Privacy Policy
Last updated: July 2, 2026
Information We Collect
We collect the data required to run Flip or Pass, including search inputs and optional buy-price inputs.
If you submit feedback, we may collect optional notes and optional contact email. For abuse prevention and rate-limiting, we store a salted hash of IP address rather than raw IP values.
If you choose to sign in, we use Supabase Auth (email and password, or Sign in with Apple) and store your auth user ID so your account-level privacy requests can be processed.
If you subscribe to Pro, our payment processors (Stripe on the web, Apple on iOS) collect and process your payment details to complete the transaction. Flip or Pass does not receive or store your full card number. We store a billing profile that links your account to your subscription status so we can grant Pro access.
How We Use Information
We use collected data to provide search results, calculate profitability, improve model quality, and secure the service.
We use aggregated usage data for reliability and performance monitoring.
AI Image Processing
When you use the photo identification feature, your photos are sent to Anthropic's Claude API for analysis. Anthropic processes the image to identify the item and generate a search query. Images are not stored by Flip or Pass or Anthropic after processing is complete.
For more information about how Anthropic handles data, see Anthropic's Privacy Policy.
Third-Party Services
Flip or Pass uses third-party providers including eBay APIs (market data), Supabase (database and authentication), Stripe (web payment processing), Apple (iOS payment processing), Anthropic (AI photo identification), PostHog (product analytics), Vercel (hosting), Upstash (rate limiting), and Sentry (error monitoring).
These providers process data as needed to operate their services. PostHog receives product usage events (such as searches and screen views) tied to an anonymous identifier, and to your account once you sign in, so we can understand and improve how the product is used.
Data Retention
We retain data as needed for product operation, analytics, abuse prevention, and legal obligations.
Signed-in account deletion requests are queued for processing. While pending, data remains in place until the request is processed.
Your Privacy Controls
Signed-in users can use account controls in the app ("/app") to:
- Export account-linked data
- Submit a deletion request
- Manage privacy preferences (including Do Not Sell/Share)
Guest users can continue using core search without signing in.
US Availability
The web app currently enforces US-only access for user-facing pages ("/app", "/checkout", "/settings", "/library", "/account") in production. The iOS app is distributed only via the US App Store.
Contact
Questions about this policy can be sent to founder@fliporpass.com or via the in-app feedback form. You can also review our Terms of Service.