Privacy Policy

Who we are

FlipFlap (“we,” “us,” “our”) operates the website at flipflap.io and the FlipFlap application. This policy explains what data we collect, why we collect it, and how we handle it.

Data we collect

We collect only what is necessary to provide the service:

• Account information. When you sign up we store your name, email address, and profile image provided by your authentication provider (Clerk).
• Board data. The boards you create, including configuration settings such as quotes, city selections, menu items, and coin preferences.
• Payment information. If you purchase a lifetime plan, payment is processed by Polar. We store your Polar customer ID and plan status but never see or store your card details.
• Usage data. Basic analytics such as page views and feature usage to help us improve the product. We do not use third-party advertising trackers.

How we use your data

• To create, store, and display your split-flap boards.
• To authenticate you and keep your account secure.
• To process purchases and manage your subscription status.
• To send transactional emails related to your account or purchases.
• To improve FlipFlap based on aggregated, non-identifying usage patterns.

Third-party services

We rely on the following third-party services:

• Clerk for authentication and user management.
• Convex for database storage and real-time data sync.
• Polar for payment processing.
• Vercel for hosting and deployment.
• CoinGecko for cryptocurrency price data (no personal data is sent).
• Open-Meteo for weather data (only latitude/longitude of the city you choose is sent).

Each service has its own privacy policy. We encourage you to review them.

Cookies

We use essential cookies for authentication sessions. We do not use cookies for advertising or cross-site tracking.

Data retention

Your account and board data are retained as long as your account is active. If you delete your account, we will remove your personal data and boards within 30 days. Aggregated, non-identifying analytics may be retained indefinitely.

Your rights

You can request access to, correction of, or deletion of your personal data at any time by emailing us. If you are located in the EU/EEA, you have additional rights under the GDPR including data portability and the right to lodge a complaint with a supervisory authority.

Security

We use industry-standard encryption (TLS) for data in transit and rely on our infrastructure providers' security measures for data at rest. No system is perfectly secure, and we cannot guarantee absolute security, but we take reasonable steps to protect your information.

Children

FlipFlap is not directed at children under 13. We do not knowingly collect personal information from children. If you believe a child has provided us with personal data, please contact us and we will delete it.

Changes to this policy

We may update this policy from time to time. When we make material changes, we will update the date at the top of this page and, where appropriate, notify you by email.

Contact

Questions about this policy? Email us at hello@flipflap.io.