FLOW / PRIVACY

Privacy

Last updated 4 October 2026

This notice covers the Flow websites: flowking.life, flowos.world, noahnuru.com, flowspace.world and flowvault.shop. They are run by Noah Nuru, an individual operating as Flow, who decides how your data is used (the data controller). Questions or requests: hello@noahnuru.com.

The short version: we collect what you give us to deliver what you asked for. We don’t sell your information, and signing up for one thing doesn’t sign you up for anything else.

What we collect

• Free Bottleneck Check. Your answers, an optional first name, and your email only when you ask us to send your report. We also record progress and delivery events. Your answers are processed by an AI model to write your result. The check has its own notice with more detail: Bottleneck Check privacy.
• Support chat. Guide searches stay in the current tab. If you agree to save a conversation, we store its questions, replies and consent time in the existing Flow support system. This browser tab stores a private access key and any submission awaiting confirmation. An email claim does not link account or order history. Chat content is excluded from website analytics.
• Applications. Your name, email and main bottleneck. If you complete step two: what you’re building, the result you want, the support level and your readiness to invest.
• Waitlists and interest forms. Your email, an optional name, the offer or item you chose, and, for priced offers, that you acknowledged the price and whether you’d buy within 90 days. We store the time you agreed to be contacted.
• Where you came from. Campaign tags in the link you used, the page you landed on and the site that referred you, so we know which posts and pages bring people.
• Analytics, only if you allow it. Page visits and clicks. Analytics never include your Audit answers, name or email.
• Security. Your IP address is used briefly to limit repeated submissions and sign-in attempts; the limit counters store a one-way hash of the address, not the address. Our hosting provider keeps standard request logs.
• Email opt-outs. If you unsubscribe from Flow marketing emails, we keep a one-way hash of your address so we don’t email you again.

Please don’t send passwords, customer records, payment details or medical information in any form.

How we use it

• To generate and send your Audit and let you reopen it.
• To confirm and review your application and reply if there’s a fit.
• To email you once when an offer or item you chose opens.
• To understand, in aggregate, which pages and posts are useful.
• To keep the sites secure and working.

We don’t add you to the Flow Letter unless you subscribe to it yourself. The Flow Letter runs on Substack, and you can unsubscribe from any issue.

AI. Free Bottleneck Check answers are processed by an AI model to write your result. The result is a starting point to think with, not professional advice.

Legal basis (EU and UK visitors)

We use analytics only with your consent, which you can withdraw at any time in the footer privacy controls. We process what you send through a form (the Free Bottleneck Check, an application, a waitlist) to do what you asked: that is necessary to take the steps you requested before any contract, or is in our legitimate interest in replying to and reviewing requests you chose to send. Security logs and rate limits rely on our legitimate interest in keeping the sites working and safe.

Who processes it

Cookies and local storage

• flowking.life sets no cookies for visitors, before or after you choose about analytics. Your analytics choice is saved in your browser’s local storage (flow.analytics.consent.v1). If you allow analytics, a random session ID is kept in session storage (flow.analytics.session.v1) until the tab closes. The campaign tags of the link you arrived on are kept in session storage (flowking_attribution_v1) so a form you send records where you came from. The support chat keeps its keys in session storage, as described above.
• Admin and invites. A signed sign-in cookie (fk_admin) is set only for Noah’s admin access. Approved community members joining Discord get two short-lived cookies (fk_join_state, fk_join_token) for ten minutes during the join.
• flowos.world, noahnuru.com, flowspace.world and flowvault.shop are served by our Sites host behind Cloudflare, which set __Host-appgarden-visitor, __cf_bm and cf_clearance to run and protect those sites. Analytics there use the same consent controls.
• Substack sets its own cookies and trackers when you read or subscribe to the Flow Letter there.

How long we keep it

Audit answers saved on your own device are kept there for up to seven days. Free Bottleneck Check records, Audit reports, applications and waitlist entries are kept until you ask us to delete them or we no longer need them to provide what you asked for. You can delete a saved Free Bottleneck Check yourself from its management link. Leaving a waitlist with the link in a waitlist email deletes your waitlist entry. Flow also keeps one customer record per email address (the email, and a name if you gave one) that links the forms you have used across the Flow sites; leaving a waitlist does not delete that record, but you can ask us to. Rate-limit counters hold only a one-way hash and stop counting when their window ends; expired counters are cleared as new requests arrive. Email opt-outs are kept as long as we need them to honour your choice.

Saved chat access expires 30 days after creation. The daily cleanup removes its message content; a minimal case record remains for operational accounting. You can remove the message content sooner with Delete conversation. Browser access and any unconfirmed submission remain in session storage until you clear the tab’s support session or your browser removes it. Hosting and database backups follow their existing retention settings.

FK AI is off by default. When enabled, only approved public Flow information and the questions in your own conversation are sent to the configured model provider. The guide itself does not make model calls. Private founder context and other customers’ history are not part of chat answers.

Your choices

• Ask for a copy, a correction or deletion of your information by emailing hello@noahnuru.com. We reply within 30 days.
• Delete a saved Audit from its management link.
• Change your analytics choice at any time with the privacy controls in the site footer.
• Leave a waitlist with the link in a waitlist email, or by emailing hello@noahnuru.com.
• Unsubscribe from Flow marketing emails with the link at the bottom of any of them.

Children

The Flow websites are for adults running a business or career. They aren’t intended for anyone under 18.

Changes

If we change how we handle information, we’ll update this page and the date above.