Fluxer is run by a Swedish company, and the GDPR covers all of your data on fluxer.com wherever it's stored. Most of fluxer.com's data is stored in New Jersey in the United States today, and we're moving it to our own hardware in Sweden. Section 6 of our privacy policy says where your data is kept, and we update it first whenever that changes.
Where is my data stored today?
Most account information, messages, communities and files on fluxer.com are stored with Vultr, a US hosting provider, in Piscataway, New Jersey. Call traffic can go through locations around the world so calls connect near the people in them, and it's encrypted in transit.
Crash and performance reports from the iOS and Android apps are off unless you turn them on, and they're stored on servers we rent from Hetzner in Finland.
Is Fluxer hosted in Europe?
fluxer.com isn't hosted in Europe yet, and we're moving its stored data to our own hardware in Sweden with no date set for the move yet. You may have read that Fluxer is hosted in Sweden already, and that's where we're headed, but we aren't there yet.
Which company runs Fluxer?
fluxer.com is run by Fluxer Platform AB, a Swedish private limited company founded in Stockholm in 2025. It's registered with Bolagsverket, the Swedish Companies Registration Office, under organisation number 559537-3993, and the Swedish Authority for Privacy Protection (IMY) supervises how we handle your data under the GDPR, as section 1 of our privacy policy says. Fluxer has no subsidiary or other company in the United States.
Hampus Kraft, who founded Fluxer, owns all of the shares in Fluxer Platform AB, and Fluxer has no venture capital, no outside investors and no other owners.
Some reviews and AI answers mix up Sweden and Switzerland, and some sites list Fluxer's domains under Proudlock Technology LLC, a company with no connection to Fluxer.
Moving to our own hardware in Sweden
We're moving fluxer.com's stored data from US hosting to our own hardware in Sweden, and we haven't set a date for the move yet. 31173 Services AB, a Swedish data centre and network provider, supplies the space, power and network connection. Fluxer will own the hardware, and only our team will be able to sign in to the systems on it.
We want your data stored in Sweden, under Swedish and EU law, on hardware we control. Fluxer is already a Swedish company, and the move removes the US hosting provider. We also plan to move Fluxer's code from GitHub to systems we run ourselves.
What changes after the move?
fluxer.com's stored data will be on our own hardware in Sweden, except for a few things that stay outside Sweden, and no US hosting provider will store it.
An order from the US or another country outside the EU sent directly to us still can't be enforced in Sweden without going through Swedish authorities, and police and prosecutors in other EU countries will still follow the EU's e-Evidence rules. We'll update section 6 of our privacy policy first when the move happens, and explain what changed.
We also expect the move to make fluxer.com more stable, because we'll fully control our own network and the hardware that fluxer.com will run on.
What stays outside Sweden?
Call relays will stay in cloud locations around the world after the move, so that calls keep connecting near the people in them. Once end-to-end encrypted calls are out on fluxer.com, the relays won't be able to access what's said or shown in a call.
Crash and performance reports from the iOS and Android apps are stored in Finland in the EU. Some of our service providers, such as Stripe for payments, also process data outside Sweden, and section 4.2 of our privacy policy lists the kinds of providers we use.
Are there voice servers near me?
fluxer.com runs voice servers in regions across North and South America, Europe, Africa, Asia and Oceania, and our home page lists every region. Each call uses the region closest to the first person who joins it, unless the voice channel is set to a specific region.
What does the GDPR give me?
You can see, correct, export and delete your personal data, object to how we use it and complain to a data protection authority. Section 10 of our privacy policy lists them all, and you can export your data or delete your account in the app.
IMY is the Swedish authority that supervises how Fluxer handles personal data under the GDPR. You can complain to IMY or to the data protection authority in the country where you live, and section 10 of our privacy policy says how to do it.
How do Swedish and EU law protect my privacy?
The Swedish constitution protects everyone against Swedish authorities opening or secretly intercepting private messages, except where a law allows it, such as a court-approved interception. It also protects against surveillance or mapping that seriously intrudes on someone's privacy without consent, unless a law allows it.
The EU Charter of Fundamental Rights protects your private life, communications and personal data. Any limit has to be set by law and be necessary and proportionate.
When does Fluxer hand over data?
We never hand over your data just because a government asks. We disclose it only in response to a valid legal request that passes our review under section 14 of our privacy policy, and we narrow or reject requests that are invalid or overbroad.
We tell the people affected before we disclose anything, so that they have a chance to object, unless the law forbids it or there's a genuine emergency. In a genuine emergency, we can disclose data without telling you first to prevent death or serious physical harm. Section 4.3 of our privacy policy lists the other cases where we disclose data.
When a person on our team confirms reported child sexual abuse material, we report it to NCMEC's CyberTipline, a US nonprofit that passes reports on to law enforcement in the US and other countries. These reports are separate from legal requests.
Authorities send legal requests to legal@fluxer.com, as our company information page says, and section 14 of our privacy policy says what a request needs to include.
