Privacy Policy

Introduction

At Flippr, Inc. ("we," "our," or "us"), protecting your privacy is one of our top priorities. This Privacy Policy explains what information we collect, how we use it, who we share it with, and the rights you have regarding your personal information.

This policy applies to all users of:

• The Flippr website (useFlippr.com)
• The Flippr mobile apps (iOS and Android)
• Flippr APIs, browser extensions, SDKs, and integrations
• Any related online services operated by Flippr

If you have additional questions or require more information, please contact us at support@useFlippr.com.

Information We Collect

We may collect the following types of information:

Account & Authentication Data

Name, email address, and password (or sign-in token) when you register for an account.

If you sign in using Google, we only collect your email address for authentication and identification. We do not access or store any other Google account data.

Transaction Data

Payment details are collected and processed by trusted third-party providers (e.g., Stripe, RevenueCat, Apple, Google).

Flippr does not store full credit card information but may keep transaction records for billing, fraud prevention, and support.

Photos & Scan Content

When you scan an item, the photos you capture with your camera or select from your photo library are uploaded to our servers so we can identify the item, estimate its value, and save it to your account.

These images are stored with your account and are used to provide the scanning and listing features. We do not use your photos for advertising, and we do not sell them or share them with advertising partners.

You can delete scanned items, and their associated images, from within the app.

Usage & Technical Data

Device information, IP address, browser type, operating system, ISP, and session timestamps.

Log files that track interactions, clicks, navigation, and error events within our site or app.

App usage data (e.g., scans performed, features used) to help improve functionality. This data is associated with your account so we can understand how features are used and improve them.

Session replay: For a small percentage of app sessions, we record an anonymized replay of on-screen activity to diagnose usability problems. Text you enter and images on screen are masked before the recording leaves your device.

Crash reports: When the app crashes, we collect diagnostic data about the failure. Crash reports are not linked to your identity.

Advertising & Device Identifiers

On iOS only, we may collect your device's advertising identifier (IDFA) and share it with our advertising partners, Meta and TikTok, to measure how well our ad campaigns perform and to attribute new signups to the ads that produced them.

We ask your permission first. The App Tracking Transparency prompt appears before any tracking begins. If you decline, we do not collect or share your advertising identifier, and every feature of Flippr continues to work normally. You can change your choice at any time in iOS Settings → Privacy & Security → Tracking.

This is the only category of data we share for advertising purposes, and it constitutes "tracking" as Apple defines it.

On Android, we do not collect an advertising identifier at all. We run no advertising campaigns on Android, so the Meta and TikTok SDKs are not enabled there and no advertising data is collected or shared.

Communications Data

If you contact us, we may collect your name, email, phone number, and the contents of your message or attachments.

If you text our customer support SMS line, we collect your mobile phone number and the contents of your text messages to provide support.

Cookies & SDKs

Cookies (Web): Used to support login, preferences, analytics, and advertising.

SDKs (Mobile Apps): Used for analytics, crash reporting, and attribution. The third-party SDKs we currently include are listed under "Sharing Your Information" below.

How We Use Your Information

We use your information to:

• Provide, operate, and maintain the Services.
• Authenticate user accounts and enable secure login.
• Process payments, subscriptions, and transactions.
• Contact you about your account, purchases, or service-related matters.
• Provide customer support and respond to inquiries.
• Send service updates, promotional materials, or newsletters (with your consent where required).
• Personalize your experience and recommend relevant items or features.
• Analyze usage patterns to improve the website, app, and services.
• Detect, prevent, and address fraud, abuse, or security issues.

Emails & Marketing

We may use your email, wishlist, and account information to send you updates about items, categories, or features you may be interested in.

Some emails may contain affiliate marketing links.

You can opt out of marketing emails at any time using the one-click "unsubscribe" link in every message or by adjusting your account preferences.

Essential service emails (e.g., receipts, security alerts) will still be sent.

SMS Text Messaging (Customer Support)

This section applies when you initiate a text message conversation with Flippr by texting our customer support SMS line. These messages are for customer support only—not promotional or marketing campaigns.

When you text us, we collect your mobile phone number and the contents of your messages. We use this information solely to respond to your inquiry and provide customer support.

We do not sell, rent, or share your mobile phone number with third parties for their promotional or marketing purposes.

Message frequency varies depending on your conversation with us. You may receive multiple messages while we assist you with your request.

Message and data rates may apply. Check with your wireless carrier for details about your plan.

