Privacy Policy
This policy explains what data the Fliploop app collects, why, where it is kept, and the choices you have. Fliploop is published by NK Genesis (“we”, “us”). If you have a question, email fliploop.ops@gmail.com.
1. The short version
- You sign in with Apple or Google. We get your email address and an account ID from them. We never see a password.
- The business records you enter are stored on your phone and backed up to your own private account, so you can restore them on another device.
- Photos, video clips and receipt images you attach are backed up to your private account too, so they come back if you reinstall or change phones. Only you can reach them.
- AI features run on your phone using Apple’s on-device model. That data is not sent to us or to any AI provider.
- No ads, no ad tracking, no third-party analytics, and we never sell your data.
- You can export your records or delete your account and all server data from inside the app at any time.
2. Data we collect
This table lists every kind of data Fliploop handles, what it is used for, and where it is stored or processed.
| Data | Why we need it | Where it’s stored or processed |
|---|---|---|
| Account details: your email address and a user ID from Apple or Google. With Apple, you can choose to share a private relay email address instead of your real one. | To create your account, sign you in, and keep your records tied to you. | Supabase Auth, hosted in Seoul, South Korea. Apple or Google handle the sign-in itself. |
| Business records: items (title, category, condition, status, storage location, notes, labels, custom fields), purchase and sale prices, dates, the marketplace used, costs and expenses, fees, and mileage logs. | To run the app, work out your profit, and back up your records so you can restore them on another device. | On your device, and backed up to your private Supabase database in Seoul, South Korea. |
| Business settings: business name, region, currency and the categories you select. | To set up the app for your business and show amounts in your currency. | On your device, and backed up to your private Supabase database in Seoul, South Korea. |
| Photos, short video clips and receipt images you attach. | To show them with your items and expenses, and to restore them on a new or reinstalled phone. | On your device, and backed up to private storage with Cloudflare R2 (Asia-Pacific region). A list of your files is kept in your private Supabase database in Seoul, South Korea. |
| Subscription details: your Fliploop account ID, purchase and transaction details from Apple, and basic device and app information (such as app version, OS version and country or App Store storefront). | To check whether you have Fliploop Pro and unlock it on your devices. | Apple (App Store) and RevenueCat. |
| Payment card details. | To pay for a subscription. | Handled by Apple only. We never see or store them. |
3. What stays on your device
- AI features. The listing writer and reading details from a photo use Apple’s on-device model. The text and images you use with them stay on your phone. They are not sent to us or to any AI provider.
- Notifications. Reminders are optional. They include a daily reminder, item reminders, and a reminder the day before a free trial ends. They are scheduled on your phone. We don’t run a push notification server.
- Sign-in tokens. The tokens that keep you signed in are stored in the iOS Keychain.
4. How we use your data
We use your data only to provide Fliploop to you:
- to sign you in and keep your account secure;
- to store, back up and sync your records so you can restore them on another device;
- to check your subscription and unlock Fliploop Pro;
- to answer you when you contact us.
If you are in the EU or UK, the main legal basis for this is that we need the data to provide the service you signed up for (performing our contract with you).
5. What we don’t do
- We don’t show ads, and we don’t use your data for advertising.
- We don’t use third-party analytics SDKs.
- We don’t track you across other apps or websites, so the app does not ask for tracking permission.
- We don’t sell your data or share it for advertising.
- We don’t use your location.
6. Service providers
We use a small number of providers to run Fliploop. Each one only gets the data it needs to do its job.
- Apple — Sign in with Apple, App Store payments and subscriptions, and the on-device AI model.
- Google — Sign in with Google, if you choose it. Used for sign-in only.
- Supabase — account sign-in (Supabase Auth) and the database that backs up your records. Hosted in the Asia-Pacific region, in Seoul, South Korea.
- Cloudflare — Cloudflare R2 stores the backup of the photos, video clips and receipt images you attach. The files are private: each one can only be reached through a short-lived link issued to your signed-in account. Hosted in the Asia-Pacific region.
- RevenueCat — manages your subscription status. It receives your Fliploop account ID, purchase and transaction details from Apple, and basic device and app information.
Each provider handles data under its own privacy policy and terms.
7. International transfers
Our servers are in Seoul, South Korea. If you live somewhere else, your account details and business records will be transferred to and stored in South Korea, and your photos, video clips and receipt images to Cloudflare’s Asia-Pacific region. Data protection laws there may be different from the laws where you live. Apple, Google, Cloudflare and RevenueCat may also process data in other countries. We only share what each provider needs, and data is always encrypted in transit.
8. Security
- All data sent between the app and our servers is encrypted in transit using TLS.
- Every row in the database is protected by row-level security. Only your signed-in account can read or change your records.
- Your photos, video clips and receipts are stored privately. They are never public, and each file can only be reached through a short-lived link issued to your signed-in account.
- Sign-in tokens are kept in the iOS Keychain on your phone.
- We never handle passwords or payment card details.
No system is perfectly secure, but we work to protect your data and limit who can access it.
9. How long we keep data
- We keep your account details and backed-up records for as long as your account exists.
- When you delete your account, we delete your account, all your records, and all your photos, video clips and receipts from our servers.
- When you delete a photo, clip or receipt in the app, its backup copy is deleted too.
- Our hosting provider may keep backups for a limited period under its own retention policy. After that, the data is gone.
- Data on your phone stays there until you erase it in the app, delete your account, or remove the app.
- Apple and RevenueCat keep purchase records under their own policies.
10. Your rights and choices
You are in control of your data. From inside the app you can:
- Access and export — get all your records as a CSV file in Settings → Data & privacy → Export.
- Correct — edit any record at any time.
- Erase records — remove all items, costs and trips on your device in Settings → Data & privacy.
- Delete your account — permanently delete your account and all your data on our servers, including photos, video clips and receipts in Settings → Data & privacy → Delete account.
You can also email fliploop.ops@gmail.com to ask for a copy of your data or to have it deleted. We may need to confirm the request comes from you.
Deleting your account does not cancel an App Store subscription. You can cancel it in your iPhone’s Settings. See how to cancel.
EU and UK residents
Under the GDPR and UK GDPR, you have the right to access, correct, delete, restrict or object to the processing of your personal data, and to receive it in a portable format. You also have the right to complain to your local data protection authority.
California residents
Under California privacy law, you have the right to know what personal information we collect and how we use it, to ask us to delete or correct it, and not to be treated differently for using these rights. We do not sell or share your personal information.
11. Device permissions
- Camera and photo library — only to attach photos, receipts and short item video clips.
- Microphone — only to record audio in short item video clips.
- Notifications — only for the optional reminders you turn on.
Fliploop does not use your location. You can change these permissions at any time in your iPhone’s Settings.
12. Children
Fliploop is not directed to children under 13, and it is not intended for anyone under 16 in the EU or UK. We do not knowingly collect data from children. If you believe a child has given us data, email us and we will delete it.
13. Changes to this policy
We may update this policy from time to time. When we do, we will change the effective date at the top of this page. If the changes are significant, we will let you know, for example in the app.
14. Contact us
NK Genesis
Email: fliploop.ops@gmail.com