Privacy policy
What information Flow2Code collects, why, who it's shared with, and how you can see or delete it.
Last updated: 4 October 2026
1. The short version
Flow2Code is a website where school and college students learn programming by building flowcharts. You can use it without an account: then your programs stay in your own browser and nothing about you is sent to us.
With an account, we keep only what we need to run it: your name, your email address (or a username your school made), the programs you save, your progress in challenges and, if you pay, a record of what you bought. We never see or keep your card, UPI or bank details.
We don't sell your information, we don't show advertising, and we don't use analytics or advertising trackers. We share information only with the companies that help us run the service (listed below), only for that purpose.
You can ask to see, correct or delete your information at any time by writing to support@flow2code.app.
2. Who we are
Flow2Code (flow2code.app) is run by TechTrise Solutions, G Floor, KCT Tech Park, Forge Factory, 3 Athipalayam Rd, Chinnavedampatti, Coimbatore 641049, Tamil Nadu, India ("we", "us"). We decide how your information is used and are responsible for it.
For anything about privacy, including requests and complaints, write to support@flow2code.app. This address also reaches our grievance officer.
This policy covers the website, the editor at /build, accounts, the institution and admin areas, and payments. It applies wherever you use Flow2Code from.
3. Using Flow2Code without an account
You can build, run and share programs without signing up. The programs you build, the tabs you have open, the steps of the getting-started guide and similar preferences are saved in your browser's own storage on your device (local storage). They are not sent to us, and they stay until you clear your browser's data.
If you download a program, the file goes to your device. Nothing is uploaded.
4. Information we collect with an account
Account details: your name, your email address, and whether you signed up as a student or to set up an institution. If you sign up with an email address and password, your password is stored only as a secure one-way hash, so nobody (including us) can read it. When you sign up we email you a code to confirm your address.
Google sign-in: if you choose "Continue with Google", Google shares your name, your email address and a Google account identifier with us (the basic "openid", "email" and "profile" permissions), plus your profile picture address if you have one. See "Google user data" below.
School logins: a school, college or institute can create logins for its students who don't have an email address. For these we keep the student's name, a username and the institution they belong to. They have no email address of their own; the institution resets their password.
What you make and do: the programs you save to your account (their name and blocks), whether you share a program with a link, the challenges you have passed, and the plan you are on. If you create examples or challenges as an admin, we keep those too.
Institutions: if you set up or run an institution, we keep its name, type, city and school code, its members and their roles (admin, teacher or student), its student licences, and the email addresses of people it has invited until they join or the invitation expires.
Payments: if you buy Pro or student licences, we keep a record of the order: the plan, the period or number of licences, the amount and currency, the dates it covers, its status, and the order, payment and subscription reference numbers from our payment provider. Your card, UPI, net-banking or wallet details are entered on Razorpay's secure payment page and are never sent to or stored by us.
AI hints: Pro students can ask for an "Explain my mistake" hint on a challenge. We keep a count of how many hints each account has asked for (to keep the service fair), but not the hints themselves.
5. When you contact us
If you send us a message through the Contact page, we keep your name, email address, phone number (if you give one), what it's about and your message, and whether you were signed in, so we can reply and keep a record of the conversation. You don't need an account to contact us.
To stop automated spam, the form includes checks that people don't notice: a hidden field, the time the form was open, and a limit on how many messages can be sent in an hour. For that limit we keep a one-way scrambled code made from your internet address, never the address itself. If the "I'm not a robot" check is shown, it is provided by Cloudflare Turnstile, which looks at technical signals from your browser to tell people from bots.
6. Information collected automatically
Sign-in cookies: when you sign in, small cookies keep you signed in as you move between pages. They are needed for your account to work. We do not use advertising or analytics cookies, and there are no third-party trackers on the site.
Your country: to show prices in the right currency (rupees in India, US dollars elsewhere), our hosting provider tells our server which country a visit comes from, based on its internet address. We use it for that page only and don't store it.
Server logs: like any website, our hosting provider (Vercel) automatically records technical details of each request, such as the internet (IP) address, browser type, the page requested and the time, to deliver the site, keep it secure and fix problems. These logs are kept for a short time by the provider and are not used to identify or profile you.
7. How we use your information
To provide the service you asked for: creating and signing in to your account, saving and opening your programs, showing your challenge progress, letting you share programs, running institutions (members, invitations, school logins and licences) and giving you the plan you paid for.
To take payments and manage subscriptions: creating the order, confirming the payment with our payment provider, renewing or cancelling a subscription, and keeping records we must keep by law.
To give AI hints when you ask for one (see "AI hints" below).
