Privacy Policy
Effective date: not yet published
Draft — pending attorney review. This document is not
yet final and has not been reviewed by a lawyer. It will change before
Flags is publicly available. It is published here only to satisfy
App Store submission requirements during testing.
1. What we collect
- Account info: display name, birthdate, gender, and identity claims Apple/Google provide at sign-in. We never receive your Apple/Google password.
- Profile content: bio, photos, prompts, hobbies/tags, and anything else you add to your profile.
- Location — coarse only. If you opt in, your location is snapped to the center of a roughly 5-mile grid cell on your device, before it's ever sent anywhere. We never store or receive your exact coordinates.
- A country-level region signal, used only to confirm you're using Flags from the United States.
- Messages and photos you send to other members.
- An optional voice intro, if you record one — checked before it's visible to anyone else, on your device first when possible, so the recording doesn't have to leave your device for that check.
- Flags, reports, and accountability record data (see below).
- Device/technical data: Apple's App Attest device-integrity attestation, standard crash/diagnostic data.
- Subscription status, once billing exists — never your card number or Apple ID payment details.
2. What we don't collect
We do not run ads, do not use third-party ad-tracking SDKs, and do not sell personal information to data brokers.
3. The accountability record and content moderation
Other members can raise a flag or file a report about their interaction with you, which can include the message(s) involved. If a message you sent is flagged, you choose whether to consent to it being retained as part of your accountability record or decline it. Messages and photos may be automatically screened by a third-party AI moderation service before delivery. A voice intro is transcribed on your device first whenever possible — only that text, not the recording, needs to be checked; the recording itself is only sent to us if your device can't do the transcription. A small number of human reviewers, requiring multi-factor authentication, can access flagged content for safety purposes.
4. Who we share data with
- Supabase — our database/auth/hosting provider.
- OpenAI — receives message/photo content solely for moderation screening.
- Apple / Google — for Sign in with Apple/Google.
- A third-party IP-geolocation service — receives your IP address only to resolve a country code, only as a fallback when on-device location can't.
We do not otherwise sell, rent, or share your personal information with third parties for their own marketing purposes.
5. Your choices and rights
You can turn off location sharing at any time. You can delete individual messages you sent, subject to the accountability-record consent mechanic above.
California residents
Even though Flags likely doesn't yet meet CCPA's applicability thresholds, we're including these rights now:
- Right to know what personal information we've collected about you
- Right to delete your personal information, subject to certain exceptions
- Right to correct inaccurate personal information
- Right to non-discrimination for exercising any of the above
We don't sell or share personal information as CCPA defines those terms, so there's no opt-out needed. To exercise any right above, contact us via the Support page.
6. Children's privacy
Flags is not directed at, and does not knowingly collect information from, anyone under 18.
7. Changes to this policy
We'll ask you to re-consent in the app whenever this policy materially changes.
8. Contact
See our Support page.