Privacy Notice

FlipGenius is operated by Kevin Scharfenberg. Kevin Scharfenberg is the data controller for personal data collected through FlipGenius, meaning we decide how and why it is used.

Data we collect and why

• Account details (email address, password or Google sign-in) — to create and secure your account. Basis: contract.
• Item photos, voice recordings and notes you submit — to identify items and produce research reports. Voice recordings are transcribed and not kept after processing. Basis: contract.
• Plan and scan usage (scans used, plan, currency preference) — to provide your allowance and settings. Basis: contract.
• Technical data (IP address, device and browser type, error logs) — for security, fraud prevention and fixing problems. Basis: legitimate interests.
• Support messages — to help you. Basis: legitimate interests.

Your scan history is stored in your browser on your device, not on our servers.

Who we share data with

• Service providers for hosting, authentication, and AI analysis of the photos and descriptions you submit, acting on our instructions.
• Paddle, our Merchant of Record, for selling subscriptions, subscription management, payments, tax compliance and invoicing. Paddle handles your payment details under its own privacy policy.
• Professional advisers such as lawyers and accountants, where needed.
• Authorities where required by law.

We do not sell your personal data. Some providers may process data outside your country; where this happens we rely on appropriate safeguards such as standard contractual clauses.

How long we keep it

We keep account data while your account is active and delete or anonymise it when it is no longer needed, unless we must keep it longer for legal, tax or security reasons. Submitted photos and notes are used only to produce your report.

Your rights

Depending on where you live (including under Canadian privacy law and the GDPR), you may have the right to access, correct, delete, restrict or object to use of your data, to data portability, and to withdraw consent. You may also complain to your local privacy regulator. Contact us to make a request; we respond within one month.

Security

We use appropriate technical and organisational measures, including encryption in transit and access controls, to protect your data.

Cookies and storage

We use only essential browser storage to keep you signed in, remember your intro and preferences, and store your scan history. We do not use advertising cookies.

Contact

For privacy questions or requests, contact Kevin Scharfenberg at simplesparkdigital@gmail.com.