Privacy
Policy

1. Scope and who is responsible

This Privacy Policy explains how the FlipLens mobile application, website, and related services (the “Service”) collect, use, disclose, retain, and protect personal information. It also explains your choices and rights.

The independent developer identified as FlipLens’s seller or provider on its Apple App Store product page is responsible for the Service and is the controller of personal data processed for FlipLens’s purposes (“FlipLens,” “we,” “us,” or “our”). Other platforms may act as separate controllers for information they receive under their own terms—for example, Apple, Google, or eBay.

2. Information we collect

Account and identity information

Depending on how you sign in, we receive a Firebase user identifier and may receive your name, email address, profile details, and sign-in provider. Apple or Google controls the information it makes available to us. A guest session uses an anonymous account identifier until it is upgraded or deleted.

Photos, searches, and item information

We process photos you capture or select, text hints, item characteristics, detected brand and model, style code, size, condition, visible flaws, search queries, generated descriptions, price estimates, source links, and related scan results. A photo may contain personal information you did not intend to include, so review its background before submitting it.

Saved content and preferences

We may store scan history, selected photos, listing drafts, preferred currency, appearance, selected marketplaces, onboarding choices, deletion markers, and other settings. Some information is kept only on your device; signed-in account data may be synced using Firebase Cloud Firestore and Cloud Storage.

Marketplace connection and listing information

If you connect eBay, we receive authorization tokens, your eBay username, registration marketplace, seller-readiness information, listing-policy and inventory-location identifiers, and connection status. If you prepare or publish a listing, we process the photos, title, description, product details, price, currency, condition, marketplace, category, listing identifiers, status, and public listing URL.

If you connect Vinted or Facebook Marketplace in FlipLens’s in-app browser, WebKit keeps that marketplace’s cookies and website session in a separate on-device data store so it can be reused for future listings. FlipLens may inspect the visible listing form and fill the product details you selected, but it does not press the marketplace’s final publish or post control.

Technical and service information

We and our service providers may automatically process IP address, device and app information, authentication events, App Check integrity signals, request timestamps, error and security logs, and basic network metadata. FlipLens includes Meta’s app-events SDK and RevenueCat. Meta may process app-activation events and limited technical data for analytics, conversions, and campaign measurement. Before you answer Apple’s tracking request, and whenever permission is denied or restricted, FlipLens disables advertiser-ID collection and limits Meta’s use of event data. If you authorize tracking, FlipLens may collect the IDFA and Meta’s anonymous identifier and provide them to RevenueCat. RevenueCat processes purchase and entitlement information to operate subscriptions and may send trial, subscription, renewal, and revenue events to Meta so Meta can attribute those events to campaigns. Meta event-data use remains limited to analytics and conversions. Apple’s SKAdNetwork may provide aggregate campaign results regardless of your ATT choice.

Information we do not request

FlipLens does not ask for precise location, contacts, health information, government identifiers, or payment-card details. A connected marketplace may collect payment, shipping, tax, or identity information directly under its own privacy notice.

3. How and why we use information

Where we rely on legitimate interests, we consider the impact on your rights and use information only where those interests are not overridden. Where processing is based on consent, withdrawing consent does not affect earlier lawful processing.

4. AI and search processing

When you ask FlipLens to identify, describe, or price an item, you direct the app to send the selected photos and/or text inputs to Google’s Gemini models through Firebase AI Logic. Product information and requested size, condition, and currency may also be used with Google Search grounding to find current public marketplace evidence.

FlipLens identifies these recipients in the compact notice beside the account-creation controls. By choosing a Continue option, you allow the selected photos and product text you later submit to be sent to these services for the analysis you request.

Google processes those inputs and related technical data to return the requested output and operate, protect, and comply with its services under the applicable Google and Firebase terms. Do not submit faces, documents, addresses, private communications, or other sensitive personal information for product analysis.

