FClaw Agent Privacy Supplement

Effective Date: June 4, 2026

Supplement Notice: This statement supplements the Smart Bay General Privacy Policy. It specifically governs the data processing activities of the FClaw App—our on-device intelligent automation agent—and its underlying native Linux sandbox environment, related background services, and external capability providers.

1. APP ARCHITECTURE & BACKGROUND SERVICES

FClaw is designed with a privacy-first, hybrid edge-cloud architecture. To provide secure and seamless automation, FClaw utilizes a unique separation of duties and specialized system services:

The FClaw App & Sandbox: Captures your commands and generates action plans via Large Language Models (LLMs). Executions occur entirely within a local Native Linux Sandbox to prevent execution payloads from leaving your device.
Foreground Data Sync Service: FClaw runs a foreground service (NodeForegroundService) to ensure uninterrupted task execution and data synchronization between the Android node and the Linux sandbox, even when the app is minimized.
Event-Driven Context (Notification Listener): FClaw utilizes a local DeviceNotificationListenerService. When explicitly authorized, it can read incoming notifications to act as triggers for your automated workflows (e.g., "reply to this specific message"). This context remains local.
Cross-App Capabilities: FClaw interfaces with external capability providers (via CAPABILITY_PROVIDER intents) and can be activated system-wide through our OS-level bootstrap receiver, allowing the agent to function seamlessly across your device ecosystem.

2. DATA WE COLLECT AND PROCESS

A. Prompts, Media, and Commands

When you interact with FClaw, we process your voice, text inputs, selected images, and multimodal queries to understand your automation goals. This data is temporarily transmitted to the LLM for intent parsing.

B. Sandbox Execution Logs

FClaw maintains local terminal logs within the native Linux sandbox to track skill execution success, errors, and system states. These logs remain strictly on your local device storage to aid in crash recovery and troubleshooting.

3. THIRD-PARTY LLMS AND TRIAL API KEYS

The reasoning capabilities of FClaw are powered by cloud-based Large Language Models (LLMs). Your prompts are sent to the LLM to generate execution code.

Built-in Trial API Key vs. Bring Your Own Key (BYOK)

To allow you to experience FClaw immediately, we provide a built-in trial LLM API Key. When using this trial key, your prompts are processed securely and are strictly ephemeral (your data is not used to train base models).

FClaw also supports a BYOK (Bring Your Own Key) mode. If you input your own API Key (e.g., from OpenAI, Anthropic), your prompts will be routed directly to your chosen provider, governed by their respective data privacy policies. Smart Bay assumes no liability for third-party data processing under the BYOK configuration.

4. LOCAL DEVICE PERMISSIONS EXPLAINED

Because FClaw is an autonomous agent designed to perform tasks on your behalf, it requires access to core system functions. We request these permissions strictly to execute the local skills you command:

Communication Automation (SMS, Phone, Call Logs): Required for the agent to execute communication skills, such as sending automated text messages or making calls at your instruction.
Productivity Automation (Contacts, Calendar): Required to read and write events to your calendar or look up contact details to fulfill scheduling and communication tasks.
Media & Sensors (Camera, Microphone, Storage): Required to accept multi-modal inputs (e.g., voice commands, analyzing photos or documents stored on your device).
Context Awareness (Location & Activity Recognition): Used to provide environmental context to your prompts (e.g., executing a specific automation only when you are driving or arriving at a specific location).
Network & Notifications: Required to sync data with cloud LLMs, manage nearby devices, and read notification content to trigger automated responses.