Privacy policy.

Flowbie, we, and our mean Flowbie PTE. LTD. (UEN 202521628Z), a Singapore company at 60 Paya Lebar Road, #06-28 Paya Lebar Square, Singapore 409051.

The app means the AI Reply Assistant app for iOS 26 and Apple Intelligence-capable iPhones.

The website means flowbie.sg, a static marketing site hosted on Cloudflare Pages. The website does not use cookies and does not run any first-party analytics. Cloudflare, our hosting provider, may keep short-lived edge-server logs (IP, user agent, request URL) for security and delivery purposes. We do not access or analyse those logs to track you.

The updates service means the small API at api.flowbie.sg that records an email address if you opt in to product updates, covered in section 05. It never receives message data of any kind.

The AI service means the API at ai.flowbie.sg, used only if you buy AI Credit rather than bringing your own Anthropic API key. It forwards your Claude requests and keeps a record of what you bought and what each request cost, covered in section 06.

The measurement service means the API at metrics.flowbie.sg, which counts four app-lifecycle events so we can tell how many people get the app working, covered in section 07. It never receives message data of any kind, and it never receives your email address or anything about what you bought.

Those three are the only services we operate that store personal data. They are separate deployments with separate databases and separate credentials, so none of them can reach another’s data.

1. 01
   Your messaging accounts never touch our servers.

   WhatsApp connections go directly from your device to Meta. Telegram connections go directly to Telegram. Instagram and Messenger connections go directly from your device to Meta. We do not proxy, store, or relay any of it. The one thing that can pass through a server we operate is a Claude request, and only if you choose AI Credit instead of your own API key — see the next principle.

2. 02
   We do not keep your messages.

   We hold no messages, no contacts, and no chat archives. Two things reach us only if you ask for them: an email address, if you sign up for product updates (section 05); and, if you buy AI Credit, the text of the specific Claude request you make — which passes through our server to Anthropic and is not written down. What we record for that request is how many tokens it used and what it cost, never its content. A third thing reaches us without being asked for: four app-lifecycle counts, described in section 07, which say whether the app is working and contain nothing you wrote. We could not produce your messages on subpoena because we do not keep them.

3. 03
   On-device by default.

   Skill, Smart Reply, Analyze, Summary, and AI Writer use Apple Foundation Models, which run on-device on Apple Intelligence-capable iPhones. Anything leaves your phone only if you turn on Cloud Model — either with your own Anthropic API key, in which case the request goes straight to Anthropic, or with prepaid AI Credit, in which case it goes through our server first. Either way it is only the conversation you actively ask Claude to draft in.

• Message contents, attachments, or media (WhatsApp, Telegram, Instagram, Messenger, or otherwise).
• Message metadata: senders, recipients, timestamps, chat names.
• Your contacts or address book.
• Your location, IP address, or any identifier Apple assigns to your device or Apple Account — no IDFA, no IDFV, no advertising identifier. The app does generate one random ID of its own for the install measurement described in section 07; it is not tied to your device, your Apple Account, or you.
• Advertising identifiers. We do not advertise and we do not track you across other apps or websites.
• Browsing history, or any telemetry derived from your messages, contacts, or what you write. The four app-lifecycle events in section 07 are the only usage data we receive, and none of them contains anything you typed.
• Your Anthropic API key, if you use one. It stays in iOS Keychain and is never transmitted to us.
• The content of your prompts, drafts, or replies. AI Credit requests pass through our server to reach Anthropic, but are not logged or stored there.

We do not require an account to use the app. Every messaging and AI feature works without one, including Cloud Model with your own Anthropic API key. The single exception is AI Credit, which needs Sign in with Apple so that credit you have paid for survives a reinstall — see section 06.

So the personal data we can hold is limited to three things. Two are entirely up to you: an email address, so we can send you product updates (section 05); and an AI Credit balance with the purchase and usage records behind it (section 06). The third is the install measurement in section 07, which is on for everyone — it carries no message data, no contacts and nothing you typed, and it is the only one of the three you do not switch on yourself.

• WhatsApp messages, contacts, and session credentials, kept by the on-device Whatsmeow bridge.
• Telegram messages, contacts, and session credentials, kept by the on-device TDLib library.
• Instagram and Messenger messages, contacts, and login session cookies, kept by the on-device Messagix bridge.
• Skills, draft settings, tone presets, and your Skill library.
• Conversation history and the message context used by AI features.
• Transcripts of your Claude sessions, when Cloud Model is enabled.
• Your Anthropic API key, stored only in iOS Keychain.
• Your AI Credit session token, if you use AI Credit, also stored only in iOS Keychain.

