Privacy Policy

1. Who We Are

Flashback (“Flashback,” “we,” “us,” or “our”) operates the Flashback mobile application (iOS and Android), iOS App Clip, and web application (collectively, the “Service”). The Service lets event hosts create disposable-camera-style photo rolls, invite guests to contribute photos, and reveal the gallery when the host is ready.

For privacy inquiries, contact us at privacy@myflashback.app.

2. Information We Collect

2.1 Account Information

When you create an account or sign in, we receive information from your chosen identity provider:

• Sign in with Apple — your name (if you share it), Apple-generated relay email address, and a stable Apple user identifier.
• Sign in with Google — your name, email address, and Google account identifier.

We do not receive your Apple or Google password. These identifiers are stored in Supabase Auth.

2.2 Photos You Upload

Photos you take or upload within the Service are stored in Supabase Storage. We store:

• The photo file itself (JPEG/HEIC).
• Metadata: the roll it belongs to, the uploader's user ID, upload timestamp, and orientation.

Photos within a roll are accessible only to roll participants unless the host enables broader visibility. Photos are not shared with third parties for advertising purposes. When you order prints, the selected photo files are transmitted to our fulfillment partner, Gelato (see Section 6).

2.3 Roll and Order Metadata

We store roll-level data (roll name, event date, host user ID, guest list, reveal status, participant count, camera style) and print-order data (order ID, roll reference, selected photo references, shipping address, fulfillment status) in Supabase Postgres. We never store card numbers or full payment instrument details.

2.4 Payment Information

Payments for event tiers and print orders are processed by Stripe, Inc. on the web, and by Apple or Google for in-app purchases on iOS and Android. These processors collect and store your payment instrument directly under their own PCI DSS and platform-security scopes. We receive from Stripe only a customer ID, charge/order status, and metadata; from Apple and Google IAP we receive receipt confirmation via RevenueCat (see Section 6). We do not store raw card data.

2.5 Analytics Events

We use PostHog to collect product-analytics events (e.g., “roll created,” “photo uploaded,” “reveal triggered”). These events include a pseudonymous user ID, event name, timestamp, and technical properties (device type, OS version, app version). PostHog does not receive your photos, payment information, or precise location. We do not use PostHog session replay. PostHog data is hosted in the European Union.

This marketing website also uses Google Analytics 4 to measure traffic — pages viewed, referring site, approximate location derived from IP address, and device and browser type. Google Analytics sets cookies and processes this data in the United States. It never receives your photos, payment information, or any content from your events.

2.6 Advertising Measurement (Marketing Website)

This marketing website uses the Pinterest Tag to measure whether our Pinterest advertising works — that is, whether people who saw an ad went on to visit the site. It records the pages you view, the referring site, and your IP address and browser type, and it sets cookies that Pinterest can read on other sites you visit. It is not present in the Flashback app.

Pinterest processes this data in the United States and, as an advertising network, may use it for its own ad measurement and targeting under its own privacy policy. We do not send Pinterest your email address, your name, or any other directly identifying information, and it never receives your photos, your payment information, or any content from your events.

2.7 Your Choice on the Marketing Website

None of the three trackers above — PostHog, Google Analytics and the Pinterest Tag — run unless you accept them. Nothing is loaded and no requests are made to any of them until you choose “Accept” on the consent prompt, and browsers sending Do Not Track or Global Privacy Control are treated as a decline without being asked. You can change your choice at any time using the Analytics settings link in the site footer. Withdrawing consent stops further collection; for PostHog and Google Analytics it also stops the already-loaded tracker, while the Pinterest Tag stops sending on withdrawal and is not loaded again on your next page load. Cookies Pinterest has already set stay in your browser until you clear them there — we can stop sending to Pinterest, but we cannot delete a cookie from your device on their behalf.

2.8 Crash and Error Reports

We use Sentry for crash and error monitoring, in the app and on this website. Sentry receives stack traces and technical context when a crash or unhandled error occurs — in the app, the device type, OS version and app version; on the website, the browser and version and the address of the page that failed, with any query string removed. Sentry does not receive your photos or payment information, and we do not record your screen. Sentry data is hosted in the European Union.