Swedish police and prosecutors need a decision under the Swedish Code of Judicial Procedure, and the most intrusive measures need a court's permission. These are the main kinds of decisions that can apply to your data on fluxer.com.
- A prosecutor or an investigation leader can order us to keep specific data for up to 90 days and extend it once by up to 90 more days. We can ask a court to review it.
- A prosecutor or an investigation leader can decide to seize data, and we can ask a court to review the seizure, which it normally does within four days.
- Secret interception of communications needs a court's permission, and it's allowed only for serious crimes, such as crimes with a minimum sentence of two years.
We review every decision we get under section 14 of our privacy policy.
Does Fluxer have to keep data for the police?
Sweden has no general rule that makes Fluxer keep data for the police, because its data retention rules cover phone and internet providers and not messaging services that work without phone numbers. A prosecutor can still order us to keep specific data, as described above. We keep data only for the periods in section 7 of our privacy policy.
Can police in other EU countries get my data?
Police and prosecutors in other EU countries have to follow the EU's e-Evidence rules, which limit what they can ask for and give Sweden a say in many cases. Since 18 August 2026, they can send an order for electronic evidence to us in Sweden.
- An order for account details, or for an IP address to identify who used it, has to be issued or approved by a judge, a court or a public prosecutor.
- An order for message content or other details of your activity has to be issued or approved by a judge or a court. It's allowed only for crimes that can lead to at least three years in prison, or for a few listed crimes such as child sexual abuse and terrorism.
- When the order is for message content or activity details and you don't live in the country that sent it, a Swedish prosecutor gets a copy of the order at the same time and can refuse it. A refusal can be because the order would breach fundamental rights or press freedom, or because the act isn't a crime in Sweden.
- The authority that sends the order has to tell you about it, unless the law of that country lets it wait or stay silent to protect an ongoing investigation.
We review these orders under section 14 of our privacy policy, like every other legal request, and we tell you before we disclose anything unless the law forbids it or there's a genuine emergency. The rules for these orders are in Regulation (EU) 2023/1543.
How does a government outside the EU ask for my data?
Most countries send a request for legal assistance to the Swedish Ministry of Justice, which passes it on to the Swedish Prosecution Authority or a Swedish court. Norway, Iceland, Switzerland and Liechtenstein can send theirs to a prosecutor or court directly.
A request like this usually takes several months, and Swedish prosecutors and courts can use only the measures Swedish law allows in a Swedish case. Before Sweden helps with a search or a seizure, what the person is accused of has to be a crime in Sweden too.
When does Sweden turn a request down?
Sweden has to turn a request down when helping would harm its sovereignty, its security or other essential interests, or go against Swedish legal principles. For most countries it can also refuse when the case is about a political or military offence. These rules are in the Swedish law on international legal assistance in criminal cases.
Can a court outside the EU order Fluxer to hand over data?
A court order or decision from a country outside the EU can't be enforced against us in the EU unless a treaty backs it, such as a treaty on legal assistance, as Article 48 of the GDPR says. We tell authorities outside the EU to use the treaty route through Sweden, and we review every direct request we get under section 14 of our privacy policy, where we narrow or reject invalid or overbroad ones before we disclose anything.
What about the US CLOUD Act?
The CLOUD Act is a law the United States passed in 2018 that says a provider under US jurisdiction has to hand over data it has or controls when lawfully ordered to, wherever it's stored. US courts make the final call on which providers that includes.
Fluxer Platform AB has no company or office in the US. A US order isn't enforceable against us in the EU unless a treaty backs it, as Article 48 of the GDPR says, and US requests to Sweden follow the treaty on legal assistance between the two countries.
As of October 2026, the US has no CLOUD Act agreement with Sweden or the EU, and a US request goes through the treaty on legal assistance. Swedish prosecutors and courts decide under Swedish law, and a US order sent to us can't be enforced in Sweden.
Can US authorities get data from Fluxer's hosting provider?
Data stored with a US hosting provider can be subject to US orders to that provider, and that's one reason we're moving fluxer.com to Sweden. Until the move, most of the stored data on fluxer.com is hosted with Vultr in Piscataway, New Jersey, a US hosting provider that the CLOUD Act applies to, as section 6 of our privacy policy says.
The US Justice Department tells prosecutors to ask the company that owns the data, not its cloud provider, when that's practical and won't harm the investigation. For fluxer.com that company is us, and we point US authorities to the treaty route through Sweden and review every request we get under section 14 of our privacy policy.
How can I limit the data Fluxer has about me?
Section 2 of our privacy policy lists everything we collect on fluxer.com, and Fluxer has no third-party analytics, browser fingerprinting or ad tracking.
- You can delete your own messages in bulk with "Delete my messages".
- You can export your data and delete your account.
- End-to-end encryption is planned, but nothing on Fluxer has it yet.
- On a self-hosted instance, Fluxer has none of that instance's messages, files or accounts to hand over, and its own admins decide where they're stored.