Privacy policy.

Flowbie, we, and our mean Flowbie PTE. LTD. (UEN 202521628Z), a Singapore company at 60 Paya Lebar Road, #06-28 Paya Lebar Square, Singapore 409051.

The app means the AI Reply Assistant app for iPhone and iPad running iOS 26 or later.

The website means flowbie.sg, a static marketing site hosted on Cloudflare Pages. The website does not use cookies and does not run any first-party analytics. Cloudflare, our hosting provider, may keep short-lived edge-server logs (IP, user agent, request URL) for security and delivery purposes. We do not access or analyse those logs to track you.

The updates service means the small API at api.flowbie.sg that records an email address if you opt in to product updates, covered in section 05. It never receives message data of any kind.

The AI service means the API at ai.flowbie.sg, used only if you buy AI Credit rather than bringing your own Anthropic API key. It forwards your Claude requests and keeps a record of what you bought and what each request cost, covered in section 06.

The measurement service means the API at metrics.flowbie.sg, which counts app-lifecycle events so we can tell how many people get the app working, covered in section 07. It never receives message data of any kind, and it never receives your email address. It does record which plan you are on and, if you subscribe, which plan you bought and which limit prompted it — but never who you are, and we do not match it to your AI Credit records or to anything Apple tells us about a purchase.

Those three are the only services we operate that store personal data. They are separate deployments with separate databases and separate credentials, so none of them can reach another’s data.

1. 01
   Your messaging accounts never touch our servers.

   WhatsApp connections go directly from your device to Meta. Telegram connections go directly to Telegram. Instagram and Messenger connections go directly from your device to Meta. We do not proxy, store, or relay any of it. The one thing that can pass through a server we operate is a Claude request, and only if you choose AI Credit instead of your own API key — see the next principle.

2. 02
   We do not keep your messages.

   We hold no messages, no contacts, and no chat archives. Two things reach us only if you ask for them: an email address, if you sign up for product updates (section 05); and, if you buy AI Credit, the text of the specific Claude request you make — which passes through our server to Anthropic and is not written down. What we record for that request is how many tokens it used and what it cost, never its content. If you use Report a Problem and choose to include an AI answer, that text reaches us in the email you send (section 03). A third thing reaches us without being asked for: a short list of app-lifecycle counts, described in section 07, which say whether the app is working and contain nothing you wrote. We could not produce your messages on subpoena because we do not keep them.

3. 03
   Apple Intelligence by default.

   Smart Reply, Agent, Chatbot, Unread Summary, AI Writer, Writing Tools, Split Bill, Poll from Photo, From Message and poll options run on Apple Intelligence: on your iPhone, or on Apple's Private Cloud Compute when the system uses it. A feature runs on Claude only after you set Claude up, with your own Anthropic API key or with prepaid AI Credit, and then only if you choose Claude for that feature in Settings › AI Features, or while Apple Intelligence is not available on your device. With your own key the request goes straight to Anthropic; with AI Credit it goes through our server first. What is sent is what that feature works on, as section 06 lists.

• Message contents, attachments, or media (WhatsApp, Telegram, Instagram, Messenger, or otherwise).
• Message metadata: senders, recipients, timestamps, chat names.
• Your contacts or address book.
• Your location, or any identifier Apple assigns to your device or Apple Account — no IDFA, no IDFV, no advertising identifier. The app does generate one random ID of its own for the install measurement described in section 07; it is not your device identifier, and we do not link it to your Apple Account or to you.
• Advertising identifiers. We do not advertise and we do not track you across other apps or websites.
• Browsing history, or any telemetry derived from your messages, contacts, or what you write. The app-lifecycle events in section 07 are the only usage data we receive, and none of them contains anything you typed.
• Your Anthropic API key, if you use one. It stays in iOS Keychain and is never transmitted to us.
• The content of your prompts, drafts, or replies. AI Credit requests pass through our server to reach Anthropic, but are not logged or stored there.

We do not require an account to use the app. Every messaging and AI feature works without one, including Claude with your own Anthropic API key. The single exception is AI Credit, which needs Sign in with Apple so that credit you have paid for survives a reinstall — see section 06.

So the personal data we can hold is limited to three things. Two are entirely up to you: an email address, so we can send you product updates (section 05); and an AI Credit balance with the purchase and usage records behind it (section 06). The third is the install measurement in section 07, which is on for everyone — it carries no message data, no contacts and nothing you typed, and it is the only one of the three you do not switch on yourself.

