This policy covers the website at flames.ai.id and the Flames Android app.
1. Beta signups
When you register for the Android closed test, you provide a Google Play account email.
- We use it to add your account to the closed testing track in the Google Play Console.
- We do not share it with third parties or use it for marketing.
- The address is stored locally in your browser and copied into the maintainer's closed test list.
- To remove your address, email
[email protected]or open an issue on the GitHub repository.
2. The Flames Android app
Flames does not run an analytics service or an error reporting SDK. We do not operate a server that collects logs from the app.
Your chats, tools and server profiles live on the phone. Flames does not proxy requests through a centralized server.
Local database
Conversations and saved facts go into a local SQLite database on the device. An FTS5 index lets you search that history offline. Clearing the app's storage or uninstalling it deletes the database.
API keys
API keys for LLM providers (Hermes Server, OpenAI, Anthropic, Gemini, Groq, OpenRouter) are written to Android encrypted shared preferences through the Android Keystore. They travel only to the host you configured for that profile.
Device tools
The registry has 42 tools. The open testing build enables 34 of them. The other eight remain disabled because they touch notifications, accessibility services, clipboard reads, raw files or payment cards.
- Camera: runs only when a prompt or RPC call asks for a photo.
- Location: reads GPS coordinates only when you ask for directions or location context.
- Health Connect: reads step count, sleep records and heart rate through Google Health Connect after you grant the Android permission.
- Calendar and contacts: used to read today's schedule, create events and resolve contact names for messaging intents.
- WebSocket RPC: pocket node mode opens a WebSocket only to the URL you configure. It does not connect to third-party endpoints.
3. Model providers
When you send a prompt, text and attached images travel to whichever model provider you configured: your own Hermes instance, OpenAI, Anthropic, Google, Groq, OpenRouter or a local Ollama daemon. That traffic is subject to that provider's terms and privacy policy.
4. Security
The flames.ai.id site is served over HTTPS. Pocket node WebSocket connections support WSS encryption. The Android app targets modern Android platform APIs with a minimum supported version of Android 8.0 (minSdk 26).
5. Children
The site and the app are not intended for children under 13, and we do not collect personal information from them.
6. Changes to this policy
If we change how the app or beta signup handles data, we will update the date at the top of this page.
7. Contact
Questions about this policy can go to:
Indra Kurniawan
Email: [email protected]
GitHub: indrakurniawan902/flutter-ai-agent