AI outputs are stored in your scan history or draft only when the app saves them locally or syncs them to your account. FlipLens does not use your photos or private account content to build an advertising profile.

For photo-based price matching, FlipLens also sends one compressed product photo (approximately 640 pixels and no more than 250 KB) to eBay’s official image-search service. FlipLens’s callable backend relays that image only for the live request and does not persist or log the image contents.

5. How we disclose information

We disclose information only as needed for the following purposes:

• Infrastructure and app services. Google Firebase provides authentication, databases, file storage, cloud functions, hosting, app-integrity checks, and Firebase AI Logic.
• Sign-in providers. Apple and Google process sign-in activity when you choose their login methods.
• AI and web research. Google Gemini and Google Search process the product inputs and search context described above.
• Marketplaces. For photo-based item pricing, eBay receives one compressed product photo for visual matching. eBay also receives account authorization requests and, only when you choose, listing photos and information needed to check readiness, prepare, or publish a listing. Opening any marketplace or source link sends your request directly to that site.
• In-app marketplace sessions. Vinted and Facebook receive the requests, cookies, product details, and photos involved when you sign in or use their listing pages. Their pages and accounts remain governed by their own terms and privacy notices.
• Subscriptions and campaign measurement. RevenueCat processes purchase and entitlement information to provide subscriptions. Meta may process the app-event information described in Section 2 for analytics, conversions, and campaign measurement. If you authorize Apple’s tracking request, FlipLens may provide the IDFA and Meta’s anonymous identifier to RevenueCat so RevenueCat’s subscription events can be matched with Meta campaigns. If you decline, those tracking identifiers are not collected or newly provided for this purpose.
• Utility providers. A currency-rate provider receives the currency codes needed to obtain exchange rates; it does not need your account content.
• Legal, safety, and business events. We may disclose information when reasonably necessary to comply with law, protect rights and safety, investigate misuse, or support a merger, financing, acquisition, or transfer of the Service, subject to appropriate notice and safeguards.

Service providers are permitted to process personal information only for the services they provide to us and must protect it under their contracts and applicable law. Their own service data may also be governed by their privacy notices.

6. No sale, optional campaign tracking, and automated decisions

FlipLens does not sell personal information or display third-party ads. FlipLens requests App Tracking Transparency permission for Meta campaign measurement. The IDFA and Meta identifier are collected and shared with RevenueCat for Meta attribution only when Apple reports that you authorized tracking. If you decline, FlipLens keeps advertiser-ID collection disabled and relies on aggregate SKAdNetwork reporting. Meta event-data use is limited to analytics and conversions. We do not use personal information to make decisions that produce legal or similarly significant effects about you. Product and price outputs assist your own decisions and should be reviewed by you.

7. Retention and deletion

Retention depends on the kind of information and why it is needed:

• Local photos, history, drafts, and preferences remain on your device until you delete them, clear them where the app provides that option, or remove the app.
• Synced history, photos, drafts, and account data are generally kept while your account is active or until you delete an item or delete your account in Profile.
• When you delete a synced history item, its active record and stored photos are removed. A minimal deletion marker may remain so the item is not restored during synchronization.
• eBay authorization tokens are kept until you disconnect eBay, the authorization expires or is revoked, or your FlipLens account is deleted. Connection status and listing records may be kept longer where needed for security, support, dispute resolution, or legal records. App Store and subscription providers may retain purchase records where required for accounting, fraud prevention, or legal compliance.
• Security, request, and error logs are kept for limited periods set by the relevant service provider and may be retained longer when needed to investigate abuse or comply with law.

Deleted information may remain temporarily in encrypted backups or provider systems before being overwritten. We may retain information that law requires, that is needed to establish or defend legal claims, or that has been irreversibly de-identified.