Report a Problem is the one thing outside those three. Under an answer an AI wrote, it opens your mail app with a draft email to [email protected]. The app sends nothing: you write and send the email. The draft names the feature, which AI wrote the answer when the app knows, and the app and iOS versions. The text of the answer is in the draft only if you choose to include it, and is cut at 4,000 characters. Whatever you send is held in our support mailbox like any other email we receive, and we read it to look into the problem.

One qualification to the list above concerns your IP address. Cloudflare, which hosts our services, handles the network address of each request in order to deliver it, and may keep short-lived logs (section 01). The AI service and the updates service also hold the address for about two minutes, as the key of a counter that limits how many requests one address can make per minute. Our code uses it for nothing else, and the measurement service never reads it.

• WhatsApp messages, contacts, and session credentials, kept by the on-device Whatsmeow bridge.
• Telegram messages, contacts, and session credentials, kept by the on-device TDLib library.
• Instagram and Messenger messages, contacts, and login session cookies, kept by the on-device Messagix bridge.
• Skills, draft settings, tone presets, and your Skill library.
• Conversation history and the message context used by AI features.
• Transcripts of your AI Assistant conversations, including those that run on Claude.
• Your Anthropic API key, stored only in iOS Keychain.
• Your AI Credit session token, if you use AI Credit, also stored only in iOS Keychain.

If you have iCloud Backup enabled in iOS Settings, Apple may include a portion of this data in your encrypted iCloud backup. The app also supports optional iCloud sync via Apple CloudKit so your settings and library can move between your own devices. In both cases, the data sits in your Apple iCloud account — not on a Flowbie server. Apple, not Flowbie, manages and controls iCloud. We have no access to it.

To make your messages searchable and to support Siri AI and Apple Intelligence personal context, AI Reply Assistant contributes your conversations and messages to the on-device Spotlight index. This index works entirely on device — it is never sent to Flowbie or anyone else — and you stay in control from iOS Settings (Search, or Siri & Search), where turning off “Show Content in Search” or “Learn from this App” stops it. Locked or hidden chats, blocked contacts, and view-once or deleted messages are never indexed.

The last page of onboarding, and a row under Settings › About, offer to sign you up for occasional product updates using Sign in with Apple. If you do not sign up, nothing in this section applies to you and no feature is withheld.

What we receive. Only your email address and the opaque user identifier Apple issues for this app. We do not request your name. Apple offers you Hide My Email, which gives us a per-app relay alias at privaterelay.appleid.com instead of your real address; we work with either and never see the address behind a relay alias.

Why we hold it. To email you when the app gains a major feature. A few times a year at most. We do not sell, rent, or share the list, and we do not use it for advertising or for any purpose other than telling you about this app.

Where it lives. In a Cloudflare D1 database behind flowbie.sg, and nowhere else. We do not use a mailing-list provider, so no third party holds a copy of the list. Cloudflare acts as our data processor. This service never touches your messages, and it is separate from everything else: from the messaging side of the app, which still has no server, and from the AI Credit service in section 06, which runs on its own database and shares nothing with this one.

How long. Until you delete it. After deletion we keep only an internal record that a deletion occurred. That record contains no email address and no identifier we could trace back to you — the Apple identifier is stored as a one-way hash.

How to delete it. Open Settings › About › Product updates in the app and choose “Stop updates and delete my email”. That erases your address from our database and revokes the app’s Sign in with Apple tokens, so Flowbie stops appearing under Sign in with Apple in your Apple Account settings. Every email we send also carries a one-click unsubscribe link, which deletes your address just as completely. You may instead write to [email protected].

If you used Hide My Email, you can also switch off forwarding at any time from appleid.apple.com, independently of us. Apple notifies us when you do, and we stop mailing that address.

We added this because we could not otherwise tell whether the app works for the people who install it. Apple tells us how many people downloaded it and how many subscribed, and nothing about what happened in between. Without these counts we cannot tell the difference between nobody wanting the app and everybody getting stuck connecting an account.

