Your media.
Your device.

1. Who we are

SubFlow is developed by Bo Xing. This policy covers the SubFlow iOS/iPadOS app, this website, and support communications. For privacy questions, contact boxing.support@gmail.com.

2. Processing on your device

Speech recognition and supported Apple translation use on-device models. Media decoding, subtitle generation, editing, and subtitle file export are performed on your device. We do not operate a backend that receives your audio, video, or generated subtitles.

The app stores information needed for its features locally, including media you import, file access permissions/bookmarks, saved sources, playback history, preferences, subtitle tracks, translations, queue progress, and caches. Server credentials and API keys are stored in the system Keychain. Some features require model downloads or files to be retrieved from a file provider before local processing can begin.

3. API services you choose

If you configure and enable a bring-your-own-key (BYOK) service, SubFlow sends subtitle text and necessary context to the endpoint you select for translation or sentence refinement. Requests use the API key you provide for authentication. This feature does not send your audio or video.

The selected provider may receive connection information, including your IP address, and may retain or process requests according to its own policies. Its terms, privacy practices, and fees apply. Review those policies before enabling a service, and avoid sending text you do not want that provider to receive. To stop using the service, select Apple translation, turn off LLM sentence refinement, and stop any active processing or playback. You can revoke your API key directly with the provider.

4. Files and network media sources

When you open content from Apple Files or a file provider, that provider handles any download or cloud access under its own policies. When you connect a WebDAV, SMB, FTP/FTPS, Emby, or Jellyfin source, SubFlow sends access requests and necessary authentication information to the server you configure. That server can see the requested paths and normal connection information.

SubFlow reads and plays remote media; it does not offer remote upload, rename, or deletion. We do not receive your server credentials or proxy your media through our servers. The security of a connection depends on the protocol and server you choose; use protected connections where available.

5. Purchases and subscriptions

Apple processes purchases, renewals, and refunds through the App Store. SubFlow reads Apple-verified transaction and subscription information to determine whether Pro features are available. We do not receive your payment card details. Apple may provide developers with sales and financial reports through App Store Connect. Apple’s handling of purchase information is governed by Apple’s privacy policy.

6. Permissions

SubFlow may request access relevant to speech recognition, local network connections, or files and folders you choose. It processes audio from your media files and does not use the microphone to record you. The app does not request access to your camera, contacts, or location. You can manage available permissions in system Settings; declining a permission may prevent the related feature from working.

7. This website and support email

This static website is hosted on GitHub Pages. It does not use analytics scripts, advertising cookies, tracking pixels, or external fonts. GitHub may process visitor IP addresses and technical request information to deliver and secure the site. See GitHub’s privacy statement. Following a link to Apple or another service is subject to that service’s policies.

If you email support, we receive your email address, message, and any attachments you choose to send. We use them to respond to your request and investigate the issue. Support mail is handled through Gmail, subject to Google’s privacy policy. Please do not send sensitive media, passwords, API keys, or payment details. We do not use support messages for advertising or sell them.

8. Retention and your choices

You can manage or delete imported files and saved subtitles in the app and remove saved media sources you no longer use. Removing a home shortcut alone does not remove the saved source. Removing a saved network source also removes its stored credentials. Uninstalling the app removes data in its local app container; exported files, original media, provider copies, device backups, and Keychain entries are handled separately. Keychain entries may remain after uninstalling. To invalidate a BYOK API key, revoke it with the provider; leaving the API key field empty in SubFlow keeps the previously saved key. Files exported elsewhere must be deleted at their destination.

If device backup is enabled, the operating system may include eligible app data in your device backup; manage backups through Apple’s settings. Deleting the app does not cancel an App Store subscription.

Support correspondence is retained only as needed to handle the request and related follow-up, or as required by law. You can request access, correction, or deletion of information you supplied to support by emailing boxing.support@gmail.com. Depending on where you live, additional privacy rights may apply. We cannot retrieve local-only app data from your device, and deletion requests for a provider’s own records must be directed to that provider.

9. Children’s privacy

SubFlow does not require personal information or an account for local playback and subtitles. We do not knowingly collect children’s personal information through support communications. If you believe a child has provided personal information to us, contact us so we can address it and delete it as appropriate.

10. Changes and contact

We may update this policy when the app or our practices change. The revision date at the top identifies the current version. Material changes will be communicated through this website or the app as appropriate. For questions or requests, contact Bo Xing at boxing.support@gmail.com.