To send you emails you need: sign-up and sign-in codes, password resets, invitations to an institution and payment confirmations, and to reply to messages you send us. We don't send marketing emails unless you have asked for them.
To keep Flow2Code safe and working: preventing abuse and fraud, limiting how often some features can be used, fixing errors, and keeping a log of changes made in the admin area.
We process your information because it is needed to provide the service you signed up for, with your consent (which you can withdraw), to meet legal obligations such as tax records, and for the legitimate purpose of keeping the service secure. We do not use your information for advertising, and we do not make decisions about you by automated means that have legal or similarly significant effects.
8. Google user data
If you sign in with Google, we receive only your basic profile information from Google: your name, your email address, your Google account identifier and your profile picture address. We do not ask for, and cannot see, your Google password, Gmail, contacts, Drive files, calendar or any other Google data.
We use this information only to create your Flow2Code account, sign you in, and show your name in your account (and, if you belong to an institution, to its admins and teachers). If an account with the same email address already exists, signing in with Google opens that account.
We do not sell Google user data, use it for advertising, or use it to train artificial intelligence or machine-learning models. We do not share it with anyone except the service providers listed below that we need to run your account (for example, our database provider stores it), and when the law requires it.
Flow2Code's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
You can remove Flow2Code's access to your Google account at any time from your Google Account settings (Security → Third-party apps with account access). To delete the information we received from Google, ask us to delete your account at support@flow2code.app.
9. AI hints
When a Pro student presses "Explain my mistake" on a challenge, we send OpenAI the challenge's goal and hints, the student's program (as the code Flow2Code shows in View Code) and which test runs passed or failed, and get back a short hint. We do not send the student's name, email address or any account details.
Under OpenAI's terms for business use of its API, what we send is not used to train OpenAI's models. Admins can also use OpenAI to draft new challenges; that involves only the challenge text, never information about students.
12. Children and students
Flow2Code is made for school and college students, so some of our users are children. We collect only what is needed to run their account, we never show them advertising, and we do not track or profile them.
A student under 18 may use Flow2Code without an account at any time. To create an account, a student under 18 must have the consent of a parent or guardian, or use an account set up by their school, college or institute, which is responsible for obtaining any consent needed for its students.
A parent or guardian can ask to see, correct or delete their child's information by writing to support@flow2code.app. If we learn that we hold a child's information without the consent required, we will delete it.
13. Where your information is kept and how we protect it
Your information is stored with our service providers on secure cloud servers, which may be located in India or in other countries. Wherever it is kept, it is protected as described in this policy.
We protect it with encrypted connections (HTTPS) for everything sent between your browser and us, passwords stored only as secure hashes, database rules that let each person see only their own data (and an institution only its own members), restricted access for our team, and payment details that never reach our servers.
No system is perfectly secure, but we work to protect your information. If a breach affects your personal information, we will tell you and the authorities as the law requires. To report a security concern, write to support@flow2code.app.
14. How long we keep it
Account information, saved programs and progress: for as long as your account exists. When you ask us to delete your account, we delete them within 30 days, apart from what we must keep by law.
School logins: until the institution removes them (which deletes the login and its work) or asks us to delete them.
Invitations: until they are accepted, cancelled or expire.
Messages sent through the Contact page: for up to 2 years after we last reply, then deleted, unless you ask us to delete them sooner.
Payment and order records: for as long as tax and accounting laws require us to keep them, even after an account is deleted.
AI hint counts: for up to 12 months. Server logs: for a short period set by our hosting provider.
15. Your rights and choices
You can see and correct your name in your account at any time, download any of your programs as a file, stop sharing a program, and cancel a subscription from My Account.
You can also ask us to: give you a copy of your information; correct anything that's wrong; delete your account and information; withdraw your consent; or nominate someone to act for you if you can't. Write to support@flow2code.app from the email address on your account (or, for a school login, ask your institution). We will reply within 30 days, and may need to confirm it's you first.
Depending on where you live, data protection law (such as India's Digital Personal Data Protection Act, 2023, or the GDPR in Europe and the UK) may give you further rights, including the right to object to some processing and to complain to a data protection authority. If you have a concern, please write to us first so we can try to put it right.
16. Changes to this policy
If we change this policy, we will update this page and the date at the top. If a change is significant, we will also tell you by email or on the site before it takes effect.
17. Contact us
Questions, requests or complaints about privacy: support@flow2code.app. We aim to reply within a few working days, and always within 30 days.
Post: TechTrise Solutions, G Floor, KCT Tech Park, Forge Factory, 3 Athipalayam Rd, Chinnavedampatti, Coimbatore 641049, Tamil Nadu, India.
Phone: +91 77083 12221 (Monday to Friday, India time). You can also use the form on our Contact page.