These are the milestones, in the order you would pass them:

• The app was opened for the first time.
• The app was opened on a given day. We record the date, as our server received it, at most once a day, so we can count how many installations are in use each day and how many are still in use a week or a month after the first launch. It records that the app was opened and nothing about what you did in it.
• You reached a page of the setup tour, and finished setup. We record which page you got to, so we can see where people stop.
• Whether you allowed or refused notifications when setup asked. Only that answer — the app does not report your other permission choices, and never reports anything it read using one.
• You opened the connect screen, tapped Connect on a messaging service, and whether that attempt linked, failed, or was abandoned. Where an attempt failed we record only whether it got as far as showing you a login screen — never the error message, which can contain your phone number.
• An account finished connecting, and which service it was — WhatsApp, Telegram, Instagram, or Messenger.
• You asked an AI feature to write something, and separately whether it produced a usable result. We record which feature — Smart Reply, Agent, AI Writer, Chatbot, Unread Summary, Split Bill, Poll from Photo, or poll and event options — and nothing about the request or the result.
• Claude was connected or disconnected, and whether that was with your own API key or with AI Credit. Only that — never the key.
• A free daily AI limit turned an action down.
• The upgrade screen was shown, and whether you closed it or subscribed. We record which limit prompted it and, if you subscribed, which plan you bought.

Alongside the milestone, each event carries only:

• A random identifier created by the app on your device the first time it runs. It exists so the events can be recognised as coming from one installation rather than several different ones. It is not your IDFA, not your IDFV, not anything Apple gave us, and we do not link it to you. Deleting the app destroys it; reinstalling creates a new one, and we do not link the two.
• Your App Store country and the app’s version number, so we can tell which storefronts and which releases the numbers came from.
• Which plan you are on at that moment — free, or the name of the paid plan. It is a plan name shared by everyone on that plan, it says nothing about who you are, and it is what lets us tell whether the people running into a limit are the ones already paying.

Every one of these is a fixed word chosen from a short list written into the app. None of them is free text, and there is no field anywhere in this that could carry something you typed.

It carries no message content, no contacts, no chat names, no timestamps from your device, and no IP address. The measurement service does not read the network address your request arrives from — its database has no field to store one in — and we do not enable Cloudflare’s request logging on it.

This identifier is never joined to your email address or to your AI Credit records. Those live on different services with different databases and different credentials, and there is no shared key between them. We do not match them by any other means. Nothing is shared with any third party, sold, or used for advertising, and none of it follows you into other apps or websites.

Records are deleted after 12 months.

There is no switch for this in the app, and we would rather say that plainly than bury it. If you are in the EU or the UK and would prefer that we had asked first, that is a fair criticism of the choice we made; write to [email protected] and we will delete what we hold for your installation, though you will need to tell us enough for us to find it.

The terms of service set the minimum age at 18. We do not knowingly process personal data of anyone under that age, and in no case of a child under 13. If you believe a child has provided personal data through the app, contact us at [email protected] and we will delete it.

• Secrets, including your Anthropic API key and your AI Credit session token, are stored in iOS Keychain.
• Other on-device data is protected by iOS standard data-protection classes.
• All third-party network traffic uses TLS, as enforced by the platform SDKs.
• We operate no server that holds your messages, so we cannot be the source of a server-side breach of them. The only server-side data we hold at all is the product-updates email list in section 05, the AI Credit balance and ledger in section 06 if you use it, and the install-measurement counts in section 07 — none of which contains anything you wrote.
• The three services are separate deployments with separate databases and separate credentials, so none of them can reach another’s data.

If you opt in to Apple’s standard iOS diagnostics in Settings, Apple may share aggregated, de-identified diagnostic data and crash logs with us through App Store Connect. We do not run any third-party crash-reporting or analytics SDK inside the app — the measurement in section 07 is our own code talking to our own server, with no vendor in between.

If you did sign up for product updates, the fastest route to all of these rights is Settings › About › Product updates in the app, which shows you the exact address we hold and deletes it on request.

If you bought AI Credit, the Claude screen (Settings › AI Features › Claude) shows your balance, and Delete AI Credit Account there erases the account. That deletes your balance, your usage ledger, its monthly totals, and the account record itself. Note that erasing forfeits any unspent credit, since the record of it is exactly what is being deleted. The same screen is where you turn Share Usage for Refunds on or off (section 06).

To withdraw your agreement to what a feature works on being sent to Anthropic, disconnect Claude on that screen: tap Disconnect on your own API key, or on the AI Credit card. Nothing more is sent from then on. Disconnecting AI Credit keeps your balance, and connecting again brings it back. The record of when you connected and disconnected AI Credit is erased with the account if you delete it.

