Legal · Privacy
Privacy Policy
Last updated on 26th of September, 2026 · Version 1.0.0 · Holder: Flunkey
Flunkey is a local-first, bring-your-own-key (BYOK) desktop app with no first-party servers, accounts, analytics, advertising, or tracking. This policy explains what stays on your device, what you send to AI providers, and how to delete it.
1. Summary
- We operate no server for the app. There is no account, registration, or login. Flunkey talks to third-party AI providers directly from your device.
- We never receive your content. Your audio, transcripts, chats, selections, dictionary, and API keys never reach us.
- The app transmits data over the network only when you invoke a voice feature, and only to the AI provider you assigned to that task, authenticated with the key you entered.
- Raw microphone audio lives only in memory and is never written to disk by Flunkey. Transcriptions, chats, and transforms of that audio ARE stored as plaintext JSON in AppData until you wipe them.
2. Data stored on your device
| Data | Location | Notes |
|---|---|---|
| Settings (without keys), transcriptions, AI chats, transforms, dictionary | %APPDATA%\com.flunkey.desktop\flunkey-data.json (plaintext JSON) | Written via Tauri Store with explicit flush. No encryption at rest. |
| Public OpenRouter model catalog + timestamp | %APPDATA%\com.flunkey.desktop\openrouter-catalog.json (plaintext JSON) | Public data only, 24h cache. No keys, no user text. |
| API keys | Windows Credential Manager, service Flunkey: groq_api_key, openai_api_key, gemini_api_key, openrouter_api_key | DPAPI-backed, per-user. Fail closed: if the keyring is unavailable, keys stay memory-only and are never written to disk. Legacy plaintext keys are auto-migrated then blanked. |
| Clipboard | OS clipboard | F8/F10 paste via clipboard by design; last output can persist in clipboard / Win+V history. |
| Audio bytes | RAM only (MediaRecorder audio/webm;codecs=opus → in-memory Blob) | Tracks stopped on completion. No disk staging. |
3. Data sent to third parties
Only to the provider configured for the task you invoked:
| Provider | Endpoint | Privacy info |
|---|---|---|
| Groq | https://api.groq.com | groq.com/privacy-policy |
| OpenAI | https://api.openai.com | openai.com/policies/privacy-policy |
| Google Gemini | https://generativelanguage.googleapis.com | policies.google.com/privacy |
| OpenRouter | https://openrouter.ai | openrouter.ai/privacy |
OpenRouter has no speech-to-text endpoint — voice tasks assigned to it fall back to a configured Groq/OpenAI/Gemini key. Provider processing regions, retention, and training-use policies are governed by the provider, not by Flunkey.
4. What we never collect
No analytics, crash reporting, advertising identifiers, or remote logging. No prompts, completions, audio, keys, IP addresses, or user agents are sent to Flunkey. All dependencies run locally; network allowlist is limited to the four provider endpoints above (see tauri.conf.json CSP).
5. Retention and your choices
Data stays in local AppData until you wipe it: Settings → Wipe all data clears both store files, all four keyring entries, and the current clipboard, then resets settings/history/dictionary. Windows clipboard history and cloud clipboard may persist outside Flunkey. You can also remove individual transcripts, chats, transforms, and dictionary words in-app at any time.
6. Children
Flunkey is not directed at children under 13. Do not use it to process a child's personal information.
7. Changes and contact
We may update this policy as the app evolves; the date at the top will change and material changes will be surfaced in-app. Questions: flunkeymanager@gmail.com · https://www.flunkey.space