Privacy Policy

1. Who we are

Flipora is an iPhone app operated by LUDWIG DIGITAL STUDIO LTDA, CNPJ 58.638.805/0001-45, Av. Paulista, 1471, conj. 1110, Bela Vista, São Paulo/SP, CEP 01311-927, Brazil (“Ludwig Digital Studio”, “we”, “us”). We are the controller of the personal data described in this policy.

This policy explains what data the Flipora app and its server process, why, and the choices you have. It is written to comply with Brazil’s General Data Protection Law (LGPD, Lei nº 13.709/2018). If you live elsewhere, for example in the European Union (GDPR) or California (CCPA/CPRA), you have equivalent rights and can exercise them through the same contact below.

2. Data we process

Flipora has no accounts. We do not ask for your name, email address, phone number or Apple ID, and we do not collect your location or contacts.

3. How your photos are processed

1. When you take or pick a photo, the app resizes and compresses it on your device.
2. The photo (and your optional hint) is sent over an encrypted HTTPS connection to our server, which is hosted by Hostinger.
3. Our server forwards it to Anthropic, whose Claude AI model identifies the item and estimates its value, and returns the result to your app.
4. Our server does not store the photo or the result. It only processes the request and records the technical metadata listed in section 2.
5. The photo and result are saved in the scan history on your device.

Anthropic processes the image under its commercial API terms. Under those terms Anthropic does not use API inputs or outputs to train its models, and it may retain inputs for a limited period for trust-and-safety purposes (such as detecting abuse) before deleting them. See Anthropic’s Privacy Policy for details.

Please avoid photographing people, documents or anything else containing personal information. Flipora only needs the item.

4. Camera and Photo Library

Flipora asks for access to your camera and photo library only so you can capture or select a photo of the item you want to identify. It does not scan, upload or read any other photos in your library. You can change these permissions at any time in iOS Settings > Flipora.

5. Purchases and subscriptions

Payments for Flipora Pro are processed by Apple through the App Store. Subscription management is handled by RevenueCat, which receives your anonymous device identifier and the App Store purchase information it needs to validate and track your subscription.

We receive only your subscription status (for example active or expired, which product, and purchase, renewal and expiry dates). We never receive your card details or other payment information. Apple’s Privacy Policy applies to the payment itself, and RevenueCat’s Privacy Policy applies to its processing.

6. Analytics, ads and tracking

Today the app records basic usage events (such as onboarding completed, scan started, paywall viewed and purchase) only to your device’s local system log, for debugging. These events are not sent to us or to anyone else. No third-party analytics, attribution or advertising SDK is integrated.

Flipora shows no ads, does not sell or rent personal data, and does not track you across other companies’ apps or websites.

We may add an analytics or attribution provider in the future. If we do, we will update this policy, and the App Store privacy details, before that version of the app is released.

7. Why we process data (legal bases)

• To provide the service you request (identifying items, estimating values, managing your subscription): performance of a contract (LGPD art. 7, V; GDPR art. 6(1)(b)).
• To keep the service secure and working (technical logs, abuse prevention, cost monitoring, debugging): our legitimate interests (LGPD art. 7, IX; GDPR art. 6(1)(f)).
• To meet legal obligations, such as tax rules or lawful requests from authorities (LGPD art. 7, II; GDPR art. 6(1)(c)).

8. Who we share data with

We share data only with service providers that help us run Flipora, and only as needed:

• Anthropic: AI processing of your photo and hint.
• Hostinger: hosting of our server and its logs.
• RevenueCat: subscription management.
• Apple: App Store distribution and payments.

We may also disclose data if required by law or a valid order from a competent authority, or in connection with a merger, acquisition or sale of assets, in which case this policy will continue to apply.

9. International transfers

Our providers may process data outside Brazil and outside your country, including in the European Union and the United States. Where this happens we rely on the safeguards permitted by the LGPD and other applicable laws, such as the providers’ contractual commitments and standard contractual clauses.

10. Retention

• Photos and results: not stored on our server. Stored on your device until you delete them or delete the app.
• Server logs: kept for up to 30 days, then deleted.
• Device identifier: stays on your device until you delete the app.
• Subscription records: kept by Apple and RevenueCat under their own policies and as needed for accounting and legal obligations.

11. Your rights and data deletion

Under the LGPD (and, where applicable, the GDPR, CCPA/CPRA and similar laws) you have the right to confirmation that we process your data, and to access, correction, deletion, portability, anonymization, information about sharing, and to object to or withdraw consent for processing. You may also file a complaint with Brazil’s data protection authority (ANPD) or your local authority.

Because Flipora has no accounts, most of this is in your hands:

• Delete a scan or your whole history: do it directly in the app.
• Delete everything on your device: delete the app. This removes your scan history and your device identifier.
• Server logs: email us at contact@studioludwig.com.br. Server logs are anonymous and cannot be linked to you by name; the app does not display your device identifier. Tell us roughly when you used the app and we will remove the matching entries. In any case, logs are deleted automatically after 30 days.

Cancelling your subscription does not delete data; manage it in iOS Settings. We will respond to requests within the time limits set by applicable law.

12. Security

All traffic between the app, our server and our providers is encrypted with HTTPS/TLS. Our API requires an app key, and the credentials for our AI provider are kept only on our server, never embedded in the app. Access to our server and logs is limited. No system is perfectly secure, but we work to protect your data and will notify you and the authorities of a relevant security incident as required by law.

13. Children

Flipora is intended for users aged 18 and over. We do not knowingly process data of children or adolescents. If you believe a minor has used the app and wish to raise a concern, contact us.

14. Changes to this policy

We may update this policy as Flipora evolves. The effective date at the top always shows the current version. If we make material changes, we will announce them in the app before they take effect.

15. Contact

For any privacy question or request, or to reach our data protection contact (encarregado), email contact@studioludwig.com.br or write to LUDWIG DIGITAL STUDIO LTDA, Av. Paulista, 1471, conj. 1110, Bela Vista, São Paulo/SP, CEP 01311-927, Brazil.