Privacy Policy

Effective date: April 26, 2026 Last updated: April 26, 2026

This Privacy Policy describes how Will Miraglia ("we", "us", "FlickMe") collects, uses, and shares information when you use the FlickMe mobile application (the "App").

If you have questions, contact us at support@flickmeapp.com.

1. Who we are

FlickMe is operated by Will Miraglia, an individual sole proprietor based in Arizona. We are the data controller for the personal information collected through the App.

You can reach us at support@flickmeapp.com for any privacy-related question, including to exercise the rights described in Section 9.

2. Who can use FlickMe

FlickMe is intended for users aged 13 and over. We do not knowingly collect personal information from children under 13. If we learn we have collected personal information from a child under 13, we will delete that information promptly. If you believe a child under 13 is using FlickMe, please email us at support@flickmeapp.com.

3. Information we collect

a) Information you give us

Account information — when you register, we collect a username and a password. The password is never stored in plaintext; it is hashed using bcrypt before storage.
Profile information — optionally, an avatar image (currently not enabled in v1.0).
Photos and captions ("flicks") — when you send a flick to a friend, we receive the photo and any text caption you add. Photos are stored encrypted at rest in our cloud storage provider.
Chat messages — text messages you send to friends through the in-app chat are stored on our servers indefinitely, until you or your friend deletes them or deletes the account.
Friendships — the usernames of people you add as friends and your friend-request history.
Reports and support requests — if you contact us or report another user, we keep a record of that communication.

b) Information collected automatically

Device push notification token — if you grant push permission, we store the Expo Push Token issued by your device so we can deliver notifications.
Camera input — used in real time to capture flicks. Camera frames are not recorded or transmitted unless you explicitly capture and send a flick.
Authentication state — we store a session token (JWT) on your device in encrypted storage (Apple Keychain via expo-secure-store).
Basic technical logs — IP address, request paths, timestamps, and HTTP status codes are written to short-lived server logs for security and debugging. These logs are retained for 30 days.

c) Information we do not collect

We do not use third-party advertising networks.
We do not use third-party analytics SDKs (no Amplitude, Mixpanel, Google Analytics, Facebook SDK, etc.).
We do not collect your contacts, location, microphone audio, or photo library.
We do not track you across other apps or websites and do not share data for advertising purposes.

4. How we use your information

We use the information we collect to:

Operate the App — authenticate you, deliver flicks and chat messages, calculate streaks, and send push notifications.
Keep the App secure — detect abuse, enforce our Terms of Service, and respond to reports under our Community Guidelines.
Communicate with you — respond to support requests, send transactional emails (e.g., password reset), and notify you of material changes to this policy.
Comply with legal obligations and respond to lawful requests from authorities.

We do not use your photos, captions, or chat messages to train any machine learning model, and we do not sell your information.

5. How flicks work (ephemeral content)

Flicks are designed to be ephemeral:

A flick is automatically deleted from our servers 24 hours after it is sent, regardless of whether the recipient has opened it.
Once a flick is opened by the recipient, the underlying photo file is deleted from our storage immediately, and the database record is marked as viewed.
Important: "ephemeral" means we delete the file from our servers; it does not mean the recipient cannot screenshot or photograph it with another device. Do not send anything you would not want preserved.

6. How we share your information

We share information only with the limited service providers we need to run FlickMe. Each one is contractually required to use the data only to provide services to us.

Sub-processor	Purpose	Location	Data they handle
Supabase, Inc.	PostgreSQL database + photo storage	United States	Account, friendship, flick, message, and push-token data
Railway Corp.	Backend application hosting	United States	All API requests (transient) and short-lived server logs
Expo (650 Industries, Inc.)	Push notification delivery	United States	Push tokens and notification payloads
Apple Inc.	App distribution and Apple Push Notification service	United States	Crash reports (if you've enabled sharing with developers in iOS settings), push notification delivery

We do not sell your personal information. We do not share it with advertisers, data brokers, or social networks.

We may disclose information if required by law (subpoena, court order) or to protect the safety of users or the public.

7. Where we store your information

Your information is processed and stored in the United States. If you access FlickMe from outside the United States, your information will be transferred to and stored in the United States, which may have different data-protection laws than your country.

8. How long we keep information

Data	Retention
Account (username, password hash)	Until you delete your account
Flicks (photo files)	24 hours from send, or immediately on view
Flick database records	30 days, then purged
Chat messages	Until you or the other party deletes them or deletes the account
Friendships	Until either party removes the friendship or deletes the account
Push tokens	Until you uninstall the App or revoke push permission
Server logs	30 days
Reports / support emails	2 years for safety record-keeping

When you delete your account, all of the above (except support emails kept for safety records) are deleted within 30 days.

9. Your rights

You have the right to:

Access — request a copy of the personal information we hold about you.
Correct — fix inaccurate information.
Delete — delete your account and associated data. You can do this in-app via Profile → Delete Account, or by emailing support@flickmeapp.com.
Object / Restrict — ask us to stop or limit certain processing.
Portability — receive your data in a machine-readable format.
Withdraw consent — for any processing that is based on consent.

We will respond to verifiable requests within 30 days.

If you are in the EU/UK, you have the right to lodge a complaint with your local data-protection authority. If you are in California, you have rights under the CCPA including the right to know, delete, and not be discriminated against for exercising your rights — this policy describes how to exercise them.

10. Security

We protect your information with reasonable safeguards:

All traffic to and from the App is encrypted in transit with TLS 1.2+.
Passwords are hashed with bcrypt (12 rounds).
Authentication tokens on your device are stored in Apple Keychain via expo-secure-store.
Photo files are stored with access-controlled signed URLs that expire 5 minutes after issue.
Database access is restricted by IP allowlist and per-user credentials.

No system is perfectly secure. If we discover a breach affecting your information, we will notify you and the relevant authorities as required by law.

11. Push notifications

If you opt in, we use Apple Push Notification service (via Expo) to send you alerts about new flicks, messages, and friend requests. You can disable push notifications at any time in iOS Settings → Notifications → FlickMe. Disabling notifications does not delete your account or stop the underlying messages from being delivered the next time you open the App.

12. Changes to this policy

If we make material changes to this policy, we will notify you in-app and/or by email at least 7 days before the changes take effect. The "Last updated" date at the top of this policy will always show the most recent version.

13. Contact

Will Miraglia 18720 N 101st Street UNIT 3010 Scottsdale, AZ, United States Email: support@flickmeapp.com