Privacy Policy

Flaggy reads your chats so it can tell you what’s going on in them. That’s personal, so we built it to keep as much as possible on your phone. This policy explains what we process, why, who helps us, and your choices. It applies to the Flaggy apps for iPhone and Android and to our website, flaggyapp.com.

The short version

• No account, no ads, no analytics, no tracking.
• Your chats are read and analysed on your phone.
• The AI analysis is optional. It only runs if you subscribe and tap Allow. Then an anonymised excerpt of the chat is sent for that one analysis, and our server does not keep it.
• Payments are handled by Apple or Google. We never see your card details.
• You can delete your analyses at any time, and uninstalling the app removes everything stored on your phone.

Who we are

Flaggy (“Flaggy”, “we”, “us”) is operated by the publisher of flaggyapp.com. We are the “controller” of the personal data described here, which means we decide how and why it is used. You can reach us at contact@flaggyapp.com.

1. Chats you import

When you share a WhatsApp export to the app, or pick an exported file, the app reads the messages, names and timestamps in it.

The statistics (message counts, reply times, who starts conversations and so on) are worked out on your phone. The chat and your results are saved in the app’s private storage on your phone, so you can open them again. They are not uploaded anywhere unless you use the AI analysis described below.

Why: to give you the analysis you asked for (performance of our contract with you).

2. AI analysis (optional)

With an active subscription, the app can write a deeper analysis using Claude, an AI model made by Anthropic. Before the first upload, the app asks for your permission. Nothing is sent unless you tap Allow.

What is sent:

• Up to your last 400 text messages, each cut to 500 characters. Before anything leaves your phone, the app replaces both people’s names with a placeholder and removes phone numbers, email addresses and links.
• The statistics worked out on your phone (including the first and the longest message, anonymised the same way), and your answers about who the other person is to you.
• Your anonymous subscription ID, so our server can check that you have an active subscription.

This automatic anonymisation can miss things, such as nicknames or an address typed into a message. Please keep that in mind before you allow AI analysis on very sensitive chats.

Where it goes: the excerpt travels over an encrypted connection to our server (hosted on Cloudflare), which passes it to Anthropic’s Claude API and sends the result back to your phone. Our server does not store or log the chat or the result. Anthropic processes the data under its commercial terms, does not use it to train its models, and keeps it only for a limited period for safety and legal compliance.

Why: because you asked for it and gave your consent. You can withdraw consent at any time in the app, under Privacy Policy → Your choices. Withdrawing doesn’t affect analyses already made.

3. Subscriptions

If you subscribe, Apple (App Store) or Google (Google Play) processes the payment. We never see your payment details.

We use RevenueCat to manage subscriptions. RevenueCat receives an anonymous app user ID created by the app, your purchase and receipt information, and basic device information such as device model, operating system, app version, country, language and IP address. We use it to unlock Premium on your devices, restore purchases, and stop non-subscribers from using the paid AI feature.

Why: to provide the subscription you bought (performance of contract) and to meet tax and accounting obligations (legal obligation).

4. Technical data

When the app contacts our server, our hosting provider Cloudflare processes your IP address and basic request information to deliver the request and protect the service from abuse. We don’t keep our own logs of this information.

Why: to keep the service working and secure (our legitimate interests).

5. Our website

Our website flaggyapp.com uses no cookies, no analytics and no third-party scripts or fonts. Like any web server, ours (hosted by Hetzner in the EU) records your IP address, the page you asked for, the time and your browser type in a log. We use these logs only to keep the site running and secure, and delete them after 14 days.

Why: to keep the website working and secure (our legitimate interests).

6. Emails to us

If you email us, we use your email address and message to reply, and keep the conversation only as long as we need it to help you.

What we don’t do

• We don’t sell your personal data, or “share” it for cross-context behavioural advertising.
• We don’t show ads or include advertising or analytics tools in the app.
• We don’t track you across other apps or websites.
• We don’t use your chats to train AI models, and we don’t let our providers do so.
• We never contact the other people in your chats.

The other person in your chat

A chat always includes someone else’s messages. We process them only to give you your analysis, keep that processing on your phone where possible, remove names and contact details before any AI analysis, and never contact or profile that person. Please only analyse conversations you are part of, and be considerate of the other person’s privacy.

Who we share data with

We use these service providers. Each may only process the data to provide its service to us:

• Anthropic PBC (USA): AI analysis, only if you allow it.
• Cloudflare, Inc. (USA, global network): hosts the server the app talks to.
• Hetzner Online GmbH (Germany): hosts our website.
• RevenueCat, Inc. (USA): subscription management.
• Apple and Google: app distribution and payments, under their own privacy policies.

We may also disclose information if the law requires it, or to protect the rights and safety of our users or others.

International transfers

Our providers are based in the United States and may process data in other countries. When personal data from the EU, UK or Switzerland is transferred, we rely on appropriate safeguards such as the European Commission’s Standard Contractual Clauses or the EU-U.S. Data Privacy Framework, where the provider is certified.

How long we keep data

• Chats and analyses on your phone: until you delete them or uninstall the app.
• AI requests: our server keeps nothing; Anthropic keeps them only for the limited period described above.
• Subscription records: as long as you are a subscriber, and afterwards as long as needed for tax, accounting and legal reasons.
• Website logs: 14 days.
• Emails: as long as needed to help you.

Your rights

Depending on where you live, including under the GDPR (EU/UK) and the CCPA/CPRA (California), you have the right to:

• access the personal data we hold about you, and get a copy of it;
• correct it, or have it deleted;
• restrict or object to certain processing;
• withdraw your consent at any time (for example, to AI analysis);
• not be discriminated against for using these rights.

To use them, email contact@flaggyapp.com. Because there are no accounts, please include the anonymous subscription ID shown in the app under Privacy Policy → Your choices, if you have one. We’ll reply within 30 days. You also have the right to complain to your local data protection authority.

Deleting your data

• One analysis: open Saved, then long-press an analysis and tap Delete.
• Everything on your phone: uninstall the app.
• Subscription records held by RevenueCat: email contact@flaggyapp.com with your anonymous subscription ID.

Deleting the app does not cancel a subscription. Cancel it in your App Store or Google Play account settings.

Security

Your chats are stored in the app’s private storage, which other apps can’t read. Data sent to our server is encrypted in transit (HTTPS), and the AI provider key is kept on the server, never in the app. No system is perfectly secure, but we keep the amount of data that leaves your phone as small as we can.

Children

Flaggy is not meant for anyone under 16. We don’t knowingly process data of children under 16. If you think a child has used the app, contact us and we’ll help delete the data.

Changes to this policy

If we change this policy, we’ll update the date at the top. If the changes are significant, we’ll also tell you in the app before they take effect.

Contact

Questions or requests: contact@flaggyapp.com