Three kinds of record survive that deletion, and we would rather tell you than round it off. The first is the purchase and promotional-credit rows for money that actually changed hands, each with how much of its credit had been used when you deleted: a refund request can reach us months later and still has to be answered truthfully. The second, only if the account held a purchase or promotional credit, is a short record of what it still owed, how many of its purchases had been refunded, whether it was suspended, and your choice about sharing usage with Apple. Without it, deleting an account and signing in again would clear a debt or a suspension. The third is the bare identifiers of any sandbox or generated file one of your requests created, which have to stay on file so that nobody else can later claim them.

In the first two, your Apple identifier is replaced by a one-way code computed from it, which cannot be turned back into the identifier; the purchase token described in section 06 is derived from it the same way. Only your own Apple Account can produce that code again: if you sign in again with it, these records are matched to your new account — the purchases, any amount owed, the refund history and any suspension — and everything else starts fresh. In the third, the identifier is blanked, so what is left is an identifier attached to no one.

Our Data Protection Officer is responsible for how Flowbie PTE. LTD. complies with the Personal Data Protection Act 2012. Write to [email protected] and mark your message for the Data Protection Officer.

You may also write to [email protected]. We will respond within the timeframes set by the Personal Data Protection Act 2012. Withdrawing consent to Claude turns off the features that run on Claude and nothing else: the features that run on Apple Intelligence, and the rest of the app, keep working.

To exercise data-subject rights against the third parties listed in section 06 — Meta, Telegram, Apple, or Anthropic — please contact those companies directly. We cannot act on your behalf with them.

If you are unsatisfied with our response, you may lodge a complaint with the Personal Data Protection Commission (PDPC) of Singapore at pdpc.gov.sg.

Anthropic processes API requests in the United States. When a feature runs on Claude, what it works on (section 06) is transmitted to Anthropic in the US. With your own API key, that transfer happens between you and Anthropic and we are not a party to it. With AI Credit, we make the transfer on your behalf, under our own commercial agreement with Anthropic. Anthropic keeps what it receives for the periods given in section 06.

Meta and Telegram operate global infrastructure; their privacy policies cover their cross-border transfers.

Apple Intelligence runs on your device, or on Apple’s Private Cloud Compute, which Apple operates. Apple’s privacy policy covers where Private Cloud Compute processes a request. Nothing from Apple Intelligence is transferred to us.

When you ask Apple to refund AI Credit and have allowed Share Usage for Refunds, the facts about that purchase listed in section 06 are sent to Apple, which processes them under its own privacy policy.

The data we ourselves hold sits on Cloudflare’s global network: the product-updates email address, if you gave us one; the AI Credit balance, purchase records and usage ledger, if you bought credit; and the install-measurement counts in section 07. The AI Credit and measurement databases are located in the Asia-Pacific region.

Material changes will be highlighted on this page and announced inside the app before they take effect.

17 October 2026. New names and From Message. Analyze is now Chatbot and the Skill button is now Agent; sections 02, 06 and 07 use the new names. From Message, in Create Poll, Create Event, Share Availability and Split Bill, reads the messages you choose and the photos among them, and when it runs on Claude it sends them to Anthropic, as section 06 now lists. Create Poll no longer runs inside Analyze, so section 06 no longer says it does; a picture you long-press in a chat still opens Poll from Photo. Section 03 now says what Report a Problem does: it opens a draft email in your mail app, the app sends nothing itself, and the text of the AI answer is in the email only if you choose to include it. Nothing changed about what our servers store.

16 October 2026. Connecting Claude is the agreement. Sections 06 and 10 now say that the app asks once, when you connect your own API key or buy or restore AI Credit, whether what a feature works on may be sent to Anthropic, and that disconnecting Claude withdraws your agreement. It no longer asks before the first request, and the switch in Settings › AI Features is gone. For AI Credit, we now record that you connected or disconnected, when, and which wording you saw, and while you are disconnected our server refuses your Claude requests. Your balance is kept. Section 07 now lists a connect and a disconnect of Claude among the milestones the app reports, with only whether it was your own key or AI Credit. Nothing you write is stored, and nothing else we store has changed.

15 October 2026. Split Bill and Poll from Photo. Sections 02, 06 and 07 now name both features. Section 06 now says that when Split Bill runs on Claude it sends the photo of the receipt, and that when Poll from Photo runs on Claude it sends the photos you add, up to three, and anything you type about what you are deciding. Create Poll in Analyze sends the conversation, as the rest of Analyze does. Both features run on Apple Intelligence unless you choose Claude for them, and the app asks “Share with Anthropic?” before the first request goes to Anthropic. Nothing changed about what we store.

