Floobly Privacy Policy

Who we are

Floobly is an Android app made by StratPollen, an independent app studio. In this policy, "Floobly", "we" and "us" mean StratPollen.

Questions or requests about your privacy: through Help & support in the app.

What is sent when you ask Floobly

When you ask Floobly something (in the floating panel, in the app, with Share to Floobly, with Ask Floobly on selected text, or in Help & support), the app sends over an encrypted connection (HTTPS) to Floobly's server:

• your question and the recent messages of that chat (up to the last 8), plus any photos or files you attach;
• settings that shape the answer, such as the mode, answer language, tone and the name you gave Floobly;
• a random install ID created by the app, and a sign-in token if you signed in.

Floobly's server passes your question to an AI provider to produce the answer and sends the answer back. It does not store the content of your questions, chats, photos, files or answers. The exceptions are the Help & support items described under "Help & support" below, and answers you rate (see "Rating answers").

The AI providers are Anthropic (Claude), which answers by default, and OpenAI (ChatGPT), which is used only as a backup when Claude is unavailable. Requests with files are only sent to Anthropic. The providers process this data under their API terms and privacy policies.

Cloudflare, which hosts Floobly's server, estimates your approximate location (country, region, city and time zone) from your network address. Floobly uses it to tell the AI today's date in your time zone and roughly where you are, and sends it to Anthropic with requests that may use web search, so results can be local.

Use my location (off unless you turn it on, in Settings ▸ Privacy): the app asks Android for your approximate location, turns it into place names on your phone (such as your neighbourhood, city, region and country) and sends only those names with your questions (to Floobly's server and the AI provider, like the rest of your question), so Floobly can answer questions about where you are. Your coordinates are never sent, and Floobly's server doesn't store your location. Turn it off any time, or remove the permission in Android settings.

Web search and sources

For questions about current things (like news, weather or prices), the AI provider may search the web. The searches are made by the provider, not from your phone. The pages it used are shown as sources under the answer.

To show those sources, the app loads each site's small icon from Google's favicon service, which receives the site's address and your phone's network address.

What Floobly's server keeps

To run limits, plans and credits, Floobly's server keeps usage counters (stored with Cloudflare):

• your install ID, and your account ID if you signed in, plus which install is linked to which account;
• how much you used Floobly in the current 5-hour session, day and week, including think-harder answers, web searches, files and help questions, and what those answers cost;
• your usage credit balance and whether "use credits" is on;
• if you subscribe or buy credits in the app: the purchase token Google Play gives the app, which plan or credit pack it was for and until when a subscription is paid, so the server can check it with Google Play and keep your plan active. Payments themselves are handled by Google Play; Floobly never sees your card or payment details.
• your daily streak: the last day you got an answer, how many days in a row and your best streak (for the small streak credit rewards);
• if you sign in and use invites: your invite code, how many friends used it, and whose code your account and phone used (so each code gives credits once);
• a scrambled (hashed) key made from your phone's Android ID for this app, so uninstalling and reinstalling the app on the same phone keeps the same usage limits. It is used only to stop abuse, never for ads, and can't be turned back into the original ID;
• a daily count of new app installs per network address (IP address), used only to stop abuse.

These counters don't include what you asked or what Floobly answered.

For running and improving Floobly, the server also keeps daily totals (such as how many questions were asked in each mode, how many answers used web search, AI cost, limits reached and errors) and, for up to 95 days, which install or account IDs asked something on each day, to count active users. These don't include what you asked.

Help & support

• Send us a message: when you send a message from Help & support, we keep your message, the topic you picked, your app version and plan, your install or account ID, and your email address if you add it or are signed in, so we can read and reply. Our reply is shown in the app. Messages we've closed are deleted after 180 days.
• Support assistant: your help questions go to the AI like other questions. When the assistant can't answer from its help notes, we keep that question and its answer (without your install or account ID) for up to 90 days to improve the help notes.
• Notifications: so we can tell you when we reply, the app registers a notification token with Google Firebase Cloud Messaging and sends it to Floobly's server, stored with your install or account ID (unused tokens are deleted after 90 days). The reply notification shows the start of our reply. We may also get a notification on our own phone, through the same service, with the start of your message.

Rating answers

Each answer has a like and a dislike button. When you tap one, the app sends Floobly's server your rating, the mode, where you asked (the floating bubble or the chat), and that one question and answer. They are stored without your install or account ID and deleted after 90 days. We read them to see which kinds of answers aren't helpful and improve Floobly. Tapping the same button again removes your rating and the stored question and answer.

Server logs

To protect Floobly from fake installs and abuse, the app uses Google Play Integrity when it first sets up: Google Play checks that the app is the genuine one from Google Play on a real Android device and gives the server a verdict. Floobly's server keeps only daily totals of these results, not your device details. Google's handling is described in its Play Integrity terms.

Cloudflare records basic technical data about requests to the server (such as the time, network address, country and response status) as part of running its service. Floobly's server also writes short log lines with the mode and AI model used, the number of tokens and web searches, the cost, and technical error messages when an AI provider or sign-in check fails. These logs don't contain your questions, messages, photos or files, and they are kept only for a limited time.

Accounts (optional)

You can use Floobly without an account. Sign-in is handled by Firebase Authentication (Google). If you choose Continue with Google, Firebase receives your Google account's email address, name, profile photo and a user ID. If you choose Continue with email, Firebase stores your email address and your password in a protected (hashed) form, and sends you emails to confirm your address or reset your password.

The app then sends Floobly's server a sign-in token with each request. The server checks it and uses your user ID so your limits, plan and credits follow your account across devices. It reads your email and name only to show them in the app, and doesn't store them.

Crash reports

If Floobly crashes, the app sends a technical crash report to Firebase Crashlytics (Google): what went wrong in the code, the app version, your phone model and Android version, and a random Crashlytics install ID. It doesn't include your chats, name or email. You can turn this off in Settings ▸ Privacy ▸ Send crash reports.

Purchases and tips

Purchases and tips are handled by Google Play. Floobly doesn't receive your card or payment details. To give you the plan or credits you bought, Floobly's server checks each purchase with Google Play (its product, status, renewal date and a purchase reference) and keeps that with your plan.

Ghost costumes are one-time purchases kept by Google Play; the app keeps a list of the costumes you own on your phone and gets it back from Google Play on a new phone.

On your phone

Your chats, your profile photo and your settings are stored on your phone. Incognito chats aren't saved. Uninstalling Floobly removes this data from your phone.

What we don't do

• No ads, and no tracking for advertising.
• We don't sell your data or share it for advertising.
• Floobly doesn't use your conversations to train AI models.

Deleting your data

• Chats: clear them in the app (they live on your phone).
• Account: Settings ▸ Account ▸ Delete account (or see Delete your Floobly account if you no longer have the app). This deletes your Firebase account and the usage counters, credits, install links and support messages Floobly's server keeps for it.
• Anything else: contact us (see below) and we'll help.

Children

Floobly isn't directed at children under 13, and we don't knowingly collect personal information from them. If you believe a child has used Floobly with an account, contact us and we'll delete it.

Security

Everything between the app, Floobly's server and the AI providers travels over encrypted connections (HTTPS). AI keys are kept on the server, never in the app, and the server refuses requests from web browsers and requests without the app's access key. No system is perfectly secure, but we work to protect your data.

Changes to this policy

If this policy changes, we'll update this page and the effective date below. For important changes, we'll also let you know in the app.

Contact

Questions or requests about your privacy: through Help & support in the app.