Privacy Policy

Last updated: October 24, 2026

Information We Collect

We collect the data required to run Flip or Pass, including search inputs and optional buy-price inputs.

If you submit feedback, we may collect optional notes and optional contact email. For abuse prevention, rate-limiting, and to understand how the product is used, we store a salted hash of IP address rather than raw IP values. This lets us count visitors and repeat visits without identifying anyone. We never store raw IP addresses, and the hash is removed if you delete your account.

If you choose to sign in, we use Supabase Auth (email and password, or Sign in with Apple) and store your auth user ID so your account-level privacy requests can be processed.

If you subscribe to Pro, our payment processors (Stripe on the web, Apple on iOS) collect and process your payment details to complete the transaction. Flip or Pass does not receive or store your full card number. We store a billing profile that links your account to your subscription status so we can grant Pro access.

How We Use Information

We use collected data to provide search results, calculate profitability, improve model quality, and secure the service.

We use aggregated usage data for reliability and performance monitoring.

AI Image Processing

Photos are identified by AI. When you scan a photo, we send it to Anthropic, the company behind Claude, to work out what the item is and turn it into a search.

Your photo is uploaded to our storage (Supabase) first, and we delete it as soon as the scan finishes. If a scan fails partway through, a daily cleanup deletes anything it left behind.

Anthropic keeps what we send it under its own retention policy. Today that policy says it deletes API inputs and outputs within 30 days, longer in some cases, such as content flagged under its usage policy or when the law requires it.

For more information about how Anthropic handles data, see Anthropic's Privacy Policy.

Advertising and Attribution

We advertise Flip or Pass, and we measure whether those ads work. If you come to the app from one of our ads, our advertising and analytics partners may tell us which ad brought you, and we may share limited information with them so they can measure that. We use this to decide which ads are worth paying for.

We do not sell your personal information. The providers we work with are listed under Third-Party Services below, and the App Store listing for the iOS app shows the categories of data it collects.

Third-Party Services

Flip or Pass uses third-party providers including eBay APIs (market data), Supabase (database, authentication, and short-term photo storage), Stripe (web payment processing), Apple (iOS payment processing), RevenueCat (iOS subscription management and advertising attribution), Anthropic (AI photo identification), PostHog (product analytics), Vercel (hosting), Upstash (rate limiting), Sentry (error monitoring), Microsoft Clarity (website analytics), Resend (email), and SoldComps, Trawl, and Apify (sold price data).

These providers process data as needed to operate their services. What some of them receive:

  • PostHog receives product usage events (such as searches and screen views) tied to an anonymous identifier, and to your account and email address once you sign in, so we can understand and improve how the product is used. On the website, PostHog also records sessions: what you click and what appears on the page, with what you type into form fields hidden. The iOS app does not record sessions. The iOS app also sends PostHog crash reports and performance data, such as how long the app took to open and how often it froze, so we can find and fix what breaks.
  • SoldComps, Trawl, and Apify receive the search terms we use to look up recent eBay sold prices, along with an item category when we have one. We don't send them your account details.
  • Microsoft Clarity records how visitors scroll and click on our marketing pages, such as the home page and blog, so we can see which parts get read. It is not loaded in the app itself (app.fliporpass.com).
  • Sentry receives error reports from the website and the app servers. When an error happens in your browser on our website, Sentry also gets a replay of that page session leading up to it, with text and images hidden by default, so we can see what broke.
  • Resend sends our emails, so it receives your email address and the content of the message. That includes emails we send you, such as a trial reminder, and messages you send us through the contact form.

Data Retention

We retain data as needed for product operation, analytics, abuse prevention, and legal obligations.

Deleting your account removes it immediately and permanently. Your account and the data linked to it are erased as soon as you confirm, and any subscription billed through our website is cancelled at the same time. This cannot be undone.

Two things deliberately survive deletion. Past search and feedback records are kept in anonymized form, with the link to your account removed, so they no longer identify you. We also keep a one-way scrambled fingerprint of your email address, used only to tell whether that address has already used a free trial. It cannot be reversed to recover your email, and we do not use it for anything else.

If you subscribed through the App Store, deleting your account does not cancel that subscription. Apple does not allow us to cancel it on your behalf. You can cancel it yourself in Settings on your iPhone, under your Apple Account, then Subscriptions.

Your Privacy Controls

Signed-in users can use account settings (Settings on the website, or Account in the iOS app) to:

  • Export account-linked data
  • Permanently delete your account

You can try Flip or Pass without an account. Guests get 2 free checks, and after that you need a free account to keep going.

To count those 2 checks, we give each guest a random ID: a cookie called fop_anon_id on the website, or a random install ID stored on your iPhone in the app. It only counts your free checks. It isn't linked to an account or sent to analytics, and we keep the count for up to 400 days.

Do Not Sell or Share (California)

We don't sell your personal data.

One thing to know: Microsoft Clarity, which runs on our marketing pages (not in the app), can set a Microsoft cookie that Microsoft also uses across its own sites, including for advertising. Clarity sets no cookies if you turn cookies off in your browser.

US Availability

The web app currently enforces US-only access for user-facing pages ("/app", "/checkout", "/settings", "/library", "/account") in production. The iOS app is distributed only via the US App Store.

Contact

Questions about this policy can be sent to support@fliporpass.com or via the in-app feedback form. You can also review our Terms of Service.