grant dtx an , non-exclusive, , , worldwide, transferable, right and license to access, use, reproduce, transmit, adapt, modify, perform, display, distribute, translate, publish and create derivative works based on your User Content”
For example, a photo you put on a Flowpage could be used in their ads of the Sites.
They can shut your account for any reason or none.
Read the exact line
Terms of service
“Terminate or suspend your access to all or part of any of our Sites for any or no reason, including any violation of these Terms of Use.”
For example, your Flowcodes could stop working overnight with no warning.
If someone sues them over how you used the site, you may have to pay their legal bills.
Read the exact line
Terms of service
“You agree to , and the Company, its affiliates, and its and their respective licensors, licensees, service providers, officers, directors, employees, contractors, agents, suppliers, successors, and assigns”
For example, a fight over a Flowpage you made could leave you covering their lawyers.
They and ad companies track you over time to target ads.
Read the exact line
Privacy policy
“we or they may use this information to show you ads that are tailored to your individual interests or characteristics, your prior visits to certain websites, or other information we or they know, infer, or have collected from people like you.”
For example, scanning a product QR could later show you ads for that brand on other sites.
With location permission, they can take exact location on a scan and give it to the brand.
Read the exact line
Privacy policy
“If you scan our QR Codes using a dtx mobile application or a browser through which you have given dtx a geolocation consent, dtx may also collect your precise geolocation during your scans and disclose it to Brands or Creators”
For example, scanning a poster could tell the company roughly where you were standing.
Paid plans keep charging until you cancel.
Read the exact line
Terms of service
“you are subscribing to an automatically renewing subscription requiring recurring payments at the stated frequency that you select on the Plans page”
For example, a yearly Pro plan bills again next year unless you cancel on the Billing page.
You usually cannot get money back after you pay.
Read the exact line
Terms of service
“Unless required by applicable law, your Subscription Plan payments are non-refundable”
For example, canceling mid-month typically does not refund unused days.
They say kids under 16 should not use it; terms also require you to be 18.
Read the exact line
Privacy policy
“Our Services are not directed at and should not be used by children under the age of 16.”
For example, they ask you not to put Flowcodes where children under 16 will scan them.
They claim basic security but do not promise it will work.
Read the exact line
Privacy policy
“We use various physical, technical, and organizational safeguards in an effort to protect personal information. However, no security method is perfect”
For example, they still say they cannot guarantee your data stays secure.
Words to know
Legal words from the lines above, in plain English.
- precise geolocation
- Your exact position, usually from GPS, often accurate to within a few metres. For example, an app can tell not just your city but which building you are in right now.
- consent
- Your clear agreement to something, given by an action like ticking a box or tapping Accept. For example, a pop-up asking if the app may use your location is asking for consent.
- opt out
- Something is on by default and stays on until you find the setting and turn it off. For example, your chats may be used for training unless you go into settings and switch it off.
- CCPA
- California's privacy law, which gives residents the right to see, delete and stop the sale of their data. For example, a Californian can ask the app to stop selling their data and it must comply.
- irrevocable
- Cannot be taken back or cancelled once given, even if you change your mind or delete your account. For example, an irrevocable licence to your photos means you cannot withdraw it later.
- royalty-free
- The company can use your content without ever paying you for it. For example, your photo can appear in the app's ads and you get nothing.
- perpetual
- Lasting forever, with no end date. For example, a perpetual licence means the company can keep using your video years after you leave.
- sublicensable
- The company can pass its rights over your content on to other companies without asking you. For example, an app can let an advertiser or a partner reuse your video under the licence you gave.
- indemnify
- You promise to pay the company's legal costs and losses if your use of the service gets it sued. For example, if you post a song you do not own and the label sues the app, you owe the app's lawyer bills.
- affiliates
- Other companies owned by or connected to the same parent company. For example, if you use one app, its sister apps under the same owner may also get your data.
- service providers
- Outside companies that handle your data on the app's instructions, such as a cloud host or an email sender. For example, the company that stores the app's files in the cloud sees your data but only does what the app tells it.
- personal data
- Any information that is about you or can be linked to you, from your name to your phone's ID. For example, your email, your IP address and the list of apps on your phone are all personal data.
How we got here · grade F · score 30/100 · 15 of 15 policy answers backed by a verified quote · 3 not stated
What does the app collect beyond what it needs to work?
They collect more than account and content: QR scans, IP, cookies, advertising IDs, installed apps, inferences, form fields like age and gender, and sometimes precise location.
Does it record your voice, face or body, and what happens to that?
Not stated in the documents.
Are your chats and uploads used to train AI models, and is that off by default?
Not stated in the documents.
Can employees or contractors read your conversations, and when?
Not stated in the documents.
Are you profiled or tracked for advertising?
They and third-party ad services use cookies and similar tools to track you and show interest-based ads.
Do they sell or share your data, and can you opt out?
They share with brands, vendors, affiliates, and partners, and treat some ad uses as CCPA sale/sharing with an opt-out form.
What rights do they take over what you type and what the AI makes?
You grant an irrevocable, perpetual, worldwide, transferable, sublicensable license over User Content to operate and advertise the Sites.
How long do they keep your data after you delete it, and can you delete it in the app?
Deletion is mainly by request. They plan to keep some identifiers years after a contract, login IPs several years, and payment data up to 7 years.
Does it build a lasting memory or profile of you, and can you see, edit or turn it off?
They draw inferences about interests and attributes from scans and other data, without describing user-facing memory controls.
Do they commit to basic security, and have they leaked data?
They mention physical, technical, and organizational safeguards but no independent audit or leak history.
Is there a real age gate, and are teens protected?
Sites are for users 18 or older by self-representation; privacy says not for children under 16.
Will they tell you when the rules change, and is the policy specific?
Policies are dated. Terms give at least 30 days after posting unless you accept sooner; privacy may be updated from time to time.
Can they close your account without warning, and can you get your data out first?
They may withdraw services without notice and terminate or suspend access for any or no reason.
If something goes wrong, who pays?
The service is as-is with a broad liability disclaimer, and you must indemnify them for claims tied to your use.
Do subscriptions renew on their own, and can you get a refund?
Subscriptions auto-renew. Payments are generally non-refundable except a possible pro-rata refund if they pull the service.
The privacy policy is 6,137 words at a professional or legal expert level (Flesch reading ease 2.6); the terms are 15,471 words at a professional or legal expert level.