If you have iCloud Backup enabled in iOS Settings, Apple may include a portion of this data in your encrypted iCloud backup. The app also supports optional iCloud sync via Apple CloudKit so your settings and library can move between your own devices. In both cases, the data sits in your Apple iCloud account — not on a Flowbie server. Apple, not Flowbie, manages and controls iCloud. We have no access to it.

To make your messages searchable and to support Siri AI and Apple Intelligence personal context, AI Reply Assistant contributes your conversations and messages to the on-device Spotlight index. This index works entirely on device — it is never sent to Flowbie or anyone else — and you stay in control from iOS Settings (Search, or Siri & Search), where turning off “Show Content in Search” or “Learn from this App” stops it. Locked or hidden chats, blocked contacts, and view-once or deleted messages are never indexed.

The last page of onboarding, and a row under Settings › About, offer to sign you up for occasional product updates using Sign in with Apple. If you do not sign up, nothing in this section applies to you and no feature is withheld.

What we receive. Only your email address and the opaque user identifier Apple issues for this app. We do not request your name. Apple offers you Hide My Email, which gives us a per-app relay alias at privaterelay.appleid.com instead of your real address; we work with either and never see the address behind a relay alias.

Why we hold it. To email you when the app gains a major feature. A few times a year at most. We do not sell, rent, or share the list, and we do not use it for advertising or for any purpose other than telling you about this app.

Where it lives. In a Cloudflare D1 database behind flowbie.sg, and nowhere else. We do not use a mailing-list provider, so no third party holds a copy of the list. Cloudflare acts as our data processor. This service never touches your messages, and it is separate from everything else: from the messaging side of the app, which still has no server, and from the AI Credit service in section 06, which runs on its own database and shares nothing with this one.

How long. Until you delete it. After deletion we keep only an internal record that a deletion occurred. That record contains no email address and no identifier we could trace back to you — the Apple identifier is stored as a one-way hash.

How to delete it. Open Settings › About › Product updates in the app and choose “Stop updates and delete my email”. That erases your address from our database and revokes the app’s Sign in with Apple tokens, so Flowbie stops appearing under Sign in with Apple in your Apple Account settings. Every email we send also carries a one-click unsubscribe link, which deletes your address just as completely. You may instead write to [email protected].

If you used Hide My Email, you can also switch off forwarding at any time from appleid.apple.com, independently of us. Apple notifies us when you do, and we stop mailing that address.

We added this because we could not otherwise tell whether the app works for the people who install it. Apple’s App Analytics reports nothing to us at our size, and App Store Connect shows downloads and purchases with nothing in between. Without these four counts we cannot tell the difference between nobody wanting the app and everybody getting stuck connecting an account.

Each event carries only:

• Which of the four events it was, and one word of context where there is any — which messaging service was connected, or which AI feature produced the reply.
• A random identifier created by the app on your device the first time it runs. It exists so the four events can be recognised as coming from one installation rather than four different ones. It is not your IDFA, not your IDFV, not anything Apple gave us, and not anything we can connect to you. Deleting the app destroys it; reinstalling creates a new one, and we cannot tell that the two are the same person.
• Your App Store country and the app’s version number, so we can tell which storefronts and which releases the numbers came from.

It carries no message content, no contacts, no chat names, no timestamps from your device, and no IP address. The measurement service does not read the network address your request arrives from — its database has no field to store one in — and we do not enable Cloudflare’s request logging on it.

This identifier is never joined to your email address or to your AI Credit records. Those live on different services with different databases and different credentials, and there is no shared key that would let us match them. Nothing is shared with any third party, sold, or used for advertising, and none of it follows you into other apps or websites.

Records are deleted after 12 months.

There is no switch for this in the app, and we would rather say that plainly than bury it. If you are in the EU or the UK and would prefer that we had asked first, that is a fair criticism of the choice we made; write to [email protected] and we will delete what we hold for your installation, though you will need to tell us enough for us to find it.

The App Store age rating for the app is 17+, and the terms of service set the same floor. We do not knowingly process personal data of anyone under that age, and in no case of a child under 13. If you believe a child has provided personal data through the app, contact us at [email protected] and we will delete it.

