Privacy policy.
We built AI Reply Assistant to handle your messages without a server in the middle. This page explains what that means in practice — and what the third parties you connect through AI Reply Assistant do see.
Effective date: 26 April 2026
What this policy covers
This policy describes how Flowbie PTE. LTD. handles personal data when you use the AI Reply Assistant iOS app and the website at flowbie.sg.
Flowbie, we, and our mean Flowbie PTE. LTD. (UEN 202521628Z), a Singapore company at 60 Paya Lebar Road, #07-54 Paya Lebar Square, Singapore 409051.
The app means the AI Reply Assistant for iOS, available on the App Store for iOS 26 and Apple Intelligence-capable iPhones.
The website means flowbie.sg, a static marketing site hosted on Netlify. The website does not use cookies and does not run any first-party analytics. Netlify, our hosting provider, may keep short-lived edge-server logs (IP, user agent, request URL) for security and delivery purposes. We do not access or analyse those logs to track you.
Our position, in plain English
Flowbie does not run a server that sees your messages. Your messages, contacts, and AI prompts stay on your iPhone — except when you explicitly send them to a third party you have chosen.
- 01No middle-layer server.
The app does not proxy, store, or relay your messages through any backend we operate. WhatsApp connections go directly from your device to Meta. Telegram connections go directly to Telegram. Claude requests, when you opt in, go directly from your device to Anthropic.
- 02No data collection by us.
We do not maintain a user database. There are no accounts, profiles, or message archives on our side. We could not produce your messages on subpoena because we never receive them.
- 03On-device by default.
AI Reply, Smart Reply, Analyze, and Quick Reply use Apple Foundation Models, which run on-device on Apple Intelligence-capable iPhones. You only send anything to the cloud if you turn on Cloud Model with your own Anthropic API key — and even then, only for the chats you have explicitly approved.
What we do not collect
None of the following leaves your device on a request to a Flowbie server, because there is no Flowbie server.
- Message contents, attachments, or media (WhatsApp, Telegram, or otherwise).
- Message metadata: senders, recipients, timestamps, chat names.
- Your contacts or address book.
- Your location, IP address, or device identifiers (beyond what Apple already exposes to every App Store app).
- Advertising identifiers. We do not advertise and we do not track.
- Browsing history, app usage analytics, or behavioural telemetry.
- Your Anthropic API key, your prompts, your drafts, or your replies.
We do not maintain a user database. We do not require an account to use the app.
What stays on your device
Everything you do in AI Reply Assistant stays on your iPhone, encrypted at rest by iOS data-protection classes.
- WhatsApp messages, contacts, and session credentials, kept by the on-device Whatsmeow bridge.
- Telegram messages, contacts, and session credentials, kept by the on-device TDLib library.
- Skills, AI Reply settings, tone presets, and your Skill library.
- Conversation history and the message context used by AI features.
- Transcripts of your Claude sessions, when Cloud Model is enabled.
- Your Anthropic API key, stored only in iOS Keychain.
If you have iCloud Backup enabled in iOS Settings, Apple may include a portion of this data in your encrypted iCloud backup. The app also supports optional iCloud sync via Apple CloudKit so your settings and library can move between your own devices. In both cases, the data sits in your Apple iCloud account — not on a Flowbie server. Apple, not Flowbie, manages and controls iCloud. We have no access to it.
Third-party data flows
When you use AI Reply Assistant, your device talks directly to four kinds of third-party services. Their privacy policies — not ours — govern what they receive.
The app embeds the open-source Whatsmeow bridge to talk to WhatsApp. Your phone connects directly to Meta’s WhatsApp servers using the same protocol used by WhatsApp’s official client. Your messages, contacts, and call metadata are subject to Meta’s privacy policy. Flowbie is not affiliated with WhatsApp or Meta. Use of an unofficial client may be restricted by WhatsApp’s terms, which you remain bound by.
The app embeds Telegram’s official open-source TDLib library. Your phone connects directly to Telegram. Your messages, contacts, and call metadata are subject to Telegram’s privacy policy. Flowbie is not affiliated with Telegram.
AI Reply, Smart Reply, Analyze, and Quick Reply run on Apple Foundation Models on-device. The model never leaves your iPhone, and neither does the prompt or the reply. The app also uses standard Apple frameworks for notifications, Siri, and — if you enable it — iCloud sync. All of these are governed by Apple’s privacy policy.
You may turn on Cloud Model and provide your own Anthropic API key. When you do, requests go directly from your iPhone to Anthropic’s API. Your key is stored in iOS Keychain and is never transmitted to Flowbie. We never see your key, your prompts, your drafts, or your bill. Your usage is billed by Anthropic on your own account; your relationship with Anthropic is governed by Anthropic’s terms.
Turning on Cloud Model does not grant Claude access to all of your messages. You pick the specific chats Claude is allowed to read. Every Cloud Model request is checked on-device against your selected list before it leaves your phone; chats outside the list are never sent. You can revoke or change the selection at any time inside the app.
Children
Flowbie is not directed at users under 13.
The app is rated for users aged 13 and above on the App Store. We do not knowingly process personal data of children under 13. If you believe a child has provided personal data through the app, contact us at support@flowbie.sg and we will help.
Security
We rely on iOS to keep your data safe — because the data lives on iOS, not on us.
- Secrets, including your Anthropic API key, are stored in iOS Keychain.
- Other on-device data is protected by iOS standard data-protection classes.
- All third-party network traffic uses TLS, as enforced by the platform SDKs.
- We do not operate any server that holds your data, so we cannot be the source of a server-side data breach of your messages.
If you opt in to Apple’s standard iOS diagnostics in Settings, Apple may share aggregated, de-identified diagnostic data and crash logs with us through App Store Connect. We do not run any third-party crash-reporting or analytics SDK inside the app.
Your rights under Singapore PDPA
You have rights to access, correct, and withdraw consent for personal data we hold about you. Because we hold none, most of these rights resolve the same way: there is nothing for us to disclose, correct, or delete.
If you believe we hold personal data about you, you may write to support@flowbie.sg. We will respond within the timeframes set by the Personal Data Protection Act 2012.
To exercise data-subject rights against the third parties listed in section 05 — Meta, Telegram, Apple, or Anthropic — please contact those companies directly. We cannot act on your behalf with them.
If you are unsatisfied with our response, you may lodge a complaint with the Personal Data Protection Commission (PDPC) of Singapore at pdpc.gov.sg.
International data transfer
Some of the third parties you connect through AI Reply Assistant process data outside Singapore.
Anthropic processes API requests in the United States. If you turn on Cloud Model, the chats you have approved are transmitted from your device to Anthropic in the US. This transfer happens between you and Anthropic; we are not a party to it.
Meta and Telegram operate global infrastructure; their privacy policies cover their cross-border transfers.
Apple Foundation Models run on your device. There is no cross-border transfer for on-device AI features.
We ourselves do not transfer your personal data anywhere, because we do not collect it.
Changes to this policy
We may update this policy. When we do, we will revise the effective date at the top.
Material changes — for example, if we ever introduced a backend service or began collecting personal data — will be highlighted on this page and announced inside the app before they take effect.
Contact
We are easy to reach.
- Email: support@flowbie.sg
- Post: Flowbie PTE. LTD., 60 Paya Lebar Road, #07-54 Paya Lebar Square, Singapore 409051
- UEN: 202521628Z