8. Your controls and choices

• Use iOS Settings to grant or revoke camera and photo access.
• Use iOS Settings → Privacy & Security → Tracking to grant or revoke FlipLens’s tracking permission.
• Choose only the photos and text you want FlipLens to analyze.
• Do not submit a scan if you do not want the selected content processed by the AI and marketplace providers described above.
• Delete individual scan-history items in the app.
• Change app preferences in Profile.
• Disconnect eBay from Profile to delete FlipLens’s stored eBay access tokens.
• Sign out to end the current signed-in session on the device.
• Delete your FlipLens account and associated synced data from Profile.
• Request access, correction, or export using the contact method below.

Deleting or disconnecting data in FlipLens does not delete a listing already published to eBay or data held independently by Apple, Google, eBay, or another platform. Use that provider’s controls for its copy.

9. Privacy rights

Depending on where you live, you may have the right to request access to, correction of, deletion of, or a portable copy of your personal data; to restrict or object to certain processing; to withdraw consent; and to appeal or complain about how a request was handled. You will not be discriminated against for exercising a privacy right.

To make a request, use the contact method in Section 15. State the right you want to exercise and provide the email address connected to FlipLens. We may ask for information needed to verify that you control the account. An authorized agent may submit a request where permitted by law, subject to verification of the authorization.

EEA and UK users may also lodge a complaint with the data-protection authority where they live, work, or believe a violation occurred. We encourage you to contact us first so we can try to resolve the concern.

10. International data transfers

FlipLens and its providers may process information outside your country. In particular, Firebase Authentication is operated from the United States, while other Firebase, Google, and marketplace services may use global infrastructure. Those countries may have different data-protection laws.

Where required, transfers rely on recognized safeguards such as adequacy decisions, contractual protections, and supplementary security measures. You may contact us for more information about safeguards relevant to your data.

11. Security

We use reasonable technical and organizational safeguards designed to protect personal information, including authenticated access controls, per-user database and storage rules, HTTPS transmission, service-provider encryption, App Check, and server-side storage for marketplace tokens. No method of storage or transmission is completely secure, so we cannot guarantee absolute security.

Protect your device and sign-in methods, and do not share email sign-in links or marketplace authorization credentials.

12. Children

FlipLens is not directed to children under 13, and we do not knowingly collect personal information from a child under 13. A user below the age at which they may consent to online data processing where they live must use the Service only with authorization from a parent or legal guardian. If you believe a child provided personal information without proper authorization, contact us so we can investigate and delete it.

13. California notice

This section supplements the rest of the Policy for California residents. In the preceding 12 months, FlipLens may have collected the categories described in Section 2: identifiers; customer-record information; internet or electronic activity; photos and other user content; commercial information related to listings; approximate location inferred from IP address; and inferences such as item identity, condition, or preferences. We collect these categories from you, your device, sign-in providers, connected marketplaces, and service providers for the purposes in Section 3.

We may disclose these categories to the service-provider and third-party categories in Section 5 for business purposes. We do not sell personal information. If you authorize Apple’s tracking request, FlipLens may disclose the IDFA, Meta’s anonymous identifier, and subscription events to RevenueCat and Meta for campaign measurement as described above. You can withdraw that permission in iOS Settings. We do not knowingly sell or share personal information of users under 16. If the California Consumer Privacy Act applies, you may have rights to know, access, correct, delete, and obtain information about disclosures, and to non-discrimination. Submit requests as described in Section 9.

14. Changes to this Policy

We may update this Policy as the Service, providers, or laws change. We will post the revised version here, update the effective date, and provide additional notice when required. If a new use requires consent, we will ask before beginning that use.

15. Contact and requests

FlipLens is operated by the independent developer identified on FlipLens’s Apple App Store product page. To ask a privacy question or exercise a right, visit FlipLens Support and follow the contact instructions there. Include “FlipLens privacy” and the email address connected to your account.

For provider-specific questions, you may also review Firebase Privacy and Security, Google’s Privacy Policy, and eBay’s User Privacy Notice, Meta’s Privacy Policy, and RevenueCat’s Privacy Policy.