Privacy

Flack is an independent Android app that lets you hear Slack direct messages in Android Auto and answer them by voice. This page says what it does with your messages. It applies to every version of Flack.

What Flack reads

With your permission, Flack reads notifications from the official Slack app on your phone. It ignores every other app's notifications before reading anything in them.

What Flack keeps

Message text and names stay in the phone's memory while a notification is showing. Flack never saves them to storage, never includes them in backups and never writes them to logs. Its status screen and test report show counts and settings only.

What Flack sends

Without Slack sign-in, nothing. Flack makes no network requests. When you confirm a reply, Flack passes your words to the Slack app on your phone, and Slack sends it the same way it sends any reply.

Slack sign-in is optional. If you sign in, Flack connects only to Slack, over HTTPS. It checks the notification's conversation and workspace identifiers and asks Slack to confirm the signed-in workspace before offering a top-level reply. It checks the workspace again before posting your reply as you. Slack also grants permission to search messages and read names; this reply route uses neither.

Accounts, tracking and ads

Flack has no account of its own, no analytics, no crash reporting and no ads. If you sign in to Slack, Flack keeps one Slack token per workspace, with the workspace name and your Slack name, encrypted with an Android Keystore key. It is never logged, backed up or shown. Sign out deletes it and asks Slack to end the sign-in.

Voice

Android Auto and your phone's assistant handle listening and dictation. Flack does not use the microphone. Google's and Samsung's own privacy terms apply to that part.

Questions

The source code is public at github.com/jamditis/flack. Report a privacy problem privately through the security advisory form.