Privacy policy

Who is responsible

Flowspace, based in the Netherlands, operates Blendspace and is responsible for the personal information described in this policy. Contact us at appsbyflow@gmail.com for privacy questions or requests.

If your club or organisation provides your workspace, it also decides who can use that workspace and how its content is shared. Contact your workspace owner about their own use of your information.

Information we process

• Accounts and workspaces: your account or workspace name, sign-in credentials, account identifiers, role, permissions, membership, credit balance and usage. We may also hold contact details supplied by you or your workspace owner.
• Content you provide: photos, player images, logos, kits, watermarks, templates, fonts, prompts, agent messages and other files or text you choose to upload or enter. Images may contain identifiable people.
• Your work: generated and edited images, generation settings, presets, saved assets, selected clubs and matches, and generation history.
• Support and reports: your email address, messages, attachments and the image or reason you submit when reporting content.
• Technical information: request timestamps, IP addresses and device/browser information received by our hosting and service providers, together with error, security and processing logs used to operate the service.
• Web purchases: purchase amounts, transaction references and credit records if you buy through the web service. Stripe processes payment details. The mobile apps do not offer credit purchases.

How we use information

We use this information to sign you in, manage workspace access, store and display your work, generate or edit graphics, fulfil your requests, track credits, answer support requests and investigate reported content. We also use operational information to keep the service reliable, prevent abuse and meet legal obligations.

Where European data protection law applies, we rely on performance of our agreement with you for the services you request; our legitimate interests in security, reliability and support; legal obligations for required records; and consent where it is required. You can withdraw consent by contacting us, without affecting processing that was lawful before withdrawal.

AI features and service providers

AI features process information outside your device. Image generation and remixing send the prompt and selected reference images to fal.ai and the model providers serving the selected model. The agent and AI-assisted analysis send relevant text and images to Google’s Gemini service. When the agent searches the web, search queries may be processed by Google. Avoid including private information that is unnecessary for the task.

We use the following services as needed for the feature you use:

• Supabase for backend services, records, and file storage.
• Cloudinary for image upload, storage, transformation and delivery.
• fal.ai and its model providers for image generation; Google Gemini for the agent and image/template analysis.
• Firecrawl and search or source websites for requested web and image lookups.
• Photopea for Live template rendering, with supporting resources downloaded from external content-delivery services. Local rendering features may measure face position to frame a portrait; Blendspace does not use that measurement to identify or authenticate people.
• Vercel for the commercial website, Stripe for web payments, and Google’s email service for support correspondence.

Providers receive the information needed for their service and may keep operational or safety records under their applicable terms. Blendspace does not train its own AI models on your content.

Sharing and image links

Workspace owners and authorised members may see shared galleries and assets according to the workspace’s settings. Administrators may access relevant records to provide support, operate the service or investigate abuse. We may disclose information when required by law or to protect people and the service.

Ordinary uploaded and generated images use delivery URLs. Someone who has an image URL may be able to view the image without signing in, even when it is listed in a workspace gallery. Do not upload confidential material that requires strictly private file delivery. Live source templates use separate, access-controlled storage.

Saving to your device or using Share sends the image to the destination you choose. That destination’s privacy practices then apply. We do not sell personal information or use it for targeted advertising.

Device permissions and local storage

The mobile app uses your system photo picker for images you choose and requests permission where required to save images to Photos. You can change permissions in your device settings. The app does not need your contacts or precise location.

We store sign-in state and preferences on your device so you can remain signed in. Signing out removes the app’s saved sign-in state. The web studio uses browser storage for similar functions. Hosting providers may receive ordinary request logs when pages or images load.

Retention and deletion

We retain account and workspace records and saved content while they are needed to provide the service, including keeping work available across devices. Operational and security records are retained for the purposes for which they were collected. Payment or legal records may need to remain for the period required by applicable law.

You can request deletion of your account, content or other personal information at appsbyflow@gmail.com. Please identify your workspace and the data to remove; never send your password or pincode. We may ask you to verify ownership before acting. We will explain any information we need to retain and why. Copies in backups, caches or provider systems may remain until their retention cycle ends; copies independently saved by other people are outside our control.

Removing an item from a gallery does not necessarily remove every stored or cached copy. Contact us when you need deletion of the underlying files. See deletion instructions.

International processing and protection

Our service providers may process information in the European Economic Area, the United States and other countries where they operate. Data protection rules can differ between countries. Contact us for information about the providers, processing locations and transfer safeguards applicable to your data.

We use encrypted network connections and access controls to protect information. No service can guarantee absolute security; image delivery links have the sharing limitations described above.

Your rights

Depending on where you live, you may have rights to access, correct, delete or receive a copy of your personal information, restrict processing, object to processing based on legitimate interests, or withdraw consent. Email appsbyflow@gmail.com to exercise those rights. You may also complain to your local data protection authority. We respond within the time required by applicable law.

Children and other people’s information

Blendspace is intended for football content creators and organisations, not children under 13. If you believe a child has provided personal information without appropriate permission, contact us. Upload photos and other personal information only when you are entitled to use them, particularly images of children.

Changes and contact

We update this page when our data practices change and revise the effective date. We will provide additional notice where required. For privacy and support requests, contact appsbyflow@gmail.com.