Last updated: 6 October 2026
This Privacy Policy explains how FlipTip AI (“FlipTip”, “we”, “us”) collects, uses, shares and protects personal data when you use our website and apps at fliptip.ai, including the Android app from Google Play (the “Service”). We process personal data in accordance with the EU General Data Protection Regulation (GDPR), the UK GDPR and other applicable privacy laws.
The Service is operated by the FlipTip AI team, which acts as the data controller. For any data-protection matter — including questions, requests, or to obtain our full controller and contact details — reach us at [email protected].
Google sign-in: we receive and store your name, e-mail address,
profile picture URL and Google account identifier.
E-mail sign-in link: we store your e-mail address. To sign you in we
send a one-time link that expires after 20 minutes and can be used only once.
We use this data to create and secure your account, recognise you across sessions
and contact you about the Service.
We store your country/market, language-related settings, plan and subscription status, free-trial status, daily scan counts, feature settings (for example the seller’s-price prompt or the Treasure Radar value threshold) and similar data so the Service works correctly and applies your plan limits.
Please avoid photographing people, documents or other personal information.
We store the results of your scans, the seller’s price if you enter one, and the information you add in the profit dashboard — purchase and sale prices, costs, where you bought and sold an item, its status and your monthly goal. On the Dealer plan we also store your AI Hunter searches and the alerts we send you. This data is used only to provide these features to you.
On the Flipper and Dealer plans you can connect your eBay account to publish listings from FlipTip. You sign in on eBay itself; we never see your eBay password. We then store: the access tokens eBay gives us, your eBay username and user ID, the eBay site you sell on, the address your items ship from (postal code, city, region, country — taken from your eBay account where it already has one, otherwise as you enter it or estimated from your connection's location for you to check), the IDs of your eBay shipping, payment and return policies, and for each item you publish: the listing text, the photos you choose or add, the eBay listing and offer IDs, its status and price.
To publish, we send eBay the listing (title, description, item specifics, condition, category, price), links to its photos and your ship-from address, and we read your eBay orders only to mark items as sold in your dashboard. Photos you add for an eBay listing are stored with us and made available to eBay at a hard-to-guess, signed address so eBay can download them. When you open the eBay preview, the item's photo and scan details are sent to our AI service providers to write the listing text and, if you ask for it, a white-background version of a photo. You can disconnect eBay in Settings at any time; your listings on eBay then stay as they are, and eBay's own privacy notice applies to everything on eBay.
Subscriptions are processed by PayPal. We store your PayPal subscription identifier, plan and billing status (for example the date until which a cancelled plan stays active). We never see, receive or store your card or bank details — these are handled entirely by PayPal.
To show local marketplaces, prices in your currency and nearby flea markets, we derive your approximate location (country, sometimes city) from your IP address and from the country you select, and may use your device’s precise location if you grant permission. Precise location is only used when you explicitly allow it and is not stored on our servers.
We send service e-mails (sign-in links, billing notices) and, unless you opt out, helpful messages such as a welcome e-mail, reminders before your trial ends and a weekly summary of your profit dashboard. Every non-essential e-mail contains an unsubscribe link.
If you post a comment on our pages, your comment and the name shown with it are public.
To stop the free trial being used over and over, we check whether an e-mail address (or a variant of it) already had a trial, refuse throw-away e-mail services, and count how many trials start from the same network (IP address, stored as a one-way hash for 30 days). When an account is deleted we keep only a one-way keyed hash of its e-mail address for this purpose; it cannot be turned back into the address.
When you first visit, we note how you found FlipTip: the page you landed on, the
site or app that sent you (for example TikTok), and a campaign or partner link code if
the link had one (cookie ft_src, see the Cookie Policy). When you sign up,
this is saved with your account so we can see which channels and partners bring people
who use and pay for FlipTip. If you came through a social app or a partner link, we also
keep a one-way hash of your network address for 7 days, so a sign-up in another browser
on the same network can be matched to that visit; the address itself is not stored.
Our servers and security tooling automatically process technical data such as IP address, browser type and request timestamps for security, abuse prevention, rate-limiting and diagnostics. Error logs may temporarily contain such data.
| Purpose | Legal basis |
|---|---|
| Creating and running your account; scans, radar, listings, publishing to eBay, profit dashboard and AI Hunter you use; billing; service e-mails | Performance of a contract (Art. 6(1)(b)) |
| Security, fraud and trial-abuse prevention, rate-limiting, IP-based country detection; measuring which channels and partner links bring users; helpful e-mails about the Service you use (with an unsubscribe option) | Legitimate interests (Art. 6(1)(f)) |
| Precise device location; non-essential cookies and third-party content | Consent (Art. 6(1)(a)) |
| Keeping records, responding to legal requests, tax/accounting | Legal obligation (Art. 6(1)(c)) |
Where we rely on consent, you may withdraw it at any time without affecting processing carried out before withdrawal. You can object to processing based on legitimate interests at any time.
We share personal data only with service providers that help us run the Service. Each processes data on our behalf or as an independent controller for the limited purpose described below.
| Provider | Purpose | Region |
|---|---|---|
| AI service providers | Analysis of photos, radar frames and scan details; prices, verdicts and listings | Outside the EEA |
| Google — Sign-In, Fonts, Maps | Login, web fonts, embedded maps | USA / global |
| PayPal | Subscription payments | USA / EU |
| eBay (only if you connect your eBay account) | Publishing and managing your listings, reading your eBay orders to mark items sold | USA / global |
| E-mail delivery provider (e.g. Resend) | Sending e-mails | USA / EU |
| Hosting and network providers | Website and data hosting, delivery and security | EU / global |
To look up prices we also query marketplace and price-data services (for example eBay and SoldComps) with item names and search terms only — no personal data.
We do not sell your personal data, and we do not share it with advertisers.
Some of our providers are located outside the European Economic Area. Where data is transferred outside the EEA/UK, we rely on appropriate safeguards such as the EU Standard Contractual Clauses, adequacy decisions where available, and the providers’ own compliance frameworks. We limit what we send: AI providers receive only what a feature needs (photos or frames for image analysis, the text of a scan result and the seller’s price for prices and verdicts) — never your name or e-mail address. If you do not wish your data to be processed in this way, please do not use the scan and radar features.
Subject to applicable law, you have the right to: access your data; rectify inaccurate data; erase your data; restrict or object to processing; data portability (the profit dashboard can also be exported as CSV); and withdraw consent. You also have the right not to be subject to solely automated decisions with legal or similarly significant effects — our scan, radar and listing results are estimates and informational only, and do not make such decisions about you.
To delete your account, use Delete account in the app menu (see how to delete your account). For any other request, contact [email protected]. We respond within 30 days. You also have the right to lodge a complaint with your local data protection supervisory authority.
We use a strictly necessary session cookie to keep you signed in, and (with your consent) functional storage and third-party content. For full details and to change your choices, see our Cookie Policy or use the “Cookie settings” link in the footer.
The Service is not directed to children. You must be at least 16 years old (or the minimum age of digital consent in your country) to use it. We do not knowingly collect data from children below that age; if you believe we have, contact us and we will delete it.
We use measures such as HTTPS, HTTP-only secure session cookies, CSRF protection, single-use sign-in links and rate-limiting to protect your data. No method of transmission or storage is completely secure, but we work to protect your information.
We may update this policy from time to time. We will update the “Last updated” date above and, for material changes, provide a more prominent notice.
For any privacy question or request, contact [email protected].