Privacy Policy

Last updated: July 30, 2026

This Privacy Policy explains how Flipped ("we," "us," or "our") collects, uses, and protects your information when you use our AI coding assistant and website.

1. Information We Collect

Account Information

When you create an account, we collect your email address, display name, and a password (stored as a salted hash). You may optionally provide additional profile information.

Usage Data

We log the following data when you use the Service through our API proxy:

• Model request metadata (endpoint, model name, request ID, timestamp)
• Token counts (input and output) for billing and rate-limiting purposes
• HTTP status codes and latency for performance monitoring
• Device label and IP address for session management

We do not log the content of your AI prompts, code, files, or AI responses — those pass through our proxy but are not stored.

Discord Data

If you verify your account via Discord, we collect your Discord user ID to check guild membership. We do not store messages or other Discord data.

Cookies

We use essential session cookies to keep you signed in. No tracking cookies, analytics cookies, or third-party cookies are used.

2. How We Use Your Information

• Authentication: to verify your identity and manage your sessions.
• Billing and limits: to track token usage and enforce plan limits.
• Security: to detect and prevent abuse, fraud, and unauthorized access.
• Communication: to send email verification codes and important service updates.

We do not use your data for advertising, profiling, or sale to third parties.

3. Data Sharing

We do not sell or rent your personal data. We may share limited data only in these cases:

• AI providers (Anthropic, OpenAI): your prompts are forwarded to these providers to generate responses. Their privacy policies apply to the data they process.
• Legal requirements: if required by law, court order, or to protect the rights and safety of our users.

4. Data Retention

We retain your account data for as long as your account is active. API request metadata (token counts, latency) is retained for up to 90 days for billing and rate-limit enforcement. You may request deletion of your account at any time.

5. Security

We use industry-standard security measures including encrypted storage of credentials, HTTPS for all data in transit, and short-lived session tokens. No security measure is perfect; we encourage you to use a strong, unique password.

6. Your Rights

Depending on your location, you may have the right to access, correct, delete, or export your personal data. To exercise these rights, contact us through our Discord server. We will respond within 30 days.

7. Children's Privacy

The Service is not intended for children under 13. We do not knowingly collect personal data from children under 13. If we learn we have, we will delete it promptly.

8. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated via email or through the Service. The date at the top of this page reflects the most recent update.

9. Contact

For privacy-related questions or requests, reach us through the Flipped Discord server.