Loading...
Last Updated: January 9, 2026 | Version 3.0
RelationFlips is committed to protecting your privacy. This policy explains what data we collect, why we collect it, how we use it, and your rights to control your information.
Key principle: We never sell your personal data. Your relationship conversations belong to you.
IMPORTANT - Sensitive Data Notice:
RelationFlips conversations may involve sensitive topics including:
We process this data ONLY with your explicit consent for AI analysis (Plus tier). You control what you share, and you can delete this data anytime.
All payment transactions are processed by Stripe, a PCI-DSS Level 1 certified payment processor. We never store, process, or have access to your complete payment card information.
For more information: Stripe Privacy Policy
We process your personal data based on the following legal grounds under GDPR Article 6:
| Data Type | Legal Basis | Purpose |
|---|---|---|
| Account Information | Contract | Necessary to provide Service |
| Payment Processing | Contract | Process purchases/subscriptions |
| Conversation Data | Contract | Store your session progress |
| AI Analysis (Plus) | Consent | Optional AI-powered insights |
| Analytics | Legitimate Interest | Improve product, fix bugs |
| Marketing Emails | Consent | Product updates (opt-in only) |
We share limited data with trusted service providers who help us operate RelationFlips:
| Service Provider | Purpose | Data Shared |
|---|---|---|
| Clerk | Authentication | Email, name, user ID |
| Stripe | Payment Processing | Email, payment info, transaction details |
| Supabase | Data Storage | All user data (encrypted at rest) |
| Anthropic (Claude AI) | AI Analysis (Plus) | Session transcripts (temporary, not stored by Anthropic) |
| AssemblyAI | Voice Transcription (Plus) | Audio files (temporary, deleted after transcription) |
| PostHog | Analytics & Session Recordings | Usage data, device info (conversation content masked) |
| Vercel | Hosting & CDN | Technical data (IP, device type) |
All service providers are bound by Data Processing Agreements (DPAs) and must comply with GDPR and CCPA. We do not share your data with any parties not listed above without your explicit consent.
Important Security Notice: No method of transmission over the internet is 100% secure. While we use industry-standard security measures, we cannot guarantee absolute security.
If you suspect a security breach: Immediately contact security@relationflips.com
Cookies are small text files stored on your device that help us improve your experience. We use cookies for essential functions (authentication), analytics (understanding usage patterns), and session recordings (watching how users interact with our interface to improve UX).
| Cookie Type | Purpose | Duration | Required? |
|---|---|---|---|
| Essential | Authentication, security, session management | Session/30 days | ✓ Yes |
| Analytics | Usage patterns, feature adoption, conversion tracking | 1 year | Optional |
| Session Recording | Watch user interactions to improve UX | 90 days | Optional |
We use PostHog (a privacy-focused analytics platform) to record how users interact with RelationFlips. These recordings help us identify UX issues, fix bugs, and improve the product.
We use "balanced masking" technology that automatically hides:
Session recordings are automatically deleted after 90 days. You can request immediate deletion by contacting privacy@relationflips.com.
Through PostHog and other analytics tools, we collect:
We use cookies, analytics, and session recordings to:
You can disable session recordings at any time:
You can disable analytics tracking:
Important: Essential cookies (authentication, security) cannot be disabled as they're required for the Service to function. Opting out only affects optional analytics and session recordings.
We use the following third-party analytics services:
| Provider | Purpose | Privacy Policy |
|---|---|---|
| PostHog | Product analytics, session recordings, feature flags | PostHog Privacy |
| Vercel Analytics | Performance monitoring, Web Vitals tracking | Vercel Privacy |
All analytics providers are GDPR-compliant and process data according to their own privacy policies. We have Data Processing Agreements (DPAs) with all providers handling European user data.
We respect browser "Do Not Track" (DNT) signals. If your browser sends a DNT signal, we will:
To enable Do Not Track:
You have the following rights regarding your personal data:
To exercise any of these rights, visit your Dashboard Settings or contact privacy@relationflips.com. We will respond within 30 days (GDPR) or 45 days (CCPA).
California residents have specific rights under the California Consumer Privacy Act (CCPA):
| CCPA Category | Examples | Collected? |
|---|---|---|
| A. Identifiers | Email, name, IP address, device ID | ✓ |
| B. Personal info (CA Civil Code § 1798.80) | Name, payment information | ✓ |
| C. Protected classifications | Age (18+ verification only) | ✓ |
| D. Commercial information | Purchase history, subscription tier | ✓ |
| E. Biometric information | Voice recordings (Plus tier) | ✓ |
| F. Internet/network activity | Browsing history, usage data | ✓ |
| G. Geolocation data | IP-based location (city/state) | ✓ |
| H. Sensory information | Voice recordings (Plus tier) | ✓ |
| I. Professional/employment info | N/A | ✗ |
| J. Education information | N/A | ✗ |
| K. Inferences | Relationship insights (Plus tier, with consent) | ✓ |
✓ We do NOT sell your personal information.
✓ We do NOT share your personal information for cross-context behavioral advertising.
We have NOT sold or shared personal information in the preceding 12 months and have no plans to do so in the future.
Residents of these states have similar rights to California residents:
Exercise rights by visiting Settings → Privacy or emailing privacy@relationflips.com
European Union, UK, and EEA residents have rights under GDPR:
We store data primarily in the United States. For EU data transfers, we use:
To exercise GDPR rights or file complaints, contact privacy@relationflips.com
RelationFlips is based in the United States. If you access our Service from outside the US, you consent to the transfer, storage, and processing of your information in the US and other countries where our service providers operate.
Data protection standards: We apply the same privacy protections globally, regardless of where you're located. All users benefit from GDPR and CCPA-level privacy rights.
| Data Type | Retention Period | Reason |
|---|---|---|
| Active Account Data | While account active | Service delivery |
| Deleted Account Data | 30 days (recovery period) | Allow account recovery |
| Voice Recordings | Deleted after transcription (< 24 hours) | Temporary processing only |
| Session Recordings | 90 days | UX analysis and debugging |
| Payment Records | 7 years | Tax compliance, fraud prevention |
| Support Communications | 3 years | Customer service quality |
| Analytics/Logs | 1 year (anonymized after 90 days) | Product improvement, security |
After retention periods expire, we securely delete or anonymize data so it cannot be associated with you.
AGE RESTRICTION: 18+ ONLY
RelationFlips is intended exclusively for users 18 years of age or older. We do not knowingly collect, use, or disclose personal information from anyone under 18.
If you are under 18: If you are under 18, do not use this Service or provide any information.
If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately at privacy@relationflips.com. We will delete such information within 30 days.
We may update this Privacy Policy periodically to reflect changes in our practices, technology, legal requirements, or business operations.
How we notify you:
Material changes: Changes affecting how we use sensitive data, AI processing, or sharing practices will require your renewed consent.
Continued use after changes constitutes acceptance. If you disagree with changes, you must stop using the Service and request account deletion within 30 days.
Questions, concerns, or requests about this Privacy Policy or your data?
Privacy Inquiries:
privacy@relationflips.com
Security Concerns:
security@relationflips.com
General Support:
support@relationflips.com
Mailing Address:
RelationFlips, LLC
Attn: Privacy Team
[ADDRESS TO BE ADDED BEFORE LAUNCH]
We typically respond to privacy requests within 30 days (GDPR) or 45 days (CCPA).
By using RelationFlips, you acknowledge that you have read and understood this Privacy Policy and agree to the collection, use, and disclosure of your information as described herein.