Privacy Policy

This policy explains what Flair collects, why, and what control you have over it. Flair is currently in private testing, so the service changes often — we will update this policy when what we collect changes, and the "last updated" date above will tell you when that happened.

1. Who we are

Flair operates the Flair mobile app. For UK and EU data protection law we are the data controller for the information described here. You can reach us at privacy@useflair.app.

2. What we collect

Account information

• Your email address, used to sign you in and to send account emails such as confirmation and password resets.
• If you sign in with Google, we receive your email address, name, and profile picture from Google. We do not receive your Google password.
• Your username, optional bio, and optional profile picture.

Content you create

• Notes (short videos) you record or upload, their captions, and the privacy tier you chose for each one.
• Comments you write and direct messages you send.
• Your follows, reposts, saves, and close friends list.

Activity information

• Which notes you have watched and roughly how long you watched them. This powers your weekly recap and stops the feed showing you the same note twice. We keep this for 14 days and then delete it automatically.
• Basic technical logs generated by our hosting provider, such as IP address and timestamps of requests, used for security and debugging.

Device permissions

Flair asks for access only when you use a feature that needs it. You can deny any permission in your phone's settings; features that need it will not work until you allow access. We do not access your camera, microphone, or photo library in the background.

• Camera — to record notes (short videos). Video is uploaded to our servers when you post.
• Microphone — to record audio with your notes. Audio is stored as part of the video file when you post.
• Photo library — to pick an existing video from your gallery to upload. We access only the item you select.
• Notifications (optional) — if you allow them, we store a device token so we can send alerts about activity such as messages and follows. You can turn notifications off in your phone's settings at any time.

We do not collect contacts, location, advertising identifiers, or browsing activity outside the app. We do not use third-party advertising or analytics trackers.

3. Why we use it

• To provide the service: showing your notes to the audience you chose, delivering messages, and keeping you signed in.
• To keep the service working and secure: diagnosing faults, preventing abuse, and enforcing our Terms.
• To build your weekly recap, which is shown only to you.

Our legal basis for the first two is performance of our contract with you and our legitimate interest in running a secure service. The weekly recap relies on our legitimate interest in giving you a useful summary of your own activity; you can stop it at any time by deleting your account.

4. Privacy tiers and who sees your notes

Every note carries the audience you picked:

• Public — visible to anyone on Flair, and can be reposted and shared outside the app.
• Friends — visible only to people who follow you.
• Close friends — visible only to people on your close friends list.
• Just me — visible only to you.

Notes that are not Public are held in private storage and served through short-lived links that are only issued to people in the chosen audience. Changing a note's tier changes who can reach it from that point onward. We cannot retrieve copies that someone in the audience saved or recorded before the change.

5. Sharing

We do not sell your personal information and we do not share it for advertising. We share it only with:

• Supabase, which provides our database, authentication, and file storage. Your data is stored in the European Union.
• Resend, which delivers our account emails.
• Google, if and only if you choose to sign in with Google.
• Law enforcement or regulators where we are legally required to do so.

6. How long we keep it

• Account information and content: until you delete them, or until you delete your account.
• Watch history: 14 days, then deleted automatically.
• Technical logs: kept by our hosting provider on a short rolling window.

When you delete your account we permanently remove your profile, notes, comments, messages you sent, follows, reposts, saves, and uploaded files. Deletion is immediate and cannot be undone. Copies of messages you sent may remain visible to the people you sent them to.

7. Your rights

If you are in the UK or EU you have the right to access your data, correct it, delete it, restrict or object to how we use it, and receive a copy in a portable format. You can delete individual notes at any time from Manage notes, and your entire account from Edit profile → Delete account. For anything else, email privacy@useflair.app and we will respond within one month.

You also have the right to complain to the Information Commissioner's Office (ico.org.uk) if you think we have handled your data improperly.

8. Age

Flair is not for anyone under 13. We do not knowingly collect information from children under 13. If you believe a child has created an account, email us and we will remove it.

9. Security

Data is encrypted in transit. Private notes are stored in non-public storage with per-user access rules enforced by the database itself, not just by the app. No system is perfectly secure, and during private testing you should not post anything you would be seriously harmed by losing or having exposed.

10. Changes

If we make a material change to this policy we will tell you in the app before it takes effect.

Questions: privacy@useflair.app