Flammo
Privacy policy
Flammo reads your paper mail: you photograph a letter, a bill or a form, and Flammo tells you what it asks, by when and how much. This policy explains what happens to your information. The short version: your letters stay on your phone, the AI only sees a letter when you ask it to read one or answer a question, and we never sell or share your data.
Who we are
Flammo (formerly Moonara) is made by Zenawi LLC, which is responsible for your information under this policy. You can reach us at support@moonara.app.
What stays on your phone
Your letters, their photos and PDFs, what Flammo read from them, your reminders, your stamps and your settings are saved on your phone. We do not keep a copy on our servers unless you turn on Backup. If you delete the app without a backup, they are gone. Like other app data, they can be included in your own iPhone or iCloud backup.
Backup (optional, Flammo Plus)
If you turn on "Back up to your account" in Me, a copy of your letters' details (what Flammo read, such as titles, senders, dates, amounts and references), your notes, drawers, rules, Ask Flammo chats, your name and your region setting is kept with your account in our account service (Supabase, servers in the United States), so you can bring them back on a new phone. Photos and PDFs are never backed up. Only you can read your backup. Turning Backup off in Me deletes the copy, and so does deleting your account.
What is sent to read a letter
When you scan a letter, and only after you agree on the "How Flammo reads your mail" screen, the photos or PDF are sent over an encrypted connection to our server (run on Cloudflare), which passes them to an AI model to read: Google Gemini, or Mistral AI if Gemini is busy, through OpenRouter. We only use providers that do not use your letters to train AI and do not keep them beyond short-term checks for abuse. Our server does not save the photos or the reading; it sends the result back to your phone and forgets it.
What is sent when you ask Flammo a question
When you use Ask Flammo, your question is sent with the details Flammo already read from your letters (such as titles, senders, due dates, amounts and references) so it can answer about them. If you ask about one letter and you have agreed to AI reading, that letter's photo or PDF is included. The same providers and the same rules apply: nothing is kept on our server or used for training.
Your account
To use the reading features you sign in with Apple, Google or a 6-digit code sent to your email. Our account service (Supabase, servers in the United States) keeps your email address, a user ID and, for each letter read or question asked, the date it happened, so we can count your free uses. It does not keep your letters. Our server sees your device's IP address with each request and uses it only to limit how fast requests can be sent, to protect the service from abuse.
Flammo Plus
Subscriptions are handled by Apple. Our subscription service (RevenueCat) receives your purchase status and your user ID so the app knows you have Flammo Plus. We never see your card details.
Reminders and calendar
Reminders are scheduled on your phone; no reminder data is sent to us. "Add to calendar" opens your phone's own calendar screen, and you choose whether to save the event. Flammo does not read your calendar.
Reporting an answer
If you report one of Flammo's answers, the report and a short excerpt of the answer are sent to us so we can improve Flammo. They are kept in our server logs (Cloudflare) for up to 7 days.
Why we use your information
- Reading letters and answering questions with AI: your consent, given on the "How Flammo reads your mail" screen. You can withdraw it at any time in Me; Flammo then stops sending letters to the AI.
- Your account, counting free uses, Backup and Flammo Plus: to provide the service you asked for.
- Rate limiting and answer reports: our legitimate interest in keeping Flammo safe, working and accurate.
Where your information is processed
Our providers (Supabase, Cloudflare, OpenRouter, Google, Mistral AI and RevenueCat) process information in the United States and other countries. Where the law requires it, transfers from the European Economic Area, the United Kingdom or Switzerland rely on the EU-US Data Privacy Framework or the European Commission's Standard Contractual Clauses.
What we do not do
- No advertising and no ad tracking.
- No analytics or tracking tools in the app.
- We do not sell or share personal information, as those terms are defined in the California Consumer Privacy Act.
- Flammo does not give legal, tax, financial or medical advice.
Your rights
Depending on where you live, you can ask to see, correct, download or delete the information we hold about you, object to or restrict how we use it, and withdraw your consent at any time. You can delete your account yourself in the app; for anything else, email support@moonara.app. We answer within one month (45 days for California requests) and will not treat you differently for using these rights. If you are in the European Economic Area or the United Kingdom, you can also complain to your local data protection authority.
Deleting your data
You can delete your account at any time in the app: Me, then Delete my account. This removes your account, its usage records and any backup from our account service. Letters on your phone are removed when you delete them or the app.
Children
Flammo is not meant for children under 13, and we do not knowingly collect information from them.
Changes
If this policy changes, we will update this page and the date above. Important changes will be shown in the app.
Contact
Questions about privacy: support@moonara.app. Flammo is made by Zenawi LLC.