Privacy Policy

Introduction

At Flippr, Inc. ("we," "our," or "us"), protecting your privacy is one of our top priorities. This Privacy Policy explains what information we collect, how we use it, who we share it with, and the rights you have regarding your personal information.

This policy applies to all users of:

• The Flippr website (useFlippr.com)
• The Flippr mobile apps (iOS and Android)
• Flippr APIs, browser extensions, SDKs, and integrations
• Any related online services operated by Flippr

If you have additional questions or require more information, please contact us at support@useFlippr.com.

Information We Collect

We may collect the following types of information:

Account & Authentication Data

Name, email address, and password (or sign-in token) when you register for an account.

If you sign in using Google, we only collect your email address for authentication and identification. We do not access or store any other Google account data.

Transaction Data

Payment details are collected and processed by trusted third-party providers (e.g., Stripe, RevenueCat, Apple, Google).

Flippr does not store full credit card information but may keep transaction records for billing, fraud prevention, and support.

Photos & Scan Content

When you scan an item, the photos you capture with your camera or select from your photo library are uploaded to our servers so we can identify the item, estimate its value, and save it to your account.

These images are stored with your account and are used to provide the scanning and listing features. We do not use your photos for advertising, and we do not sell them or share them with advertising partners.

You can delete scanned items, and their associated images, from within the app.

Usage & Technical Data

Device information, IP address, browser type, operating system, ISP, and session timestamps.

Log files that track interactions, clicks, navigation, and error events within our site or app.

App usage data (e.g., scans performed, features used) to help improve functionality. This data is associated with your account so we can understand how features are used and improve them.

Session replay: For a small percentage of app sessions, we record an anonymized replay of on-screen activity to diagnose usability problems. Text you enter and images on screen are masked before the recording leaves your device.

Crash reports: When the app crashes, we collect diagnostic data about the failure. Crash reports are not linked to your identity.

Approximate Location

When you use the app, we estimate your approximate location (city, state or region, and country) from your IP address. We do not use GPS for this and it does not require a location permission. This estimate is associated with your account and is used to understand where our users are and to improve regional features. We look up IP addresses using a database hosted on our own servers, so your IP address is not sent to a third party for this purpose.

If you choose to use Stores Near You and allow location access, your device's location is used at that moment to find nearby stores through Google Maps Platform. We do not store that location.

Advertising & Device Identifiers

On iOS only, we may collect your device's advertising identifier (IDFA) and share it with our advertising partners, Meta and TikTok, to measure how well our ad campaigns perform and to attribute new signups to the ads that produced them.

We ask your permission first. The App Tracking Transparency prompt appears before any tracking begins. If you decline, we do not collect or share your advertising identifier, and every feature of Flippr continues to work normally. You can change your choice at any time in iOS Settings → Privacy & Security → Tracking.

In the app, this is the only data we share for advertising purposes, and it constitutes "tracking" as Apple defines it.

On Android, we do not collect an advertising identifier at all. We run no advertising campaigns on Android, so the Meta and TikTok SDKs are not enabled there and no advertising data is collected or shared.

On our website, if you accept marketing cookies, our advertising partners' pixels record the pages you visit, the plans you look at and pick, when you start checkout, and when you sign up or buy a subscription, including the price. For TikTok, we also send your purchase from our servers along with a scrambled (hashed) copy of your email address and account ID, your IP address, browser details, and the ID of the ad you clicked. This lets TikTok count each purchase once and credit the right ad. When you arrive from a TikTok ad, we keep the ID of the ad you clicked in a cookie on our site for up to 7 days, so the ad can still be credited if you accept marketing cookies later in your visit. If you decline marketing cookies, we delete that ID, and none of this is sent to our advertising partners, from your browser or from our servers.

Communications Data

If you contact us, we may collect your name, email, phone number, and the contents of your message or attachments.

If you text our customer support SMS line, we collect your mobile phone number and the contents of your text messages to provide support.

