Flexr Privacy Policy
Version 1.2
This document is provided in several languages. If the translations differ in meaning, the Korean (ko) text prevails.
1. Information we collect
The Company collects the following information to provide the service.
| Category | Items | How collected |
|---|---|---|
| Sign-up information | Email, password (stored only as an irreversible hash), handle, display name (optional), bio (optional), date of birth, preferred language, invite code (if entered) | Sign-up, profile edits |
| Email verification | Verification status and time, verification code (hashed), email sending records (address stored as a hash) | Verification, password reset |
| Posts and activity | Photos, captions, comments, reactions, DM content, vote and Star records, follow relationships, block list, report details, photo-hide and account-lock settings | Using the service |
| Capture and editing information | Issue and use times of the single-use capture code issued right after shooting, the original photo before editing (if you used blur, those areas are also blurred in the stored original) and the edits (ratio and crop position; blur areas; filters; text layer content, font and position), and an EXIF summary of the original such as device model and capture time. Location (GPS) data is removed and not stored | Upload |
| Photo review results | Automatic review decision, labels and confidence scores returned by the image-analysis service, administrator decisions | After upload |
| Subscription records | Subscription product, purchase/renewal/expiry times, app store transaction ID, refund and take-back records, bonus vote (invite reward) history. We do not receive payment methods (such as card numbers) | From the app store (Apple, Google) when confirming a purchase |
| Invites | Invite relationships, reward grant/rejection/take-back records, IP at invite sign-up | Invite sign-up, first photo upload |
| Device identifier | A hash of a random value created when the app is first launched (install ID). We do not collect hardware identifiers (IMEI, advertising ID, etc.) | Using the app |
| Notifications | Push token, device platform, device time zone, app version, notification settings by type, notification sending records, notification inbox (notifications received and whether they were read) | Allowing and configuring notifications |
| Support | Request type, content, linked purchase or photo, app version, OS type and version, app language | Support requests |
| Usage statistics | Screen and feature usage events (event name, predefined properties, platform, app version, time). IP, device identifiers and location are not included | Using the app |
| Error information | Error details, device type, OS and app version, a pseudonymous user number. Email, photos and DMs are not included | When an app or server error occurs |
| Access records | Login successes and failures, IP address, device information (User-Agent), request identifiers, screenshot-detection events | Using the service |
| Consent records | The document agreed to, its version, the language shown at the time, consent time, IP | Sign-up, re-consent |
| Data download | Request time, number of downloads | When requested |
Automatic collection tools (cookies, etc.)
- The app does not use cookies.
- The app automatically collects a hash of the install ID (a random value), the push token, and error information with a pseudonymous user number for error tracking (Sentry). We do not collect advertising IDs (IDFA/GAID) or location, and we do not track you for advertising.
- If you turn off notifications in your device settings, we stop receiving new push tokens and delete existing ones once they become invalid. If you delete the app, collection of the install ID also stops.
2. Purposes of use
- Sign-up, email verification, account recovery (password reset) and account protection (including lockouts and rate limits).
- Providing the service: photo posting, voting, rankings, the Best section, comments, DMs and follows.
- Automatic review of inappropriate photos (Section 4).
- Confirming subscription (Flexr Pro) purchases, renewing them, handling refunds and withdrawals, and granting and managing bonus votes (invite rewards).
- Granting invite rewards and preventing fraudulent sign-ups and reward abuse (checking device identifiers and IPs).
- Sending notifications and handling support requests.
- Usage statistics to improve the service (reviewed only as aggregates that cannot identify individuals) and fixing errors.
- Preventing abuse and handling reports, such as violations of the terms, photo manipulation and vote fraud.
- Complying with legal obligations and handling disputes.
3. No other use
The Company does not use the photos and other information you upload for any purpose other than providing the service. We do not use them for advertising, sale, AI training or marketing, and we do not provide them to third parties except for the outsourcing described in Section 5 and requests under the law.
4. Automatic photo review and human re-review
- Before a photo is published, an external image-analysis service (Amazon Rekognition, Tokyo region in Japan) assesses its level of exposure. The image sent is the edited result image that would be published; the original before editing is not sent. The analysis service is configured not to use the image for training and does not keep it after processing.
- The standard is the level of exposure (Terms, Article 4). Depending on the result, a photo may be published automatically, held, or not published. Held photos are checked by an administrator.
