Privacy in the app

Last updated: September 2026

FlowBotCommander reads your screen using image and text recognition. That these contents do not leave your device is not a side note — so here it is in full. These notes supplement our Privacy policy.

What the app processes on your device

• Screen areas for image and text recognition (OCR) — processed locally in memory only, never stored, never transmitted to us or to third parties.
• Your flows and modules — they are files on your device. We neither read nor back them up.

What the app transmits to us

• Licence check: a pseudonymous SHA-256 device hash from which no plain-text data can be reconstructed, the licence key, the app version and the operating system version. Purpose: abuse prevention and licence management, Art. 6 (1) (b) GDPR.
• The number of runs carried out, for the quota check — start, end, duration and a status value. Without any information about what the run did.
• Module identifiers at startup, so that the release table matches your version.

Notices in the free mode

• Only our own offers are advertised. No third-party advertising networks, no device identifier for advertising purposes, no profiling.
• If you click such a notice, a redirect on our website opens. Only a total number of calls per notice and day is counted — no cookies, no storage of your IP address, no recognition. The app itself reports nothing about the click.

What the app never transmits

There is no code path in the application that would send any of these TO US on its own. We check this before every release. Data only ever leaves your computer where you set it up yourself — see the next two sections.

When you report a problem

Help → Report a problem sends exactly what you see in the dialog: your description, the app version, optionally your email address, and — only if you leave the box ticked — the last 60 log lines. Those lines are shown to you beforehand and can contain window titles and recognised text, so please have a look before sending. Without your report we would never learn about the problem. Nothing is sent automatically or in the background.

When you set up a service yourself

Three functions work with a service that you enter: the AI modules (image recognition by a language model), speech recognition for spoken announcements, and the control API, through which an assistant can fetch a screenshot. All three are OFF until you set them up.

• Local service (e.g. Ollama or a Whisper server on this computer): everything stays on your device. Nothing leaves it.
• Rented provider (Claude, GPT, a hosted Whisper): the selected image area or the recorded sound section is transmitted to that provider — triggered by you, not by us. Which data protection terms apply then is a matter between you and that provider.
• Control API: reachable only from this computer and off by default. Anyone you hand the token to can also fetch screenshots and failure shots through it. If that is a cloud assistant, parts of your screen may reach it.
• We learn nothing about it. The app does not report which service you use, and it sends none of this content to us.
• Sound is not stored. Speech recognition keeps only the last few seconds in memory and discards them after recognition. There is no „save recording“ function.

Your rights

Access, rectification, erasure, restriction, data portability and objection (Art. 15 to 21 GDPR) — please contact service@flowbotcommander.com

You can unbind your device at any time under My account. This ends the link between the device hash and your licence.

You have the right to lodge a complaint with a data protection supervisory authority about the processing of your personal data (Art. 77 GDPR). The authority responsible for us is: Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen (LDI NRW), Kavalleriestraße 2-4, 40213 Düsseldorf, Germany.

Provider

Patrick Kairies
Hauptstraße 64
37671 Höxter-Ovenhausen
Deutschland