MonyFlow Reply, privacy

Last updated 2026-09-15.

The short version

MonyFlow Reply does not have a server. It has no account, no login and no analytics. Everything it does stays on your computer, with exactly one exception, and it is off until you switch it on: AI draft. When you turn that on and press Draft a reply, the recent messages in that one chat are sent to the AI provider whose key you supplied, so it can write a reply. That is the only network request this extension ever makes. If you never turn it on, nothing you type and no message you read ever leaves your computer.

What it stores, and where

Everything is kept in Chrome's own extension storage on your machine (chrome.storage.local):

• the replies you save, and the shortcuts you give them
• the variables you set, such as your booking link
• notes and deal fields you type against a chat
• your settings: theme, trigger character, response-time goal
• scheduled messages, until they are sent or removed

That storage belongs to your browser profile. If you sign into Chrome and have extension sync switched on, Chrome may sync it between your own devices under your own Google account. That is Chrome's sync, not ours, and we cannot read it.

What it reads

The extension runs only on https://web.whatsapp.com. It has no permission to run anywhere else. On that page it reads the conversation you have open and your chat list, so it can rank your saved replies against what the other person just said and show you who is waiting. That reading happens in your browser and stays in your browser. Message contents are never transmitted, never logged, and never written to storage. The only things written down are the ones you typed yourself.

What it sends

Nothing to us. There is no server operated by us, so there is nothing of yours for us to hold, and no request of any kind reaches us. With AI draft off, which is how it ships, it sends nothing at all. With AI draft on, pressing Draft a reply sends, to the provider you chose and to nobody else:

• up to the last 12 messages of the open chat, capped at 4000 characters
• the voice and the facts you typed into AI settings

It does not send your name, the other person's name or number, your reply library, your notes, your deal fields, or any other chat. It is sent directly from your browser to that provider over HTTPS. It does not pass through us. What the provider then does with it is governed by their terms, not ours. If you are handling someone else's personal details, read those terms before you turn this on, and use the facts box for what the model may say rather than putting anything sensitive in it. Your API key is stored on your machine in the extension's own storage. It is read only by the extension's background worker and is never exposed to the WhatsApp page. We never receive it.

Permissions, and why each exists

• storage and unlimitedStorage: to keep your reply library on your machine. Unlimited because a saved voice note is large.
• sidePanel: to show the panel when you open it.
• Host access to web.whatsapp.com only: the extension cannot see any other site, including your email, your bank, or any other tab.
• Access to your AI provider's domain: requested only at the moment you switch AI draft on, never at install, and only for the provider you picked. Decline it and the rest of the extension works exactly as before.

Sending messages

The extension writes replies into WhatsApp's message box. It sends only when you click send, or when you have explicitly turned on hands-off replies for a chat you have marked as business, which is limited to one message per chat per ten minutes and six per hour. It is off by default and turning it on takes two deliberate switches.

Removing your data

Uninstalling the extension removes everything it stored, your API key included. There is no copy anywhere else for us to delete, because we never had one. Anything you sent to an AI provider is held under that provider's own policy, and you would ask them to remove it.

Contact

sun@sunnymfmoney.com code@scaleontime.com Either address reaches us. Write to whichever you prefer.