FlipMath privacy policy

Who we are

FlipMath is made by Wavista Apps, operated by William Tsao, an individual based in California, USA. Contact: support@wavistaapp.com.

What stays on your iPhone

FlipMath has no account. It saves these only in the app's storage on your iPhone:

• your trips: store name and type, notes, and start and end times;
• your scans: the photos, the AI result, the eBay price summary (when the app shows current listings), tag price, expected sale price, marketplace, shipping size, the Buy, Maybe or Skip verdict, and whether you bought it;
• your inventory: title, category, cost, status, dates, sale price, fees, shipping and notes;
• the listings you have the app write: title, description, item specifics, condition and suggested category. Writing a listing again deletes the one it replaces;
• your settings (fees, shipping, tax and verdict thresholds) and your setup answers.

The profit math and the verdict are worked out on your iPhone. Spoken verdicts are spoken by your iPhone. The app copies listing text to the clipboard only when you tap Copy.

When the app deletes a record, its database overwrites it with zeros instead of only marking the space as free. Delete my data also empties the database's log of recent changes.

If you back up your iPhone to iCloud or a computer, the backup includes this data, as it does for any app.

What leaves your iPhone, and who receives it

Our server and OpenAI (item identification, listings and price checks)

AI analysis needs your permission. The app asks on a consent screen first, and nothing is sent if you choose Not now. FlipMath does not analyze items on your iPhone; every identification goes through our server.

• Identify an item: the app shrinks each photo and removes its metadata, including any location, and sends our server 1 or 2 photos (the item and, if you took one, its label or maker's mark), the type of store you are in (for example thrift) and which photo is which.
• Write a listing: no photos. The app sends the item details from the identification (such as type, category, brand or maker, model or pattern, era, materials, mark text and visible condition), or just the item title, plus your condition notes (up to 600 characters), the tone you chose and your marketplace's name. No prices are sent.
• Check prices online: no photos and no notes of yours. The app sends the search words the AI wrote for the item and the item details from the identification (type, brand or maker, model or pattern, era and materials). It does not send the condition.

Our server removes any remaining photo metadata and sends these to OpenAI to get the result. It keeps them in memory only while it gets the result. It does not save them or write them to its logs.

OpenAI receives the photos and details, but not your name or the app's anonymous ID. We send each request with OpenAI's storage option turned off (store=false), so OpenAI does not keep it as a stored conversation. OpenAI does not use API data to train its models. It may keep API data for up to 30 days only to check for misuse, and then deletes it. eBay results are never sent to OpenAI.

The app keeps your scan photos on your iPhone until you delete the scan (Delete scan on its result), use Delete my data or delete the app. Deleting a scan also deletes its identification and, for an item you bought, its inventory item, sale details and listing. This happens on your iPhone only and does not change what our server keeps (see below). Removing an item from your inventory deletes its sale details and listing and keeps its scan.

Withdraw your permission at any time: Settings, Use AI analysis.

eBay (current listings and sold prices)

When the app shows what similar items are listed for, it sends our server the short search phrase the AI wrote for the item (for example a brand and item type). Our server searches eBay with our own app key and sends eBay no ID and nothing else about you. It keeps each search's results in memory for about an hour, shared by anyone who searches the same phrase. If an eBay search fails, our server's error log may include the search phrase, with no ID.

If you tap an example listing, it opens eBay's own page in Safari, and eBay's privacy policy applies to that visit.

eBay results and eBay pages are never sent to OpenAI.

See sold prices on eBay on a result opens eBay's sold listings in Safari or the eBay app, where eBay's privacy policy applies. The link carries the item's search words, written by the AI from your photos, and nothing about you. The app does not count taps on it. It is hidden while the age protections under Children are on.

Online price check (OpenAI web search)

The app checks prices online on its own right after a scan that the AI identified with enough confidence, and otherwise only when you tap Check prices online. It sends our server the details listed above, and our server asks OpenAI to search the web for what similar items sell for. OpenAI searches with short words it writes about the item (for example its brand and type). The search is made from our server. It carries no name or ID from us, and photos are not part of it. The web search excludes eBay, and eBay results and eBay pages are never sent to OpenAI. OpenAI may use a search engine to run the search. The result shows links to the pages it used. If you open one, you go to that site, and that site's own privacy policy applies. Online price checks have daily and monthly limits for each person.

Our server keeps nothing from a price check beyond its record of the request (the time, the feature, its cost and whether it worked, as for every AI request below) and the encrypted copy of the answer that only your iPhone can open (below). It does not keep the search words or the item description. The answer is saved on your iPhone with the scan. If you scan an item with the same search words within 24 hours, the app shows the check it already saved for it, with its date, instead of searching again: nothing is sent to our server or OpenAI, and no check is used.