Unlike the analytics and advertising above, error monitoring is not part of the consent prompt. It runs on legitimate interest: it is how we find out the app or the site is broken, and gating it on consent would hide exactly the failures suffered by people whose page crashed before they could answer. You can object to it — see the section on your rights below. In the app, error reports are tied to your account id so a crash can be traced to a support request; on the website they are not tied to any identity.

2.9 Push Notifications

If you grant notification permission, we send push notifications (e.g., “Your roll has been revealed,” “Your order has shipped”) via Expo's push notification infrastructure, which relays through Apple APNs or Google FCM. We store your push token (and, for the web application, a VAPID web-push subscription) linked to your user account for as long as you are a registered user or until you revoke permission.

2.10 Cookies and Local Storage (Web)

Our web application uses browser local storage and session cookies for:

• Keeping you signed in (authentication session token).
• Remembering your preferences.
• Recording your analytics consent choice on this marketing website, so you are not asked again on every visit.

The Flashback app sets no third-party advertising or cross-site tracking cookies. This marketing website sets them in one case only: if you accept on the consent prompt, the Pinterest Tag (Section 2.6) sets cookies that Pinterest can read across other sites. Decline, or take no action, and none are set.

2.11 Technical and Log Data

Our servers (Supabase, Vercel) automatically collect standard web-server logs: IP addresses, browser or device type, referring URL, pages visited, and error events. These logs are used for security monitoring and are not used to build advertising profiles.

2.12 App Clip

The Flashback iOS App Clip collects only the data necessary to join a specific roll: camera access (to capture photos) and network access (to upload them). The App Clip does not create a full account. Data collected through the App Clip is subject to Apple's App Clip data restrictions.

3. How We Use Your Information

4. Data Storage and Location

If you are located in the EU/EEA or UK, your data may be transferred to and processed in the United States or other countries. We rely on Standard Contractual Clauses (SCCs) adopted by the European Commission as the legal mechanism for such transfers where required.

5. Data Retention and Deletion

5.1 Photos

Photos are retained for the lifetime of the roll they belong to. When a host deletes a roll, all photos associated with that roll are deleted from Supabase Storage. Individual guests may submit a request via privacy@myflashback.app for removal of their specific photo.

5.2 Account Data

You may delete your account at any time within the app at Profile → Account & login → Delete account (also accessible under Privacy & data). After a 7-day reversal window, your account and personal data are permanently deleted within 30 days. Where a guest has contributed photos to another user's roll, those photos remain in that roll after the guest deletes their account but the uploader attribution is anonymized.

You may also request deletion by emailing privacy@myflashback.app with the subject line “Account Deletion Request.” We will respond within 48 hours to confirm receipt.

De-identified, aggregated analytics data and order records required for legal or tax compliance may be retained for longer periods as required by law.

5.3 Payment Records

Stripe and Apple/Google retain payment records per their own policies and applicable financial regulations. We retain our internal order metadata (without card data) for up to 7 years for tax and accounting purposes.

5.4 Print Order Data

Gelato retains production records (photos submitted for print, shipping address) for the period required to produce, ship, and support the order. After fulfillment and the applicable support window, Gelato's data retention policies govern. We retain order status and reference metadata for up to 7 years for tax purposes.

6. Sharing Your Information

We do not sell your personal information. We do not permit cross-app tracking of your activity in the Flashback app for advertising purposes. On this marketing website only, and only if you accept it on the consent prompt, the Pinterest Tag described in Section 2.6 discloses your browsing of this site to Pinterest for advertising measurement. We share data only as follows:

