Privacy policy

Last updated September 16, 2026

This describes what the app and the service collect, why, and who else sees it. It is written plainly rather than legally, and it is accurate to how the software actually works.

For the reasoning behind these choices, and how this compares with using the same services directly, see what we send and what we keep.

Who we are

Flip Assistant is operated by Taylor Development Group, LLC. When this policy says "we" or "us," that is who it means. Our contact address is hello@flipassistant.app.

What we store about you

• Your email address, because it is how you sign in and how we reach you about billing.
• A count of how many requests you make each month, by kind. Not the content of them.
• A one-way hash of your phone's Android device identifier, so a free trial cannot be restarted repeatedly on the same handset. The identifier itself is not stored and the hash cannot be reversed.
• For each phone you set up, a one-way hash of its access token and the date it last contacted us.

What we do not store

• The questions you ask, or the answers you get. They pass through the service and are not written down.
• Voice recordings. Audio is uploaded, transcribed, and deleted from the phone as soon as the upload finishes. We do not keep a copy.
• Your notes, your saved routes and your two-factor codes. Those live only on the phone. We cannot read them and cannot recover them.
• Your location. The app never asks for GPS.
• Card numbers. Stripe handles payment and we never see them.

Permissions the app asks for

• Microphone, to record a question when you choose to speak one. It records only while you are on the recording screen.
• Camera, to scan QR codes. Frames are decoded on the phone and never uploaded.
• Text messages, read-only, so the app can find links people have sent you and offer to summarize them. It reads your recent messages on the phone to pull out web addresses. Nothing is uploaded unless you pick a link, and then only that address is sent.

Who else sees a request

Answering a question means sending it to a third party. We send the question and your zip code, never your email or anything identifying.

• Anthropic answers questions and parses spoken reminders.
• Groq transcribes voice recordings.
• Google Maps resolves addresses and produces directions. If Google Maps is unavailable, OpenRouteService is used as a fallback and receives the same information.
• The National Weather Service and Zippopotam provide weather and zip code lookups. Both are public services.
• Stripe handles subscriptions.
• Mailgun sends email, such as sign-in links and billing notices.
• Supabase and Vercel host the database and the service.

How we protect your data

Device tokens and login tokens are stored as one-way hashes, not in plain text. Two-factor secrets on the phone are encrypted under a hardware-backed key and locked behind a PIN that is never stored. All communication between the app and the service uses HTTPS.

Where your data is processed

The service and database are hosted in the United States. Third parties listed above (Anthropic, Groq, Google, Stripe, and others) may process data in other countries under their own privacy policies. We do not control where they operate, but we only share what is described in this policy.

Cookies

The account dashboard uses a signed session cookie to keep you signed in. It contains no personal information and expires when you sign out. The app on the phone does not use cookies. There are no analytics or advertising cookies anywhere.

How long we keep data

Usage counts are kept for as long as your account exists. If you delete your account, your email, usage history and device records are removed. The hashed device identifier used for trial limits is kept indefinitely, as described below.

Children

This service is not intended for children under 13. We do not knowingly collect information from anyone under that age. If you believe a child has signed up, contact us and we will delete the account.

Deleting your data

Ask and we will delete your account, which removes your email, your usage history and your device records. Anything stored on the phone goes when you uninstall the app.

One exception: the hashed device identifier is kept after deletion, so a handset cannot start an unlimited number of free trials. It is not linked to you once the account is gone.

Your rights

You can ask us at any time what data we hold about you, request a copy of it, or ask us to delete it. California residents have these same rights under the CCPA. We do not sell personal information and never have.

To make any of these requests, email hello@flipassistant.app.

Changes to this policy

If we change this policy in a way that matters, we will email you before the change takes effect. Small wording fixes that do not change what we collect or share may be made without notice.

Contact

Questions about any of this go to hello@flipassistant.app.