What our server keeps

Every request to our server carries the app's anonymous ID (a random ID created by RevenueCat, see below), so the server can check your subscription and daily limits. Our server keeps:

• A record of each AI request: the time, the feature, which kind of AI answered, whether it worked, how long it took, its cost, the confidence of the answer and your answer to "Was this right?" if you give one. It is tied to a scrambled form of the anonymous ID (a salted hash), not the ID itself, and never includes photos, notes or items. Records are deleted after 90 days.
• An encrypted copy of each answer: the answer to each identification, listing or price check (or the error, if it failed), never the photos or notes, tied to the scrambled ID. It is kept for about 24 hours, so that if the connection drops, the app's automatic retry gets the same answer without the request running or being counted twice. It is locked with a random key that the app makes for that request and sends with it. Our server stores only a scrambled form of that key, so it can open the copy only when the app's retry sends the key again. It is left out of database backups, and Delete my data deletes it.
• Daily and monthly usage counts for AI requests, online price checks and eBay searches, tied to the scrambled ID, deleted after 90 days.
• Your subscription status: the anonymous ID with the product, the expiry date, whether it is a trial and whether it was a test purchase. RevenueCat sends this to our server when your subscription changes. We keep it until you use Delete my data.

Our server uses your IP address for a moment, in memory, to limit how many requests one connection can make. It does not save it in its database or its logs. Our server runs on Fly.io, and its database is hosted by Supabase, both in the United States. Every hour we save a backup copy of that database in a separate private storage bucket at Cloudflare R2. Each copy is encrypted before it is uploaded, with a key that only we hold, so Cloudflare cannot read it. We use backups only to recover the database if something goes wrong.

RevenueCat (subscriptions)

RevenueCat runs the subscription for us. It receives the app's random anonymous ID, your App Store purchase records (what you bought, when, its price, and trial and renewal status) and technical details such as the iOS and app version. Its software also sends the identifier for vendor, an ID that Apple gives our apps on your iPhone. RevenueCat never gets your name, email or payment card. If you installed the app from an ad on the App Store (Apple Ads), Apple tells RevenueCat which ad campaign, ad group and search keyword led to the install, so we can see whether our ads pay for themselves. This is Apple's own ad attribution: it does not use the advertising identifier and needs no tracking permission. Apple handles payment.

PostHog (usage analytics, which you can turn off)

We use PostHog to see how the app is used, so we can find problems and improve it. Analytics are on when you install the app, and you can turn them off at any time in Settings, Share usage analytics. When they are off, the app sends nothing to PostHog. When they are on, PostHog receives, tied to the anonymous ID:

• the setup answer you pick from a list: where you sell most. Your minimum profit and minimum multiple of cost stay on your iPhone;
• events such as opening the app, setup steps viewed, permission answers, your AI choice, when the subscription screen was shown, each step of a purchase (started, cancelled, failed with RevenueCat's error code, or completed, with the offer shown and the product), trials, restores (with the offer shown), when an identification started, finished (how long it took, its confidence) or failed (an error code), your thumbs answer and review prompts;
• that you scanned an item (its category, whether listings were found and how many), ran an online price check (whether a price was found, how many sources, whether the answer was already saved and whether the limit was reached, with no links), saw a verdict, bought an item, made a listing, sold an item (with no price or profit) or finished a trip (how many scans and buys);
• details the PostHog software adds, such as the app version, iOS version, device model, language, time zone and screen size.

PostHog never receives your photos, item names, store names, notes, or any price or profit. Session recording, touch tracking and location lookup from your IP address are turned off. PostHog does not store your IP address.

Sentry (crash reports)

If the app crashes or hits an error, it sends a report to Sentry so we can fix it: what went wrong and where in the app, the device model, iOS and app version, which app update it is running, a random ID Sentry makes for the install, and a short trail of what the app did just before. For about 1 in 10 sessions it also sends performance timings. Reports do not include the anonymous ID. Before a report is sent, the app cuts a failed database save down to the kind of action and the table name, so a report never includes what you were saving (such as an item title, store name, note or price). It also leaves out request details and console logs. Sentry does not store your IP address.

Expo (app updates)

Each time the app starts, it asks Expo's update server (EAS Update) whether an update for the app is waiting, and downloads it if there is one. The request carries the operating system, which version of the app's code is running (its runtime version, update channel and update IDs) and a random install ID that Expo's software creates on your iPhone. If the app stopped with an error while it was starting, the next check also sends the text of that error, so a faulty update can be found and undone. Apart from that text, the request does not include your name, an account, the app's anonymous ID or your photos, items or prices. Like any server, Expo sees the IP address the request comes from. The check runs for everyone, including while the age protections under Children are on, because it only keeps the app working. See Expo's privacy policy.

