The short version
- Your chats, memory, files and API keys stay on your computer. We can't see them.
- Your prompts go straight from your computer to the AI providers you choose, under your own accounts.
- Our cloud runs your account, billing and optional phone access. The relay never stores conversations.
- Analytics are off unless you opt in. We never sell your data or train AI on it.
1. Who we are
Flufs (“Flufs”, “we”, “us”) makes the Flufs app for macOS and Windows, the website at fluf.bot and the Flufs cloud service that runs your account, billing and optional remote access. The Flufs service is provided by [Legal entity], registered at [Registered address], company number [Company number].
For the personal data described in this policy, we are the data controller. You can reach us at hello@fluf.bot about anything in this policy.
This policy explains what data we collect, why, who we share it with, how long we keep it and the rights you have. It applies to the app, the website and the cloud service together (the “Service”).
2. What stays on your computer
Flufs is built local-first. The work your bots do lives on your computer, in the Flufs data folder, and is not sent to us. That includes:
- Your conversations, group chats and message history.
- Bot memory, skills, rules, routines and settings.
- Files your bots read or create, and each bot's private browser profile, including its cookies and logins.
- Your AI connections: subscription sign-ins and API keys. API keys are stored encrypted on your computer.
- Screenshots and screen content captured during computer use sessions.
- Telegram bot tokens you add.
We cannot see, read or recover this data. Deleting your Flufs account does not delete it; to remove it, delete the Flufs app and its data folder from your computer (see “Deleting your account and data”).
3. Your AI providers
You connect Flufs to AI providers you choose, such as Anthropic (Claude), OpenAI (ChatGPT and Codex), Google (Gemini), xAI or OpenRouter, using your own subscriptions or API keys. When a bot works, your prompts, the conversation history it needs, relevant memory, files and screen content you allow it to use are sent directly from your computer to that provider. They do not pass through Flufs servers.
That processing happens under your own agreement with the provider, and the provider's privacy policy and terms govern it. The provider acts independently of us. When you switch a bot from one model to another, the conversation history is handed to the new provider so the bot can continue. Choose providers and settings (for example, model-training opt-outs) that suit you.
4. Data we collect
Account data
When you create an account: your email address, name (if you give one), a securely hashed password or your chosen sign-in method (such as a magic link or Google), email verification status, and session records used to keep you signed in.
Devices and licence
When you sign in from the app: a device record (device name you see in your account, a random device ID, and hashed device tokens), and your plan, trial and licence status, so the app can unlock the features you are entitled to.
Billing data
If you subscribe, Stripe collects your payment details. We never receive or store your full card number. We receive and keep your Stripe customer ID, plan, billing interval, subscription status, invoices, billing country and tax details needed to charge you correctly.
Remote access data (Pro)
If you pair a phone or browser with your computer, we keep pairing records (which devices are paired, when, and hashed access tokens) and connection metadata such as timestamps and IP addresses for security. Messages between your devices and your computer travel through our relay to reach you; the relay forwards them and does not store conversation content.
Support and communications
If you email us or send a diagnostic report, we receive what you include and keep it to help you.
Product analytics (only with your consent)
If you opt in, we collect usage events, for example “bot created”, “routine run” or “plan upgraded”, with technical details such as app version, macOS version and a pseudonymous ID. Events come from a fixed allow-list and never include the content of your conversations, memory, files, prompts or screen. Nothing is collected before you opt in, and you can opt out any time in Settings. Session replay is off.
Website and server logs
Our servers keep short-lived technical logs (IP address, browser type, requested page, time and errors) to run the Service, prevent abuse and fix problems.
5. How we use data and our legal bases
We use personal data only for these purposes. If you are in the UK or EEA, each purpose relies on the legal basis shown.
We do not sell your personal data, we do not use it for targeted advertising, and we do not use your content to train AI models.
7. International transfers
Some of our providers process data outside the UK and EEA, including in the United States. Where that happens we rely on adequacy decisions (including the EU-US Data Privacy Framework and the UK extension where the provider is certified) or the European Commission's Standard Contractual Clauses with the UK Addendum, plus additional safeguards where appropriate. You can ask us for a copy of the relevant safeguards.
8. How long we keep data
- Account, device and licence data: while your account is open. Deleted within 30 days after you delete your account.
- Billing records: for as long as tax and accounting law requires, typically up to 7 years after the transaction.
- Remote access pairing records: until you unpair the device or delete your account. Relay connection logs: up to 30 days.
- Server logs: up to 30 days, longer only when needed to investigate a security incident.
- Analytics events: up to 12 months, then deleted or fully anonymised.
- Support emails: up to 2 years after the conversation ends.
9. Deleting your account and data
You can delete your account at any time from your account page, or by emailing hello@fluf.bot. Deletion cancels any subscription, signs out and revokes all your devices and remote access tokens, and removes your account data from our systems within 30 days, except records we must keep by law (such as invoices).
Your bots' data lives on your computer, so account deletion does not remove it. To delete it, quit Flufs, uninstall the app and delete the Flufs data folders: on Mac, ~/.flufs and ~/Library/Application Support/Flufs; on Windows, %USERPROFILE%\.flufs and %APPDATA%\Flufs. Data you sent to AI providers or Telegram is held by them under their policies.
10. Your rights
UK and EEA (UK GDPR and GDPR)
You have the right to access your personal data, correct it, delete it, restrict or object to its processing, receive it in a portable format, and withdraw consent at any time without affecting earlier processing. You can also complain to your data protection authority, such as the Information Commissioner's Office in the UK or the authority where you live or work in the EEA. We'd appreciate the chance to help first.
California (CCPA as amended by the CPRA)
California residents have the right to know what personal information we collect, use and disclose; to delete it; to correct it; and to opt out of its sale or sharing. We do not sell personal information and do not share it for cross-context behavioural advertising. We do not use sensitive personal information to infer characteristics. We will not discriminate against you for exercising your rights. You may use an authorised agent, and we may need to verify your identity before acting on a request.
Everyone
Wherever you live, email hello@fluf.bot to exercise your rights. We reply within one month (45 days for California requests), and tell you if we need more time.
12. Security
We protect data with encryption in transit (TLS), hashed passwords and tokens, encrypted API keys on your computer, signed licences, least-privilege access for our team and regular updates. Remote access requires device pairing, and each device can be revoked from your account. No system is perfectly secure; if a breach affects your personal data, we will notify you and the relevant authorities as the law requires.
13. Children
Flufs is not intended for anyone under 18, and we do not knowingly collect personal data from children. If you believe a child has given us personal data, contact us and we will delete it.
14. Changes to this policy
We may update this policy as Flufs evolves. We will change the date at the top and, for material changes, tell you by email or in the app before they take effect.
15. Contact
Questions or requests: hello@fluf.bot. Post: [Legal entity], [Registered address]. If required, our EU and UK representatives are [EU representative, if required] and [UK representative, if required].