Flip AssistantWe don't track you
Answering a question means asking a model, and getting directions means asking a mapping service. Those companies are involved either way. What differs is how much they learn about you, and this page explains the difference plainly.
Nothing ties a question back to you
Your phone never talks to Anthropic, Groq or Google. It talks to us, and we ask on your behalf.
Asking a question through Flip Assistant
Asking the same companies directly, from a smartphone
Your phone identifies itself to us, because a subscription has to know whose it is. That identity stops there. It is never passed on and never attached to the content of a request, so no record exists anywhere of what any particular person asked.
Used directly, the same services see an account, an app install, a device identifier and a history that accumulates against your name. Here there is nothing to accumulate against. Two questions from you and two from someone else look the same to them.
We do not keep what you ask
Questions and answers pass through and are not written down. We know a request happened and what kind it was, because the allowance depends on counting them. We do not know what it said, and no history is kept against your account.
That is not only a promise. There is no table for it. Nothing exists to leak, to hand over, or to change our minds about later.
Audio is deleted, not archived
When you speak a question, the recording is uploaded, transcribed, and deleted from the phone the moment the upload finishes. We do not keep a copy and neither does the phone. No voice history, no recordings to review, nothing to train on.
The phone is not watching you
- No location. The app never asks for GPS. Anything local works from a zip code you typed.
- No analytics. There is no measurement SDK, no crash reporter, no advertising identifier. Nobody is counting your screen time.
- No background activity. The app runs when you open it and stops when you close it. It has no services and no scheduled work.
- Camera stays local. QR codes are decoded on the phone. Frames are never uploaded.
- Messages stay local. Finding links in your texts happens on the phone. Only a link you choose is ever sent, and only the address.
Two-factor codes never leave
Codes are calculated on the phone from a secret stored there, encrypted under a key that cannot be extracted from the device and locked behind a PIN that is never stored anywhere. We cannot read them. We could not hand them over if we were asked.
The cost of that is real and worth saying: lose the phone or forget the PIN and they are gone, because there is no copy to restore.
Nothing happens over text message
Flip Assistant never sends you a text and never receives one. It is an app, and it talks to us over an encrypted connection. Your carrier can see that data moved, not what it said.
This matters because the alternative is common. An assistant that works by texting has to know your phone number, and every question and every answer travels as a text message. Text messages are not encrypted, carriers log and retain them, and a phone number is a durable identifier that ties a person's questions together.
The one place text messages come up is finding links people have sent you. That reading happens on the phone, and only a link you pick is ever sent to us.
Who learns what
| Smartphone apps | Assistant you text | Flip Assistant | |
|---|---|---|---|
| Your name or email | Yes | Sometimes | No |
| Your phone number | Sometimes | Yes | No |
| A device identifier | Yes | Sometimes | No |
| Your location | Yes | Sometimes | No |
| What you asked | Yes | Yes | No |
| A history tied to you | Yes | Yes | No |
| Carried as unencrypted text | No | Yes | No |
The middle column describes services that work by sending and receiving text messages. Text messages are not encrypted and carriers retain them.
What we do keep
Honesty is worth more than a clean list, so here is the rest of it.
- Your email address, for signing in and for billing. Handled by Mailgun when we send you anything.
- Counts of requests per day and kind, so the allowance can be enforced and shown to you.
- A one-way hash of your phone's Android identifier, so free trials cannot be restarted endlessly on one handset. It cannot be reversed.
- Payment details, held by Stripe. We never see a card number.
What we cannot promise
The companies that answer questions have their own policies, and some retain requests for a period to detect abuse. We send them nothing that identifies you, but we do not control what they do with what they receive. Our hosting and database providers can see traffic reaching them, as any host can.
Anyone claiming a service touching third-party models involves no third parties at all is not telling you the truth. The useful question is what those parties learn, and the answer here is: a question, a zip code, and nothing that points back to a person.
The formal version is the privacy policy. Questions go to hello@flipassistant.app.