Effective date: 27 September 2026 · Last updated: 28 September 2026
Red Flag or Not? (“the app”) is published by ByteLuna Labs (“we”, “us”). This policy explains what data the app handles, why, and the choices you have. The app is intended for adults (18+) in the United States and is designed so that the personal situations you describe stay on your device.
In short: you type a description of a social situation; it is sent over an encrypted connection to our server, which passes it to a third-party AI model for structured classification. We do not store that text on our servers and never log it. Your results, history and saved patterns are stored only on your device, encrypted. There are no accounts, no sign-in and no cloud sync.
ByteLuna Labs is the controller of the limited data described here. Contact: contact@bytelunalabs.com.
When you run a check, the free-text description you typed (and the optional category you picked) is sent over HTTPS to our backend, a Cloudflare Worker. The Worker forwards the text to TypeSafe’s Jev model, a third-party AI service that acts as our processor. Jev is used only for structured classification — for example, whether the behavior you described seems recurring, whether context is missing, or whether a boundary issue is present. Its answers are turned into your result by fixed rules and pre-written text inside the app.
For operations and abuse prevention, the Worker logs only technical metadata: a random request ID, timestamp, app version, model version, response time (latency), the kind of result returned, and an error code if something failed. These logs contain no text you wrote.
Your checks, results, history and saved patterns are kept in a local database on your phone. The descriptions you wrote are encrypted with AES-256-GCM using a key held in the Android Keystore. This data is excluded from Android cloud backup and device-to-device transfer, and we have no copy of it. Settings such as preferences are also stored locally.
The app offers a free tier (one check per day) and an optional one-time Pro purchase ($2.99, lifetime). To support this:
To protect the service from abuse, the app may request a Google Play Integrity token and send it to our Worker, which uses it to verify that requests come from a genuine install of the app from Google Play. Google processes device and app signals to produce this token under its own terms.
| Data | Purpose | Shared with |
|---|---|---|
| Situation text (transient) | Classification to produce your result | Cloudflare (hosting), TypeSafe Jev (AI processor) |
| Anonymous app user ID, purchase data | Pro entitlement, restore, daily quota | RevenueCat, Google Play |
| Play Integrity token | Abuse prevention | |
| Usage events (no text) | Improving the app | Google Firebase |
| Crash reports (no text) | Fixing bugs | Google Firebase |
Third-party policies: Cloudflare, TypeSafe (per its published terms), RevenueCat, Google (Firebase, Play).
We do not sell or share your personal information for cross-context behavioral advertising, and the app shows no ads.
No account, name, email address, phone number, contacts, location, photos, microphone or camera access. We do not store your situation text anywhere outside your device.
In the app, open Settings → Delete all data. This deletes all history, results and patterns on the device and destroys the encryption key. Uninstalling the app also deletes it. Because there are no accounts and we keep nothing you wrote on our servers, there is no server-side copy to delete. For analytics, crash or RevenueCat data, email contact@bytelunalabs.com. See the data deletion page.
Depending on where you live (for example California under the CCPA/CPRA, or the EU/UK under the GDPR), you may have the right to know, access, correct, delete or port your personal information, and to object to or restrict certain processing. Because most data stays on your device, you already control it directly. For anything else, email contact@bytelunalabs.com; we will respond within the time required by law and will not discriminate against you for exercising your rights. Where the GDPR applies, our legal bases are performance of our contract with you (running checks, Pro), our legitimate interests (security, abuse prevention, crash fixing) and, where required, your consent (analytics).
Data in transit is protected with HTTPS/TLS; stored descriptions are encrypted on the device. No system is perfectly secure, but we design the app to keep sensitive text off our servers entirely.
The app is intended for adults 18 and older and is not directed to children. We do not knowingly collect data from anyone under 18. If you believe a minor has used the app, contact us.
Red Flag or Not? does not provide professional, medical, psychological or legal advice and does not determine anyone’s intentions. If you are in immediate danger, call 911. For emotional crisis support in the US, call or text 988.
We may update this policy. We will change the “Last updated” date above and, for material changes, notify you in the app.
ByteLuna Labs — contact@bytelunalabs.com