• Secrets, including your Anthropic API key and your AI Credit session token, are stored in iOS Keychain.
• Other on-device data is protected by iOS standard data-protection classes.
• All third-party network traffic uses TLS, as enforced by the platform SDKs.
• We operate no server that holds your messages, so we cannot be the source of a server-side breach of them. The only server-side data we hold at all is the product-updates email list in section 05, the AI Credit balance and ledger in section 06 if you use it, and the four install-measurement counts in section 07 — none of which contains anything you wrote.
• The three services are separate deployments with separate databases and separate credentials, so none of them can reach another’s data.

If you opt in to Apple’s standard iOS diagnostics in Settings, Apple may share aggregated, de-identified diagnostic data and crash logs with us through App Store Connect. We do not run any third-party crash-reporting or analytics SDK inside the app — the measurement in section 07 is our own code talking to our own server, with no vendor in between.

If you did sign up for product updates, the fastest route to all of these rights is Settings › About › Product updates in the app, which shows you the exact address we hold and deletes it on request.

If you bought AI Credit, Settings › AI Credit shows your balance and lets you erase the account. That deletes your balance, your usage ledger, its monthly totals, and the account record itself. Note that erasing forfeits any unspent credit, since the record of it is exactly what is being deleted; Apple’s refund process is separate and unaffected.

Two kinds of row survive that deletion, and we would rather tell you than round it off. The first is the purchase rows for money that actually changed hands: a refund can reach us months later and still has to find something to reconcile against. The second is the bare identifiers of any sandbox or generated file one of your requests created, which have to stay on file so that nobody else can later claim them. In both cases your Apple identifier is blanked out of the row, so what is left is a transaction or an identifier attached to no one. Nothing that survives can be traced back to you, and signing in again after deleting starts you from nothing.

You may also write to [email protected]. We will respond within the timeframes set by the Personal Data Protection Act 2012. Withdrawing consent has no effect on your use of the app.

To exercise data-subject rights against the third parties listed in section 06 — Meta, Telegram, Apple, or Anthropic — please contact those companies directly. We cannot act on your behalf with them.

If you are unsatisfied with our response, you may lodge a complaint with the Personal Data Protection Commission (PDPC) of Singapore at pdpc.gov.sg.

Anthropic processes API requests in the United States. If you turn on Cloud Model, the chats you have approved are transmitted to Anthropic in the US. With your own API key, that transfer happens between you and Anthropic and we are not a party to it. With AI Credit, we make the transfer on your behalf, under our own commercial agreement with Anthropic.

Meta and Telegram operate global infrastructure; their privacy policies cover their cross-border transfers.

Apple Foundation Models run on your device. There is no cross-border transfer for on-device AI features.

The data we ourselves hold sits on Cloudflare’s global network: the product-updates email address, if you gave us one; the AI Credit balance, purchase records and usage ledger, if you bought credit; and the install-measurement counts in section 07. The AI Credit and measurement databases are located in the Asia-Pacific region.

Material changes will be highlighted on this page and announced inside the app before they take effect.

20 August 2026. Said more precisely what AI Credit stores and what deleting it does. Nothing changed about how the service works or what it collects; this revision only describes it accurately. Section 06 now spells out what a purchase record contains, how long the usage ledger is kept, and that a request may use Anthropic’s own web search or code sandbox. Section 09 now says which rows survive an account deletion in de-identified form, and why. Section 05 no longer describes the mailing list as the only thing we store, which stopped being true when AI Credit shipped.

16 August 2026. Added AI Credit, an optional way to use Cloud Model without holding an Anthropic API key. This is the first time a Flowbie server sits in the path of anything you write: requests are forwarded to Anthropic and metered, but their content is not logged or stored. Buying credit requires Sign in with Apple and creates a balance and usage ledger, both erasable from inside the app. Bringing your own API key is unchanged and still goes straight to Anthropic. Nothing changed for messaging: WhatsApp, Telegram, Instagram, and Messenger still connect directly from your device, and we still keep no messages.

15 August 2026. Added the optional product-updates mailing list described in section 05 — the first time Flowbie has stored any personal data. It is opt-in, gates nothing, and is deletable from inside the app. Nothing changed about how messages are handled: they are still never sent to us.

• Email: [email protected]
• Post: Flowbie PTE. LTD., 60 Paya Lebar Road, #06-28 Paya Lebar Square, Singapore 409051
• UEN: 202521628Z