- You can appeal a photo that was not published within 14 days, and an administrator (a person) will review it again and can change the decision. You may ask for an explanation of the criteria and result of an automatic decision.
- Accounts are never suspended based on automatic decisions alone.
5. Outsourcing and international transfers
The Company entrusts server, data storage and delivery work necessary to provide the service (to perform our contract with you) to the companies below, and personal information is transferred abroad in the process. This is done by disclosing the details in this policy, under Article 28-8(1)(3) of the Korean Personal Information Protection Act.
| Recipient (contact) | Country (processing location) | Items transferred | Purpose | Timing and method | Retention period |
|---|---|---|---|---|---|
| Fly.io, Inc. (compliance@fly.io) | Japan (Tokyo) | All information processed while using the service | Running the app servers | Each time you use the service, over encrypted connections (TLS) | Only while processing (not stored on the servers) |
| Supabase, Inc. (privacy@supabase.com) | Japan (Tokyo) | All information stored in the database | Database storage | Same | Until the end of the retention periods in Section 6 |
| Cloudflare, Inc. (dpo@cloudflare.com) | Asia-Pacific (storage), worldwide (in transit) | Photos (result, thumbnail, original before editing), backups, data-download files | Storing and delivering photos | On upload and viewing | Until the end of the retention periods in Section 6 |
| Amazon Web Services, Inc. — SES (aws-korea-privacy@amazon.com) | Japan (Tokyo) | Email address, email content (verification/reset codes, notices) | Sending email | When sending | For the period set by the provider's policy after sending |
| Amazon Web Services, Inc. — Rekognition (aws-korea-privacy@amazon.com) | Japan (Tokyo) | The edited result image of uploaded photos | Automatic review of inappropriate photos | On upload | Not kept after processing (excluded from training) |
| 650 Industries, Inc. (Expo) (https://expo.dev/contact) | United States | Push token, notification title and body (DM content excluded) | Delivering push notifications | When sending notifications | Not kept after delivery |
| Apple Inc. (APNs) / Google LLC (FCM) (https://www.apple.com/legal/privacy/contact/ · https://support.google.com/policies?p=privpol_privts) | United States and others | Push token, notification content | Delivering notifications to devices | When sending notifications | Per each company's policy |
| Functional Software, Inc. (Sentry) (compliance@sentry.io) | Germany | Error information, device/OS/app version, pseudonymous user number | Error tracking | When an error occurs | 30 days |
| Upstash, Inc. (privacy@upstash.com) | Japan (Tokyo) | IP address, user number (for rate limiting) | Preventing abuse | On request | Minutes to a day (expires automatically) |
- How to refuse the transfer and what happens: These transfers are essential to providing the service, so refusing them requires deleting your account, after which you can no longer use the service.
- Our contracts with these companies include safe handling of personal information and a ban on use for other purposes. If a company or processing location changes, we will revise this policy and let you know.
- Payments: Subscription payments are processed by the app store operators (Apple, Google) as sellers, under their own privacy policies. The Company receives the transaction ID, product, purchase time and similar information from the app store to confirm purchases (Section 1).
6. Retention and destruction
| Information | Retention period |
|---|---|
| Account information and posts (photos, captions, comments, DMs, etc.) | Until you delete your account or the item |
| Original text of comments, DMs and captions that were deleted, or that belong to deleted accounts | 1 year after deletion (items under an open report are kept until the report is closed) |
| Files of deleted or hidden photos (result, thumbnail, original before editing) | 1 year after deletion or account deletion (items under an open report are kept until the report is closed) |
| Original-content parts of audit logs (text, before/after edits, IP and device information, etc.) | 1 year (administrators' action records: 2 years). After that, the original content is deleted and only a hash for tamper checking remains |
| Login records (time, IP, device information) | 1 year |
| Device identifier (hash) | 1 year after last use or account deletion |
| Email hash and suspension reason of an account deleted while suspended | 1 year after deletion (to prevent misuse by signing up again with the same email to get around a suspension) |
| Email verification and sending records | 90 days |
| Notification sending records | 90 days |
| Notification inbox items | 90 days (up to the latest 200 per person). Deleted immediately when you delete your account |
| Raw usage-statistics records | 90 days (after that, only aggregates that cannot identify individuals are kept) |
| Error information | 30 days |
| Support records | 3 years after closing (Korean Act on Consumer Protection in Electronic Commerce: records of consumer complaints and dispute handling) |
| Subscription payment and refund records | 5 years (same Act: records of contracts and withdrawals, payments and supply) |
| Data-download files | 72 hours after creation |
| Consent records | For the period needed to handle disputes under the law after account deletion |
- When you delete your account, your email and handle are replaced with anonymous values, your photos are hidden, all login and push tokens are destroyed, and unsent notifications are cancelled.
