Privacy notice

What we collect

• Your account: email address, handle, your date of birth (teens only) and who your guardian is.
• Your password: stored only as a scrambled one-way code. Nobody at Flippo can read it.
• Your devices: the device name and when you signed in.
• Your items: listings, the live photos you take and serial numbers. We remove location data from photos, and other people only see serials partly hidden.
• Your deals: orders, swaps, payments, payouts and your Flippo credit.
• Payments: the card brand and last four digits. Full card numbers stay with our payment provider.
• Payouts: the bank account you cash out to, locked with encryption. You only ever see the last four digits.
• Chat: messages you send, including ones the filter blocked, and reports you make.
• The app launch list: if you ask to hear when the Flippo apps are out, your email address and your phone type. We use it for one email when the apps launch, nothing else. To come off the list, email [Privacy contact email]. Deleting your Flippo account takes you off it too.

What we never collect

• Your ID number. If the payment partner needs it to check who you are, it goes straight to them. We don't keep it.
• Your home address or where you are. Handovers happen at Flippo Points.
• Tracking for ads. Flippo has no advertising or third-party analytics trackers.

Why we use it

• To run your account and your deals, as you asked us to.
• To keep teens safe: the chat filter, moderation, guardian approvals and fraud checks.
• To follow the law, for example keeping financial records.
• For under-18s, with the consent of the guardian who links to the account.

Who sees it

• Other people on Flippo see your handle, initials, Trust Score, whether you're verified and guardian-linked, and your listings.
• Your guardian sees your swaps and sales, spending, credit and chat activity. Not the messages themselves.
• Flippo staff see only what their job needs: moderators see reported chats, Flippo Point staff see the handovers at their Point, finance staff see disputes and refunds, experts see the items they check.
• Our service providers: the payment provider, the email provider that sends your codes, and our hosting provider.
• The authorities, when the law requires it or a child may be in danger.

We never sell your information.

Where it's kept

On servers in South Africa (Amazon Web Services, Cape Town). It's encrypted, and the keys are kept apart from the data.

How long we keep it

Sign-in codes

30 days

Photos never used on a listing

24 hours

Chat messages

12 months after the deal closes

Moderation records

3 years

Orders, payments and payouts

5 years, as the law requires

Everything else

Until you delete your account

When you delete your account we wait 14 days, then delete your profile, email address, phone number, photos, bank details and sign-ins. Financial records stay for 5 years under a code instead of your name. After that, the link between the code and you is destroyed.

Your rights

• Download your data, or delete your account, in Settings.
• Ask us to correct something, or to stop using it.
• Complain to the Information Regulator. The POPIA page explains how.

A linked guardian can do the same for their teen.

Changes and contact

When this notice changes, we tell you and ask you to accept it again.

Our information officer is [Information officer name], at [Privacy contact email].