• Supabase — database and file storage for accounts, rolls, photos, order metadata, and push tokens. Bound by a data processing agreement.
• Stripe — web checkout for event tiers and print orders. Stripe processes your payment details under its own PCI DSS scope. We share only the data necessary to complete a transaction.
• Apple / Google — in-app purchase processing on iOS and Android. Subject to their respective platform privacy policies.
• RevenueCat — validates in-app purchase receipts and manages entitlements. Receives purchase receipts, product IDs, and a pseudonymous app user ID. Does not receive photos or payment card data.
• Gelato — print production and shipping fulfillment. When you place a print order, Gelato receives the photo files you selected to be printed and your full shipping address (recipient name, address, city, postcode, country) to produce and ship your order. Gelato is bound by a data processing agreement.
• PostHog — pseudonymous product analytics. Does not receive photos or payment information.
• Google Analytics — marketing website traffic measurement only; it is not present in the Flashback app. Receives pages viewed, referrer, device and browser type, and an approximate location derived from your IP address. Loads only if you accept analytics on this site.
• Pinterest — advertising measurement on this marketing website only; it is not present in the Flashback app. Receives pages viewed, referrer, device and browser type, and your IP address, and sets cross-site cookies. As an advertising network it may use that data for its own purposes. Loads only if you accept on the consent prompt. We send it no email address or other directly identifying information.
• Sentry — crash and error monitoring, for both the app and this website. Receives stack traces and technical context only (device or browser, and the failing page address without its query string); does not receive photos or payment data.
• Expo / APNs / FCM — push notification delivery. Receives push tokens and notification payloads.
• Vercel — web hosting. Collects standard server logs (IP address, device, request path, error events).
• Legal requirements — if required by law, court order, or to protect rights, property, or safety.
• Business transfer — in connection with a merger, acquisition, or asset sale, your information may be transferred; we will notify you as required by law.

7. Your Rights

7.1 In-App Controls

You can, without contacting us:

• Delete your account (Profile → Account & login → Delete account).
• Revoke notification permission in your device's system settings.
• Delete a roll and all its photos (host only).

7.2 All Users

By contacting us at privacy@myflashback.app you may:

• Access the personal data we hold about you.
• Correct inaccurate data.
• Request deletion of your data (see Section 5.2).

We aim to respond within 48 hours to confirm receipt and within 30 days to fulfill the request.

7.3 EU/EEA and UK Users (GDPR / UK GDPR)

In addition to Section 7.2, you have the right to:

• Portability — receive your data in a structured, machine-readable format.
• Restriction — request that we restrict processing while a complaint is pending.
• Objection — object to processing based on legitimate interest.
• Lodge a complaint with your local supervisory authority.

7.4 California Residents (CCPA / CPRA)

California residents have the right to know what personal information we collect, the right to delete it, the right to correct it, the right to opt out of its “sale” or “sharing,” and the right not to be discriminated against for exercising these rights.

We do not sell personal information. We do “share” it for cross-context behavioral advertising in one case, in the CPRA sense of that word: the Pinterest Tag on this marketing website, and only after you accept it. It is off until you do. You can opt out at any time using the Analytics settings link in the site footer, and browsers sending a Global Privacy Control signal are opted out automatically without having to ask. No sharing of any kind happens in the Flashback app.

To submit a request, email privacy@myflashback.app with the subject line “California Privacy Request.”

8. Children's Privacy

The Service is intended for users 13 years of age and older. We do not knowingly collect personal information from children under 13. If we learn we have collected information from a child under 13, we will delete it promptly. Contact us at privacy@myflashback.app if you believe a child under 13 has provided us with personal information.

9. Security

We implement industry-standard technical and organizational measures to protect your information, including TLS encryption in transit, row-level security in our database, and access controls on photo storage. Crash reports (Sentry) and analytics (PostHog) are pseudonymized. No system is perfectly secure; we cannot guarantee absolute security.

10. International Transfers

Flashback is operated in the United States. By using the Service, you acknowledge that your information may be transferred to and processed in the United States and other countries where our processors operate. For transfers from the EU/EEA or UK, we rely on Standard Contractual Clauses (SCCs) or other lawful transfer mechanisms.

11. Third-Party Links and Services

The Service may contain links to third-party websites or services. This Privacy Policy does not apply to those third parties. We encourage you to review their privacy policies.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy at myflashback.app/privacy and, where required, by email or in-app notification. The effective date at the top of this page reflects when the current version took effect. Your continued use of the Service after the effective date constitutes acceptance of the updated policy.

13. Contact Us

For questions, requests, or complaints about this Privacy Policy:

Privacy: privacy@myflashback.app

General support: contactus@myflashback.app