Privacy Policy
Last updated: June 2026 · Effective: June 2026
The short version
Flagged helps you understand dating and texting conversations by analyzing screenshots you choose to upload. To produce that analysis, the text and images you submit are sent to a trusted third-party AI provider that acts on our behalf. We do not sell your personal information, we do not use your conversations for advertising, and content submitted for analysis is processed and then deleted rather than kept on file. You can access or delete your account and data at any time from within the app or by emailing us. The full details are below.
1. Who we are
This policy is provided by Flagged (“Flagged,” “we,” “us,” or “our”), the operator of the website at getflagged.fyi and the Flagged mobile application (together, the “Services”). For privacy purposes, Flagged is the “data controller” (and, under U.S. laws, the “business”) responsible for the personal information described here. Flagged is based in the United States.
The Services are provided by Flagged. You can reach us at hello@getflagged.fyi.
2. Scope of this policy
This policy covers both the website (which is marketing and informational) and the Flagged app (which provides the conversation-analysis features). Where a section applies only to the website or only to the app, we say so. Some product features may also have additional, just-in-time disclosures shown inside the app at the moment they apply.
3. Information we collect
a. Information you provide
- Account information (app): the Flagged app requires an account. We collect the email address and authentication credentials you use to register and sign in, and any optional profile details you add.
- Conversation content you submit for analysis (app): the screenshots, images, and any text you upload or paste so the app can analyze them. These materials are the heart of the Service and may be sensitive — see Sections 4 and 5.
- Support and feedback: information you include when you contact us, leave feedback, or report a problem.
b. Information created when you use the app
- Analysis results and history: the red flags, patterns, and summaries the app generates, and (if your account stores history) a record of past analyses associated with your account.
- Subscription and purchase data: we offer auto-renewing subscriptions sold through Apple’s App Store. Apple processes your payment — we do not receive your full card number. We receive limited transaction and subscription-status information (for example, whether your subscription is active) from Apple.
- Device and technical data: information such as device type, operating system version, app version, language, general (non-precise) location inferred from IP, identifiers, and diagnostic/crash data.
- Usage and analytics: how you interact with the Services (features used, events, timestamps), collected to operate, secure, and improve the product.
c. Information from third parties
We may receive information from our service providers, such as Apple (subscription status), our hosting provider, and analytics/crash-reporting tools. We do not buy personal information from data brokers.
4. How the analysis works and third-party AI processing
Please read this section carefully — it explains where your content goes.
When you submit a screenshot or message for analysis, the content (the image and/or the text it contains) is transmitted to a third-party artificial-intelligence provider that performs the analysis on our behalf. That provider acts as our service provider (a “processor”/“sub-processor”) and is contractually permitted to use the content only to generate your result for us — not for its own purposes.
- The content is processed to produce the analysis and is not retained by us as a permanent record. We do not keep your submitted screenshots on file after the analysis is delivered, except where you have chosen to save a result to your account history or where short-term retention is required for security, abuse-prevention, or legal reasons.
- Under our agreements, the AI provider does not use your content to train its general models and retains it only for the limited time needed to return a result and guard against misuse, after which it is deleted.
- We do not sell your content, and we do not use it for advertising or to build profiles about you.
Because analysis requires transmitting content to a provider acting for us, we describe screenshots as processed and then deleted rather than “never shared with anyone.” This is the accurate description of how the Service works, and it is the standard the App Store and privacy regulators expect.
5. Content about other people and sensitive information
Conversation screenshots usually contain information about other people (the person you were messaging), and they may reveal sensitive details — for example information that suggests someone’s sexual orientation, relationships, religious beliefs, or health. In the EU/UK this can qualify as “special category” data.
- By submitting content, you confirm you are entitled to share it with us and to have it analyzed, and — where the law requires it — that you have any necessary consent or other lawful basis to do so. Recording, screenshotting, or sharing other people’s communications is regulated differently from place to place; you are responsible for your use of the Service. See our Terms of Service.
- Where we process special-category data in the EU/UK, we rely on your explicit consent, which you provide by choosing to submit the content for analysis. You can withdraw consent at any time by ceasing to use the feature and deleting your data.
- Please avoid uploading content you do not need analyzed (for example, you can crop out names, photos, or contact details that are not relevant).