- Information whose retention period has ended is destroyed without delay in a way that cannot be restored.
- Destruction procedure: Information whose retention period has ended or whose purpose has been achieved is destroyed without delay. Information that must be kept under the law is stored separately from other information and destroyed when that period ends.
- Destruction method: Electronic files are deleted in a way that cannot be recovered, and any printed material is shredded or incinerated.
7. Administrator access
- The Company's administrators may view comments, DM content and usage logs to handle reports and prevent abuse. This includes content before you deleted or edited it, for the periods in Section 6.
- Original photos before editing and the edits (including text) are kept to check for photo manipulation and can be viewed only by administrators. They are not provided to other users.
- Administrators' viewing is also recorded and monitored separately.
- Best results are shown in the app only for a set period, but the records themselves are kept to run the service and so that you can view your own past records (subscription, data download).
8. Security measures
Passwords are stored as argon2id hashes, login tokens use short expiry and rotation, and photos are served only through short-lived signed URLs. All communication is encrypted, and audit logs are protected against modification and deletion and can be verified for tampering. Device identifiers and email sending records are stored as hashes, and personal information such as email, photos and DMs is removed from error information before it is sent.
Administrative measures: We establish and carry out an internal management plan, designate as few staff as possible to handle personal information, grant, change and revoke access rights only to the extent needed for their work, and train those staff on privacy protection regularly. Access records are kept securely for at least 1 year and reviewed to prevent forgery, alteration and theft.
9. Your rights and how to exercise them
| Right | How |
|---|---|
| Access and data download | Settings > Privacy > Download my data: we create a file with your profile, consent history, your photos (including originals before editing), comments, DMs, votes, subscriptions, bonus votes, invites, support requests, follows, block list, notification inbox, past records and more, and send a download link to your verified email (once every 30 days; the link works for 72 hours and up to 3 times). Other users' private information and security secrets are not included |
| Correction | Edit your profile or change your email. For other corrections, use Support (Privacy) |
| Deletion | Delete photos, comments and DMs, or delete your account. The retention exceptions in Section 6 apply |
| Suspension of processing and objection | Request through Support (Privacy); an administrator will review it |
| Explanation and re-review of automatic decisions | Appeal as described in Section 4 |
| Transmission request (data portability) | If the conditions set by law are met, you may ask us to transmit your personal information to you or to another personal information handler. Make the request through Contact us (privacy) or the Privacy Officer's contact; we check the conditions and process it, and tell you the reason if they are not met. You can also receive your data through Download my data in the app |
- Requests are handled within 10 days of receipt; if there is a delay, we will tell you why.
- If you cannot log in, you can send your request to the Privacy Officer contact below.
- Exercising rights through an agent: A legal guardian or an authorized agent may exercise these rights. Send a power of attorney and identification documents for you and the agent to the Privacy Officer's contact below; we process the request after confirming the authorization and your identity, and destroy the documents used for confirmation once it is processed.
10. Notifications and advertising
- Push notifications are sent only if you allow them on your device, and you can turn them off by type in Settings.
- The Company does not send advertising messages.
11. No use by people under 18
The service may be used only by people aged 18 or older (subscription purchases: 19 or older). Accounts found to belong to people under 18 are suspended and their posts are hidden.
12. Privacy Officer
- Name and title: Lim Sungmin (임성민), Representative
- Contact: support@flexrapp.app
- General inquiries: support@flexrapp.app or in-app Support
In Korea, you can also seek advice on privacy violations from the Personal Information Infringement Report Center (118, privacy.kisa.or.kr) and the Personal Information Dispute Mediation Committee (1833-6972, www.kopico.go.kr).
13. Changes to this policy and language
If this policy changes, we will publish the new version and ask for your consent again. If the translations differ in meaning, the Korean (ko) text prevails.