Known limits of encryption

End-to-end encryption protects the content of your messages. Some information, however, isn’t encrypted, either for technical reasons or on purpose. We want you to know about it clearly.

Messages from before encryption

Messages sent before Flowsy switched to end-to-end encryption stay unencrypted on the server. These messages aren’t encrypted afterwards.

History imported from WhatsApp

Chat history you import from WhatsApp is kept unencrypted on the Flowsy server.

Who wrote to whom, and when

To deliver messages to the right people, Flowsy has to see some information:

• Who sent a message and which chat it went to
• When the message was sent
• The size of files sent
• A group’s name, description, icon and member list

The message itself and the content of a photo or document aren’t part of this; they stay encrypted.

Chat states

Read and delivered receipts, the typing indicator, mute, pin, star, archive and the disappearing-message timer aren’t encrypted.

Messages created by Flowsy

Process cards, meeting and group invitations, system lines such as “member added”, and call records are created by Flowsy and aren’t encrypted.

Flowsy AI

When you ask a question with @Flowsy AI, your question and the chat’s recent messages are opened and read by Flowsy AI so it can prepare an answer. No message is sent to Flowsy AI unless you call it.

Link previews in the browser

When you share a link on Flowsy Web, the preview is prepared through Flowsy; the link’s address goes to Flowsy in the process. Your message is still sent encrypted.

Your device’s security

Encryption protects your messages between devices. Someone who picks up your unlocked phone or takes a screenshot can see your messages. Use a screen lock on your devices and log out of linked devices you don’t recognize.