FLOTTI / INFORMATION
How Flotti handles data: in the app and on this website.
Details in square brackets [ ] will be completed before the app launches.
Last updated: 1 November 2026
1. Controller
Lawrence Moses Nadar
3907, Marina Arcade Tower, 6a Al Naseem St, Dubai Marina, Dubai, United Arab Emirates
Email: support@flottiai.com
2. In short
The most important points first:
You don’t need an account. Invoices, estimates, clients and photos stay on your iPhone.
Only when you use an AI feature do we send that content to our server and our AI providers to process it.
No advertising, no tracking, no selling of data.
3. Your data on your iPhone
The app stores business details, clients, line items, prices, documents and photos only on your device. We have no access to them. If you delete the app, this data is deleted. Back up important documents yourself, for example as PDF.
4. AI features
When you trigger an AI feature (speak or type a job, read photos, cost estimate), we send the following to our server over an encrypted connection (HTTPS):
the text you typed or spoke (voice as an audio file),
photos you add or take,
the details needed for the task, such as your trade and line items and prices from the job.
Our server passes this on to the following providers, who process it on our behalf:
Anthropic (USA), the “Claude” language model, to understand and structure text and photos,
OpenAI (USA), to turn speech into text and to generate images.
We don’t store this content permanently. Our server keeps it in memory only while it is being processed. According to the providers, data sent through their APIs is not used to train their models and is kept only briefly, for example to detect abuse. [Check the current API data terms of Anthropic and OpenAI before launch.]
Legal basis: Art. 6(1)(b) GDPR (the feature you trigger).
Third-party data: if your input contains data about your customers (names, addresses, photos), you are responsible for being allowed to process it. We process it only to carry out the feature you asked for.
5. Anonymous usage counts
The app reports anonymous counters to our server, for example “cost estimate opened”. We store only the day, the event name and up to two fixed categories (such as “invoice”). We store no device or user identifier, no texts, names or amounts. The counters cannot be linked to a person.
6. Subscription and payment
You buy the subscription through Apple (in-app purchase). Apple alone handles the payment; we receive no payment or card data.
To manage the subscription (check that it is active, restore purchases) we use RevenueCat (RevenueCat, Inc., USA). It processes a random app identifier, purchase information from Apple and technical details such as app version and country, but no name or email address. Legal basis: Art. 6(1)(b) GDPR.
7. Website and server logs
This website is provided through Framer (Framer B.V., Netherlands). When you open it, your browser sends technically necessary connection data such as IP address, time and browser information to the hosting infrastructure.
The invoice demo on the home page reads your text locally in the browser. It sends it neither to an AI nor to us, and does not store it. Please enter made-up sample data only.
When our app server (api.flottiai.com) is accessed, technically necessary logs (IP address, time, path, response code) are created at the hosting provider, Render. They serve operation, security and abuse prevention, and are deleted after a short time. Legal basis: Art. 6(1)(f) GDPR (legitimate interest in secure operation).
We use no advertising or marketing cookies on this website. [Check before launch: cookie and analytics settings in Framer and, if needed, a consent banner.]
8. Contact
If you write to us, we process your message and email address to reply (Art. 6(1)(b) or (f) GDPR). We delete correspondence once it is no longer needed, at the latest after statutory retention periods. We use Zoho Mail for email.
9. App permissions
The app asks only for these permissions:
Microphone: to speak your jobs. Recording starts only when you start it.
Camera and photos: for photos attached to a job. Only photos you choose are processed.
You can withdraw them at any time in iPhone Settings.
10. Sharing documents
When you send, share or print a document, this happens through iPhone features (Share, Mail, AirPrint). The documents do not pass through our server.
11. Recipients and transfers outside the EU
Our app server runs at Render Services, Inc. in Frankfurt am Main (EU). Anthropic, OpenAI, RevenueCat and Render are based in the USA. Transfers rely on the EU Standard Contractual Clauses and, where available, the EU-US Data Privacy Framework (Art. 44 et seq. GDPR). We are also based outside the EU; you can reach us at the address above at any time. [Clarify with a lawyer: EU representative under Art. 27 GDPR and a data processing agreement.]
12. Retention
We don’t store content from AI requests. Anonymous counters are kept because they relate to no person. The hosting provider deletes server logs after a short time. Everything else is on your device.
13. Your rights
You have the right of access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction (Art. 18), data portability (Art. 20) and objection (Art. 21 GDPR).
Write to us at support@flottiai.com. You can also complain to a data protection authority, for example where you live. Because we keep no accounts and store no user identifier, we can only find data if you give us details.
14. Changes
We update this policy when the app or the law changes. The current version on this page applies.