Legal

Privacy Policy

Last updated 21 July 2026

Flock is a desktop cockpit for coding agents, built local-first. This policy explains what we collect, what we deliberately do not, and the choices you have.

The short version. Your code, your prompts, and everything your agents produce stay on your machine. We hold the minimum needed to run your account and billing: your sign-in identity, your flock handle, and subscription status. Voice is transcribed on-device. Your agents run on your own model keys, which we pass through and never store on our servers.

1. Who we are

Flock ("we", "us") is the data controller for the personal data described below. For any privacy question, or to exercise your rights, contact us at info@minnebo.ai.

2. What we collect

Account and identity

When you create a flock ID, you sign in with Google. We receive your email address and name from Google, and you choose a public handle. We store your profile (handle, email, referral count, and any teams you belong to) so friends can find you and so your presence works across devices.

Billing

If you subscribe to a paid plan, payment is processed by Stripe. We do not see or store your card details. We keep a record of your entitlement (plan, status, seats, renewal date) so the app knows what you are entitled to.

Product and technical data

We keep basic usage counters tied to your account (for example, whether you are within the free plan limits). When you visit this website or download the app, our host and CDN process standard technical data such as IP address and user agent to serve the request and keep the service secure.

3. What stays on your machine

By design, most of what you do in flock never reaches us:

Your code and repositories. Agents run locally against your own checkouts.
Prompts and agent output. The conversation between you and your agents stays local.
The knowledge graph. On Free and Individual plans it runs in a Postgres container on your own machine. Nothing leaves.
Voice. Dictation is transcribed on-device with a local model. Audio is not uploaded.
Model keys. Your Claude, OpenCode, and Codex credentials are used by the app on your machine and passed through to those providers. We do not store them on our servers.

4. Hosted graph (Teams and Enterprise)

Teams and Enterprise plans can use a managed, shared knowledge graph that we host on your behalf. That graph holds the notes your agents write (decisions, attempts, file claims), scoped to your organisation with row-level isolation. Teams can supply their own encryption key so the hosted graph is encrypted at rest under a key you control. We access this data only to operate, secure, and support the service.

5. Model providers

Flock orchestrates coding agents that run on providers you choose and authenticate yourself, such as Anthropic (Claude), OpenAI (Codex), and OpenCode. When you use those agents, your prompts and code are sent directly from your machine to that provider under your own account and their terms and privacy policy. Flock is not a party to that exchange.

6. How we use your data

To create and run your account and flock ID.
To provide collaboration features you initiate (friends, shared sessions).
To take payment and manage your subscription and seats.
To provide support and respond to you.
To keep the service secure and prevent abuse.
To meet our legal obligations.

7. Legal bases

Where the GDPR applies, we rely on: performance of a contract (running your account and subscription), legitimate interests (securing the service, understanding aggregate usage), consent (where we ask for it, which you may withdraw), and legal obligation (for example, tax records).

8. Who we share with

We use a small set of processors to run flock:

Google: sign-in.
Supabase: account database and authentication backend.
Stripe: payments and subscription management.
Vercel: website and serverless hosting.
Discord: optional community (only if you join).

We do not sell your personal data. We share it only with these providers to run the service, or where required by law.

9. International transfers

Some providers process data outside your country. Where that happens, we rely on appropriate safeguards such as the European Commission's standard contractual clauses.

10. Retention

We keep account data for as long as your account is active, and billing records for as long as required by law. If you close your account, we delete or anonymise your personal data within a reasonable period, except where we must keep it to meet a legal obligation.

11. Your rights

Depending on where you live, you may have the right to access, correct, delete, export, or restrict the processing of your personal data, and to object to certain processing. To exercise any of these, email info@minnebo.ai. You also have the right to complain to your local data protection authority.

12. Security

We use encryption in transit, scoped access controls, and reputable infrastructure providers. No system is perfectly secure, but the local-first design means the most sensitive material, your code and your agent activity, never leaves your machine in the first place.

13. Children

Flock is not directed to children and is not intended for anyone under 16. We do not knowingly collect data from children.

14. Changes

We may update this policy as flock evolves. We will change the date at the top and, for material changes, give notice in the app or by email.

15. Contact

Questions about this policy or your data: info@minnebo.ai.