By texting our customer support SMS line, you consent to receive SMS replies from Flippr related to your support request.

To stop receiving SMS messages from us, reply STOP to any message. For help, reply HELP or contact us at support@useFlippr.com.

Legal Basis for Processing (UK & EU Users)

Under the UK GDPR and EU GDPR, Flippr processes personal data on the following bases:

• Contractual necessity: To provide services, process payments, and manage accounts.
• Consent: For marketing communications, analytics, cookies, and advertising SDKs.
• Legitimate interests: To improve our app, monitor usage, and prevent abuse (balanced against user rights).
• Legal obligations: To comply with tax, accounting, and regulatory requirements.

Data Retention

We keep personal data only as long as necessary for the purposes outlined in this policy:

• Account data: While your account is active and up to 12 months after closure.
• Transaction data: Retained as required by tax and financial regulations.
• Communications: Up to 24 months for support and record-keeping.
• Analytics data: Typically aggregated or anonymized after 12 months.

When retention periods expire, data is securely deleted or anonymized.

International Data Transfers

If you are located outside the United States, your personal data may be transferred to and stored in the U.S. or other countries where our service providers operate.

We implement safeguards such as:

• The UK Addendum to EU Standard Contractual Clauses (SCCs)
• Data Processing Agreements with providers (e.g., Stripe, Supabase, RevenueCat, Google)

These measures ensure your data remains protected in compliance with UK/EU law.

Sharing Your Information

We do not sell, rent, or trade your personal information. We may share it only in these cases:

• Service Providers: With trusted vendors who perform services on our behalf (e.g., payments, email delivery, analytics).
• Advertising Partners: Meta and TikTok receive your advertising identifier and app activity for campaign measurement, where you have permitted tracking.
• Legal Requirements: When required by law, subpoena, or valid legal process.
• Business Transfers: In connection with a merger, acquisition, or sale of assets.

The third-party providers we currently use are:

• Supabase — account authentication, database, and storage of your scans and photos
• RevenueCat — subscription and purchase management
• Apple and Google — in-app purchases and sign-in
• PostHog — product analytics and session replay
• Firebase Crashlytics — crash and error reporting
• Meta and TikTok — advertising attribution and campaign measurement
• Loops — transactional and marketing email delivery
• Stripe — payment processing

This list may change as our services evolve. We will update this policy when it does.

We never share payment information, passwords, or sensitive authentication data.

Mobile phone numbers collected through customer-initiated SMS support conversations are not sold, rented, or shared with third parties for their promotional or marketing purposes.

Your Rights

Depending on your location, you may have rights under data protection laws:

UK/EU Users (GDPR/UK GDPR):

• Access your data
• Request correction or deletion
• Restrict or object to processing
• Request portability
• Withdraw consent at any time

California Residents (CCPA):

• Request disclosure of categories and specific pieces of data collected
• Request deletion of personal data
• Opt out of the sale of personal data (Flippr does not sell personal data)

Requests can be made at support@useFlippr.com

Data Security

We implement technical and organizational measures to protect your personal information. While we work to safeguard data, no system is 100% secure, and we cannot guarantee absolute security.

Cookies, SDKs & Advertising

Essential cookies/SDKs: Required for authentication, payments, and functionality.

Non-essential cookies/SDKs: Used for analytics and advertising attribution (with consent where required).

Advertising partners may use cookies, web beacons, or SDKs to measure campaign effectiveness and personalize ads.

Mobile app tracking: On iOS, tracking only occurs if you allow it through the App Tracking Transparency prompt. You can withdraw that permission at any time in iOS Settings → Privacy & Security → Tracking. On Android, you can reset or delete your Advertising ID in Settings → Privacy → Ads.

You can accept, reject, or customize optional cookies using the cookie banner when you first visit Flippr, or at any time via the "Cookie settings" link in the site footer.

You can also manage cookies through your browser settings or device permissions.

Flippr's Privacy Policy does not apply to external partners or websites. Please review third-party privacy policies to understand their practices and opt-out options.

Children's Privacy

Flippr is not intended for individuals under 18 years of age. We do not knowingly collect, store, or process information from users under 18.

If we learn that we have collected personal data from someone under 18, we will promptly delete it. If you believe a minor has provided information to Flippr, please contact us.

Changes to This Policy

We may update this Privacy Policy from time to time.

Continued use of Flippr after updates indicates acceptance of the revised policy.

Contact Us

If you have questions about this Privacy Policy or your data rights, please contact us at: support@useFlippr.com