Privacy Policy

This Privacy Policy explains how we collect, use, and protect information when you use Flipsta, our reseller inventory and profit tracking app (the "App"). If you have questions, contact us at m.budziat@gmx.de.

1. Who is responsible?

Data controller / responsible party:
Maximilian Budziat
Georgia, Tbilisi City, Zakaria Paliashvili Street, N 41
m.budziat@gmx.de

2. What the App does

Flipsta helps resellers and small merchants manage their inventory, track buy and sell transactions, calculate profits using FIFO accounting, and view business analytics. You can add products with photos, log transactions with prices and conditions, organize items by categories, and monitor your cash flow and margins through a visual dashboard. Users can sign up and log in using email/password, Sign in with Apple, or Google Sign-In.

3. What information we collect

Account & authentication

• Email address (if you register with email)
• Authentication identifiers (Firebase user ID; Apple/Google identifiers as provided during sign-in)
• Account metadata (e.g., account creation time, last sign-in time)

Inventory and transaction data you create

• Product information (names, photos, categories, notes)
• Transaction records (buy/sell type, quantities, prices, dates, item condition)
• Calculated data (profits, cost basis, stock levels, analytics)

Product images

• Photos you take or select for your products (stored in Firebase Storage)

User preferences

• App settings (preferred currency, theme mode, custom categories)

Technical data

• Basic device/app data needed to operate the service (e.g., timestamps, technical logs)

What we do NOT collect

• Personal identification (name, address, phone number)
• Location data
• Contacts
• Browsing history
• Third-party tracking or advertising data

We do not send marketing emails. You may receive only necessary service emails related to authentication (for example, password reset or login/security emails).

4. How we use your information

• To create and manage your account and authenticate logins
• To store and sync your inventory, transactions, and product images
• To calculate profits, analytics, and business insights within the App
• To provide core functionality (e.g., password resets, account recovery)
• To maintain security, prevent abuse, and troubleshoot issues

5. Legal bases (EEA/UK users)

If you are in the EEA/UK, we process personal data under these legal bases:

• Contract (to provide the App's features to you)
• Legitimate interests (security, fraud prevention, service reliability)
• Consent (only when required by law for specific processing)

6. Services and processors we use

We use Firebase (Google) for authentication, database hosting, and image storage. When you use Google Sign-In or Sign in with Apple, those providers process authentication as part of the login flow.

• Firebase Authentication (email, Apple, Google sign-in)
• Firebase Database (to store inventory, transactions, and analytics data)
• Firebase Storage (to store product images)

These providers may process personal data on our behalf as "processors" and/or as independent controllers for their own services. Please review Apple and Google privacy information for details about their processing.

7. Data retention

We retain your data while your account is active. If you delete your account, we delete or anonymize your personal data associated with the account, including your inventory, transactions, and product images, unless we must keep certain data to comply with legal obligations, resolve disputes, or enforce our agreements.

8. Account deletion

You can delete your account directly in the App. When you request deletion, we remove your account and associated data stored in our Firebase backend, including all inventory data and product images. If you need help, contact m.budziat@gmx.de.

9. Your rights

Depending on your location, you may have rights to:

• Access your personal data
• Correct inaccurate data
• Delete your data
• Object to or restrict certain processing
• Data portability
• Withdraw consent (where applicable)

To exercise rights, email m.budziat@gmx.de. We may ask you to verify your identity.

10. Security

We use reasonable technical and organizational measures to protect your data, including encrypted cloud storage through Firebase. No method of transmission or storage is 100% secure, but we aim to protect information against unauthorized access or disclosure.

11. Children

The App is not intended for children under the age required by local law to consent to data processing. If you believe a child has provided us personal data, contact us and we will take appropriate steps.

12. Changes to this policy

We may update this policy from time to time. We will update the "Last updated" date above. Continued use of the App means you accept the updated policy.