Cookies & SDKs

Cookies (Web): Used to support login, preferences, analytics, and advertising.

SDKs (Mobile Apps): Used for analytics, crash reporting, and attribution. The third-party SDKs we currently include are listed under "Sharing Your Information" below.

How We Use Your Information

We use your information to:

• Provide, operate, and maintain the Services.
• Authenticate user accounts and enable secure login.
• Process payments, subscriptions, and transactions.
• Contact you about your account, purchases, or service-related matters.
• Provide customer support and respond to inquiries.
• Send service updates, promotional materials, or newsletters (with your consent where required).
• Personalize your experience and recommend relevant items or features.
• Analyze usage patterns to improve the website, app, and services.
• Detect, prevent, and address fraud, abuse, or security issues.

Emails & Marketing

We may use your email, wishlist, and account information to send you updates about items, categories, or features you may be interested in.

Some emails may contain affiliate marketing links.

You can opt out of marketing emails at any time using the one-click "unsubscribe" link in every message or by adjusting your account preferences.

Essential service emails (e.g., receipts, security alerts) will still be sent.

SMS Text Messaging (Customer Support)

This section applies when you initiate a text message conversation with Flippr by texting our customer support SMS line. These support messages are for customer support only—not promotional or marketing campaigns. Creator program texts are covered in the next section.

When you text us, we collect your mobile phone number and the contents of your messages. We use this information solely to respond to your inquiry and provide customer support.

We do not sell, rent, or share your mobile phone number with third parties for their promotional or marketing purposes.

Message frequency varies depending on your conversation with us. You may receive multiple messages while we assist you with your request.

Message and data rates may apply. Check with your wireless carrier for details about your plan.

By texting our customer support SMS line, you consent to receive SMS replies from Flippr related to your support request.

To stop receiving SMS messages from us, reply STOP to any message. For help, reply HELP or contact us at support@useFlippr.com.

SMS Text Messaging (Creator Program)

This section applies to members of the Flippr Creator Program who opt in to text messages by entering their mobile number and checking the text message consent box on the creator application or the creator dashboard at useflippr.com. Opting in is optional and is not required to join the program or to be paid.

We use your mobile number to send messages about the Creator Program, such as new video briefs, upload links, feedback on videos you submitted, payout notices, and replies to questions you text us. We do not use creator program texts to advertise Flippr subscriptions or other products.

We do not sell or share your SMS opt-in data or personal information with third parties for marketing purposes. This includes your mobile phone number and text messaging consent, which we do not share with third parties or affiliates for their marketing or promotional purposes. We share it only with the service providers that deliver our messages (such as Twilio).

Message frequency varies, typically a few messages per week. Message and data rates may apply. Check with your wireless carrier for details about your plan.

To stop receiving creator program texts, reply STOP to any message or turn texts off on your creator dashboard. For help, reply HELP or contact us at support@useFlippr.com.

Legal Basis for Processing (UK & EU Users)

Under the UK GDPR and EU GDPR, Flippr processes personal data on the following bases:

• Contractual necessity: To provide services, process payments, and manage accounts.
• Consent: For marketing communications, analytics, cookies, and advertising SDKs.
• Legitimate interests: To improve our app, monitor usage, and prevent abuse (balanced against user rights).
• Legal obligations: To comply with tax, accounting, and regulatory requirements.

Data Retention

We keep personal data only as long as necessary for the purposes outlined in this policy:

• Account data: While your account is active and up to 12 months after closure.
• Transaction data: Retained as required by tax and financial regulations.
• Communications: Up to 24 months for support and record-keeping.
• Analytics data: Typically aggregated or anonymized after 12 months.

When retention periods expire, data is securely deleted or anonymized.

International Data Transfers

If you are located outside the United States, your personal data may be transferred to and stored in the U.S. or other countries where our service providers operate.

