feat: surface privacy policy and terms in sign-in and settings

Adds an implicit-consent disclaimer under the sign-in "Continue" button
and a new "Legal" section in the settings page. Both link out to the
policies hosted on flowylabs.ai via the existing openExternal bridge.

https://claude.ai/code/session_01U6gT7XFQ8Rtm3FStsHG63j

js/src/features/auth/email-step.tsx

@@ -3,6 +3,7 @@ import { Button } from "@/components/ui/button";
 import { Input } from "@/components/ui/input";
 import { Label } from "@/components/ui/label";
 import { H3, Muted } from "@/components/ui/typography";
+import { PRIVACY_URL, TERMS_URL } from "@/lib/constants";
 import { useAuthStore } from "@/stores/auth-store";
 
 interface EmailStepProps {
@@ -56,6 +57,26 @@ export function EmailStep({ onCodeSent }: EmailStepProps) {
       <Button type="submit" disabled={isRequestingCode || !email}>
         {isRequestingCode ? "Sending..." : "Continue"}
       </Button>
+
+      <Muted className="text-center text-xs">
+        By continuing, you agree to our{" "}
+        <button
+          type="button"
+          onClick={() => window.electronLink.openExternal(TERMS_URL)}
+          className="underline underline-offset-2 hover:text-foreground"
+        >
+          Terms of Service
+        </button>{" "}
+        and{" "}
+        <button
+          type="button"
+          onClick={() => window.electronLink.openExternal(PRIVACY_URL)}
+          className="underline underline-offset-2 hover:text-foreground"
+        >
+          Privacy Policy
+        </button>
+        .
+      </Muted>
     </form>
   );
 }

js/src/features/settings-page.tsx

@@ -1,6 +1,6 @@
 import { useEffect, useState } from "react";
 import { useNavigate } from "react-router-dom";
-import { ChevronRight, LogOut, User, Info, Shield, Mail, Mic, LifeBuoy } from "lucide-react";
+import { ChevronRight, LogOut, User, Info, Shield, Mail, Mic, LifeBuoy, FileText } from "lucide-react";
 import { Avatar, AvatarFallback } from "@/components/ui/avatar";
 import { Separator } from "@/components/ui/separator";
 import { Switch } from "@/components/ui/switch";
@@ -11,7 +11,7 @@ import { ScrollArea } from "@/components/ui/scroll-area";
 import { CopyableEmail } from "@/components/copyable-email";
 import { useAuthStore } from "@/stores/auth-store";
 import { apiClient } from "@/api/client";
-import { SUPPORT_EMAIL } from "@/lib/constants";
+import { PRIVACY_URL, SUPPORT_EMAIL, TERMS_URL } from "@/lib/constants";
 import { ArrowLeft } from "lucide-react";
 
 interface SettingsRowProps {
@@ -167,6 +167,21 @@ export default function SettingsPage() {
 
         <Separator className="mt-4" />
 
+        <SettingsGroup title="Legal">
+          <SettingsRow
+            icon={<Shield className="size-4" />}
+            label="Privacy Policy"
+            onClick={() => window.electronLink.openExternal(PRIVACY_URL)}
+          />
+          <SettingsRow
+            icon={<FileText className="size-4" />}
+            label="Terms of Service"
+            onClick={() => window.electronLink.openExternal(TERMS_URL)}
+          />
+        </SettingsGroup>
+
+        <Separator className="mt-4" />
+
         <SettingsGroup title="Contact us">
           <div className="flex w-full items-center gap-3 px-4 py-3">
             <span className="text-muted-foreground flex size-5 items-center justify-center">

js/src/lib/constants.ts

@@ -5,3 +5,6 @@ export const MAX_ATTACHMENT_SIZE_BYTES = 25 * 1024 * 1024;
 export const MAX_ATTACHMENTS = 10;
 
 export const SUPPORT_EMAIL = "team@flowylabs.ai";
+
+export const PRIVACY_URL = "https://flowylabs.ai/llink/privacy";
+export const TERMS_URL = "https://flowylabs.ai/llink/tos";