Apple

Apple handles the App Store, payments and iPhone backups under Apple's own privacy policy.

Email to support

If you email us, we receive your email address, your message and the details that Contact support adds (app version, iOS version and the anonymous ID). We use them only to help you. We keep support emails for 2 years after your last message, then delete them. Cloudflare forwards them to our Gmail (Google) inbox.

Permissions

• Camera and photos: only to take or choose a photo of an item or its label.
• Notifications: only for one reminder before a free trial ends, if you allow it.

FlipMath does not use your location, contacts, microphone or Apple Health.

How long data is kept

• On your iPhone: until you delete it, use Delete my data or delete the app.
• Photos and details on our server: not stored, only held in memory during the request.
• eBay search results on our server: in memory for about an hour, not tied to you.
• At OpenAI: up to 30 days, only for misuse checks.
• Encrypted copies of answers on our server: about 24 hours.
• Request records and usage counts on our server: 90 days.
• Encrypted backups of our server's database: hourly copies for 3 days and daily copies for 35 days, then deleted automatically. Anything removed from the database, including by Delete my data, is gone from every backup within 35 days.
• Subscription status on our server: until you use Delete my data.
• RevenueCat: for as long as we offer the app, so your subscription can be restored.
• PostHog: up to 1 year, or until you use Delete my data.
• Sentry: 30 days.
• Expo: only as long as Expo reasonably needs it, as its privacy policy says; it names no fixed period.

Delete my data

Open Settings and tap Delete my data. The app deletes everything it saved on your iPhone right away (your trips, scans, photos, inventory, answers and settings) and starts again from the beginning. Analytics are turned off on that iPhone until you turn them on again in Settings. Listings you already pasted into a marketplace are not affected. Then it asks our server to:

• ask PostHog to delete your analytics profile and its events;
• delete your subscription status record and any encrypted copies of recent answers;
• remove the scrambled ID from your request records, so they can no longer be tied to you (they are still deleted at 90 days);
• delete your usage counts from earlier days. Today's counts stay until they expire, so daily limits still work.

Backups made before the deletion still hold the old records until those copies are deleted, at most 35 days later. Nobody can read a backup without our encryption key, and we use backups only to recover the database after a failure.

If your iPhone is offline or our server cannot be reached, the app tries again by itself. While the deletion is waiting for our server, Settings shows it and offers Email support. If you delete the app before then, it can no longer finish this step, so first email us from Contact support (it adds the anonymous ID we need) and we will delete the server copy.

Delete my data does not cancel your subscription and does not delete RevenueCat's purchase record, so you can still restore your subscription. To ask for your RevenueCat record to be deleted too, email us.

Delete my data does not reach Expo either. Its update checks are tied only to Expo's own random install ID, which we never see, so we cannot find them for you. Deleting the app removes that ID from your iPhone.

Your requests

You can email support@wavistaapp.com to ask what we hold about you, or to delete it. Send the email from Contact support in the app so it includes the anonymous ID; we cannot find your data without it, because we do not know your name. We reply within 30 days.

What we do not do

We do not sell your personal information or share it for advertising. The app has no ads and does not track you across other companies' apps or websites.

The app does not track you across other companies' apps or websites, so there is nothing for a Do Not Track signal to turn off, and the app does not respond to one.

Children

FlipMath is not directed to children under 13, and we do not knowingly collect data from them. If you think a child has used the app, email us and we will help delete the data.

Where the law requires it, the app asks Apple for your age range. The answer stays on your iPhone, is used only to apply age protections, and is never sent to us or anyone else. If Apple says you are under 13, if you choose not to share your age range where it is required, or if iOS cannot tell the app at launch whether the law requires asking (for example with no Apple Account signed in, or no answer within 3 seconds) and the app has no earlier answer saved, the app turns off usage analytics, Apple Ads attribution (see RevenueCat above), the features that send photos or item details to our server (identification, listings and current listings), the sold prices link, and your answers about AI results. The app also offers no subscription, because the features it unlocks send photos to our server. Restore purchases still works, and a subscription bought earlier is not changed. In the last case, these protections last until a launch where iOS can tell. If you chose not to share your age range where the law requires asking, a Share age range button, shown when a feature is not available, lets you ask Apple again.

Security and where data is processed

The app talks to our server and service providers over encrypted connections (HTTPS). Our server stores the anonymous ID only in scrambled form, except in the subscription record. Our server, its database and our service providers process data in the United States. Database backups are encrypted before upload and kept in Cloudflare R2's Eastern North America region.

Changes to this policy

If we change this policy, we will post the new version here with a new effective date. If a change affects how we use data you already gave us, we will tell you in the app first.

Contact

support@wavistaapp.com

Back to top