We implement safeguards such as:

• The UK Addendum to EU Standard Contractual Clauses (SCCs)
• Data Processing Agreements with providers (e.g., Stripe, Supabase, RevenueCat, Google)

These measures ensure your data remains protected in compliance with UK/EU law.

Sharing Your Information

We do not sell, rent, or trade your personal information. We may share it only in these cases:

• Service Providers: With trusted vendors who perform services on our behalf (e.g., payments, email delivery, analytics).
• Advertising Partners: Advertising partners such as Meta, TikTok, Google, Reddit, and AppLovin receive website activity for ad measurement when you accept marketing cookies. On iOS, Meta and TikTok receive your advertising identifier and app activity where you have permitted tracking.
• Legal Requirements: When required by law, subpoena, or valid legal process.
• Business Transfers: In connection with a merger, acquisition, or sale of assets.

The third-party providers we currently use are:

• Supabase — account authentication, database, and storage of your scans and photos
• RevenueCat — subscription and purchase management
• Apple and Google — in-app purchases and sign-in
• PostHog — product analytics and session replay
• Firebase Crashlytics — crash and error reporting
• Meta and TikTok — advertising attribution and campaign measurement
• Google — advertising measurement (Google Ads) and website analytics (Google Analytics)
• Reddit and AppLovin — advertising measurement on our website
• Rewardful — referral and affiliate tracking
• Loops — transactional and marketing email delivery
• Stripe — payment processing

This list may change as our services evolve. We will update this policy when it does.

We never share payment information, passwords, or sensitive authentication data.

Mobile phone numbers collected through customer-initiated SMS support conversations are not sold, rented, or shared with third parties for their promotional or marketing purposes.

Your Rights

Depending on your location, you may have rights under data protection laws:

UK/EU Users (GDPR/UK GDPR):

• Access your data
• Request correction or deletion
• Restrict or object to processing
• Request portability
• Withdraw consent at any time

California Residents (CCPA):

• Request disclosure of categories and specific pieces of data collected
• Request deletion of personal data
• Opt out of the sale of personal data (Flippr does not sell personal data)

Requests can be made at support@useFlippr.com

Data Security

We implement technical and organizational measures to protect your personal information. While we work to safeguard data, no system is 100% secure, and we cannot guarantee absolute security.

Cookies, SDKs & Advertising

Essential cookies/SDKs: Required for authentication, payments, and functionality.

Non-essential cookies/SDKs: Used for analytics and advertising attribution (with consent where required).

Advertising partners may use cookies, web beacons, or SDKs to measure campaign effectiveness and personalize ads.

Mobile app tracking: On iOS, tracking only occurs if you allow it through the App Tracking Transparency prompt. You can withdraw that permission at any time in iOS Settings → Privacy & Security → Tracking. On Android, you can reset or delete your Advertising ID in Settings → Privacy → Ads.

You can accept, reject, or customize optional cookies using the cookie banner when you first visit Flippr, or at any time via the "Cookie settings" link in the site footer.

On our onboarding page (useflippr.com/start), the choice is a checkbox on the first screen instead of the banner. It starts checked, unless you're in Europe, your browser sends a Global Privacy Control signal, or we can't tell where you are. If you leave it checked and continue, you accept analytics and marketing cookies. If you uncheck it, we use only essential cookies.

You can also manage cookies through your browser settings or device permissions.

Flippr's Privacy Policy does not apply to external partners or websites. Please review third-party privacy policies to understand their practices and opt-out options.

Children's Privacy

Flippr is not intended for individuals under 18 years of age. We do not knowingly collect, store, or process information from users under 18.

If we learn that we have collected personal data from someone under 18, we will promptly delete it. If you believe a minor has provided information to Flippr, please contact us.

Changes to This Policy

We may update this Privacy Policy from time to time.

Continued use of Flippr after updates indicates acceptance of the revised policy.

Contact Us

If you have questions about this Privacy Policy or your data rights, please contact us at: support@useFlippr.com