13 October 2026. AI Credit requests now carry an account identifier to Anthropic. Section 06 now says that with each request we send Anthropic an identifier derived one way from your Apple Account identifier, with no name, email address or phone number in it, so that Anthropic can act on one account that breaches its Usage Policy instead of on every AI Credit customer. Your messages and prompts are still not stored by us, and nothing else we store has changed. If you use your own API key, we send nothing.

13 October 2026. Corrections and a minimum age. Section 06 now links Anthropic’s Commercial Terms, which cover API traffic, in place of its Consumer Terms, and says how long Anthropic keeps a request: up to 30 days, and up to two years if its safety systems flag it. Section 03 now says that the AI service and the updates service hold a network address for about two minutes to limit how many requests one address can make. Section 08 now sets the minimum age at 18, in place of the App Store rating. Sections 10 and 13 now name a Data Protection Officer. Nothing changed about how the services work; this revision describes them accurately.

10 October 2026. The AI Assistant can now use a Web Browser that runs on your iPhone. Section 06 now says that when it runs on Claude, the text and screenshots of the pages it opens and the values it fills in are sent to Anthropic like any other tool result, that your saved sign-ins stay on your iPhone, and that you type your own passwords and payment details. Nothing changed about what we store.

8 October 2026. AI Credit refunds. Section 06 now says what we send Apple when you ask it to refund AI Credit or a plan with promotional credit, that we send it only if you allow it when the app asks, and that you can change your answer. It also lists the account fields the refund terms use — suspension, refund count, credit on hold — and says the purchase token is derived from your Apple identifier. Section 10 now says that after a deletion we keep a record of what the account owed and its refund history under a one-way code, and that signing in again with the same Apple Account brings those records back. The earlier text said nothing survived that could be traced back to you, which was not accurate for the purchase token.

8 October 2026. Poll options can now use their Tools button when they run on Claude. Section 06 now says that a poll then sends Anthropic what the chosen source finds on your device — matching messages, calendar events, reminders or places near you — and that the Web source runs Anthropic’s own web search. It also says that a Skill sends what its tools fetch. Nothing changed about what we store.

4 October 2026. Every AI feature in the app can now run on Claude as well as on Apple Intelligence: Smart Reply, Skill, Analyze, AI Writer, Writing Tools, poll options and Unread Summary. You choose which, per feature, in Settings › AI Features; on a device that cannot run Apple Intelligence, they all run on Claude once you set Claude up. Section 06 now lists what each feature sends to Anthropic, including Unread Summary, which sends each unread chat as its own request, and says that the app asks your permission before the first request goes to Anthropic. Sections 02, 06 and 11 now say that Apple Intelligence can run on Apple’s Private Cloud Compute as well as on your iPhone, which earlier versions left out. Nothing changed about what we store.

20 August 2026. Said more precisely what AI Credit stores and what deleting it does. Nothing changed about how the service works or what it collects; this revision only describes it accurately. Section 06 now spells out what a purchase record contains, how long the usage ledger is kept, and that a request may use Anthropic’s own web search or code sandbox. Section 09 now says which rows survive an account deletion in de-identified form, and why. Section 05 no longer describes the mailing list as the only thing we store, which stopped being true when AI Credit shipped.

16 August 2026. Added AI Credit, an optional way to use Claude without holding an Anthropic API key. This is the first time a Flowbie server sits in the path of anything you write: requests are forwarded to Anthropic and metered, but their content is not logged or stored. Buying credit requires Sign in with Apple and creates a balance and usage ledger, both erasable from inside the app. Bringing your own API key is unchanged and still goes straight to Anthropic. Nothing changed for messaging: WhatsApp, Telegram, Instagram, and Messenger still connect directly from your device, and we still keep no messages.

15 August 2026. Added the optional product-updates mailing list described in section 05 — the first time Flowbie has stored any personal data. It is opt-in, gates nothing, and is deletable from inside the app. Nothing changed about how messages are handled: they are still never sent to us.

• Email: [email protected]
• Data Protection Officer: [email protected]
• Post: Flowbie PTE. LTD., 60 Paya Lebar Road, #06-28 Paya Lebar Square, Singapore 409051
• UEN: 202521628Z