# FlowCrypt privacy rating

Browser extension for OpenPGP email encryption in Gmail on Chrome, Firefox and other browsers, with companion apps for Android and iOS.

## Summary

FlowCrypt scores 45 out of 100 (grade D) on the PGP tools criteria. It meets 1 of 4 criteria: no ads or data sales. It partly meets open source and independent audit. It does not meet no trackers or telemetry. It is based in Czechia: Not in the Five, Nine or Fourteen Eyes; EU member (GDPR).

- Website: https://flowcrypt.com
- Source code: https://github.com/FlowCrypt/flowcrypt-browser
- Jurisdiction: Czechia. Not in the Five, Nine or Fourteen Eyes. EU member (GDPR).
- Home page trackers: none found
- Category: [PGP tools](https://privacyratings.com/pgp-tools/)
- Grade: D (45/100)

## Criteria

| Criterion | Answer | Note | Evidence |
| --- | --- | --- | --- |
| Open source | Partial | Source available under a custom license. Not an OSI license. | https://github.com/FlowCrypt/flowcrypt-browser/blob/master/LICENSE |
| No trackers or telemetry | No | The website loads Mouseflow session recording, and Exodus finds ACRA and OpenTelemetry in the Android app. | https://reports.exodus-privacy.eu.org/en/reports/com.flowcrypt.email/latest/ |
| No ads or data sales | Yes | Funded by enterprise licenses. The privacy policy states personal information is not sold. | https://flowcrypt.com/privacy |
| Independent audit | Partial | Cure53 published full reports on the extension and apps, but they are older than three years. | https://flowcrypt.com/assets/documents/FLO-02-report.pdf |

Source: https://privacyratings.com/pgp-tools/flowcrypt/
Edit: https://github.com/privacyratings/privacyratings.com/edit/main/ratings/pgp-tools/flowcrypt.md