Privacy

What we hold

When you scan a product, we keep the photographs you took, the analysis they produced, and the date. If you tap through to a retailer, we record that a link was clicked. That is the product working, not tracking: it is how your history exists and how we know Flip is useful.

If you create an account we hold the email address you signed up with. We never ask for your name, age beyond an 18+ confirmation, skin type or anything about your body — the analysis doesn't use them, so we don't collect them.

What we don't do

There are no advertising trackers and no analytics SDKs in Flip. We don't sell or share your data, and we never will as long as the affiliate disclosure on the results screen stays true: links may earn us a commission, and that never affects which products we show.

Cookies

Two, both functional. One is a random identifier that ties your scans to your browser so your history works without an account (it lasts a year). The other keeps you signed in once you have an account (30 days). Neither identifies you to anyone else and neither is used for advertising.

Who processes it

Your photographs are analysed by Rightbrain, the AI service that reads the label, and stored with Vercel, who host Flip. Sign-in is handled by Google Firebase. Payment is handled entirely by Stripe — your card details go to Stripe, never to us. Each processes data only to provide their part of the service.

Your data is yours

Settings has two buttons that do exactly what they say. Export gives you everything we hold about you as a file. Delete removes your scans, photographs, account and purchase records permanently — and if any part of that fails, we tell you it failed rather than pretending it worked.

Questions

Email chris@pal.health and a human will reply. If we change this policy, the date at the top changes with it.