6. How we use information and our legal bases
We use personal information to provide and operate the Services, generate analyses you request, create and secure your account, process subscriptions, respond to support requests, prevent fraud and abuse, comply with legal obligations, and improve the Services. For users in the EU/UK, the table below sets out our legal bases under the GDPR and UK GDPR.
| What we do | Legal basis (GDPR / UK GDPR) |
|---|---|
| Create and maintain your account; deliver the analysis you request; provide support | Performance of a contract (Art. 6(1)(b)) |
| Process screenshots/messages that may contain special-category data | Your explicit consent (Art. 9(2)(a)); withdrawable at any time |
| Process subscriptions and payments via Apple | Performance of a contract (Art. 6(1)(b)) |
| Secure the Services, prevent fraud/abuse, debug, and improve features | Our legitimate interests (Art. 6(1)(f)) |
| Send service-related communications | Performance of a contract (Art. 6(1)(b)) or our legitimate interests (Art. 6(1)(f)) |
| Meet legal, tax, and regulatory obligations; respond to lawful requests | Legal obligation (Art. 6(1)(c)) |
7. How we share information
We share personal information only as described here, and only with parties that are bound to protect it:
- AI provider: processes submitted content to generate your analysis, on our behalf (Section 4).
- Apple: processes App Store payments and manages your subscription; Apple’s use of your data is governed by Apple’s own privacy policy.
- Hosting and infrastructure: our website and backend hosting provider.
- Analytics and crash reporting: tools that help us understand usage and fix bugs.
- Professional advisers and authorities: lawyers, auditors, or regulators where required by law, and to protect our rights, users, or the public.
- Business transfers: in connection with a merger, acquisition, or sale of assets, subject to this policy.
We do not sell your personal information, and we do not “share” it for cross-context behavioral advertising as those terms are defined under U.S. state privacy laws such as the California Consumer Privacy Act (CCPA/CPRA).
8. International data transfers
We are based in the United States, and our providers may process data in the U.S. and other countries. When we transfer personal information out of the EEA, the UK, or Switzerland, we use legally recognized safeguards — such as the European Commission’s Standard Contractual Clauses, the UK International Data Transfer Addendum, and/or reliance on an adequacy mechanism where available. You may contact us for more information about these safeguards.
9. Data retention
- Submitted screenshots/messages: processed to deliver your result and then deleted; not stored as a permanent record unless you save an analysis to your history.
- Account data: kept while your account is active and deleted (or anonymized) after you close your account, subject to limited retention for legal, security, or accounting purposes.
- Logs and analytics: kept for a limited period for security and product purposes.
10. Security
We use technical and organizational measures designed to protect personal information, including encryption in transit and access controls. No method of transmission or storage is completely secure, so we cannot guarantee absolute security, but we work to protect your information and to notify you and regulators of incidents where required by law.
11. Your privacy rights
Depending on where you live, you may have some or all of the following rights. We honor these rights for our users and will not discriminate against you for exercising them.
EEA / UK (GDPR & UK GDPR)
- Access a copy of your personal data, and rectify inaccurate data.
- Erase your data (“right to be forgotten”) and restrict or object to processing.
- Data portability — receive your data in a portable format.
- Withdraw consent at any time (without affecting prior processing).
- Lodge a complaint with your local supervisory authority — in the UK, the Information Commissioner’s Office (ICO) at ico.org.uk.
California & other U.S. states (CCPA/CPRA and similar)
- Know/access the categories and specific pieces of personal information we collect, use, and disclose.
- Delete and correct your personal information.
- Opt out of the “sale” or “sharing” of personal information — note that we do not sell or share personal information.
- Limit the use of sensitive personal information.
- Be free from discrimination for exercising your rights. You may use an authorized agent where the law permits.
How to exercise your rights: use the in-app controls (see Section 12) or email hello@getflagged.fyi. We will verify your request and respond within the time required by law.
12. Account deletion
You can delete your account and associated personal data directly within the app (Settings → Account → Delete Account), in line with Apple’s App Store requirements. You can also request deletion by emailing hello@getflagged.fyi from the address on your account. Deleting your account removes your saved data from our active systems; limited copies may persist for a short time in backups or where retention is legally required, after which they are deleted.
13. Children
The Services are intended for adults aged 18 and over and are not directed to children. We do not knowingly collect personal information from anyone under 18. If you believe a minor has provided us information, contact us at hello@getflagged.fyi and we will delete it.
14. Cookies and analytics (website)
The website uses only the cookies and similar technologies needed to operate the site and (if enabled) understand aggregate traffic. We do not use the website for cross-site advertising. Where required, we will request your consent before setting non-essential cookies and will provide controls to manage them.
15. Third-party services and links
The Services rely on third parties (such as Apple and our AI, hosting, email, and analytics providers) and may link to sites we do not control. Their handling of your information is governed by their own privacy policies, and we encourage you to review them.
16. EU/UK representative
We are a small US-based operation not currently required to appoint an EU/UK Article 27 representative. If this changes, details will be updated here.
17. Changes to this policy
We may update this policy from time to time. We will revise the “Last updated” date above and, for material changes, provide additional notice (for example, in the app or by email). Your continued use of the Services after an update means you accept the revised policy.
18. Contact us
Privacy questions or requests: hello@getflagged.fyi