Flamingo Privacy Policy

The short version

• We collect what you put into Flamingo, plus what we need to run your account and bill you.
• We don't sell your data, we don't show ads, and we don't share your household's information with advertisers.
• Card details go to Stripe; we never see them.
• Our analytics count only whether people get from our homepage through sign-up and on to checkout. They never include what you store in Flamingo.
• You can export your data or delete your account or household at any time, from Settings.

What we collect

Your account. Your email address, a password (stored only in hashed form by our authentication provider) and your display name.

What you add to your household. This includes:

• your household's name and the people in it, with their roles;
• people and contacts you add, such as family members, teachers, vets and contractors;
• recipes, meal plans and shopping lists, including dietary preferences;
• pets and their records (vet visits, vaccinations, weights);
• homes, appliances, maintenance schedules and service records;
• schools and activities, schedules, and the reminders you set;
• photos you upload.

Your household's time zone. We detect this from your browser when you create a household, so days and reminders line up with your local time.

Information about other people, including children. When you add someone to Flamingo, you're giving us information about them. Please add only people you have the right to add. See "Children" below.

Billing. When you start checkout, we send Stripe your account email address, before you enter a card, so billing emails reach you. Stripe then collects your card and billing address. It uses the billing address to calculate sales tax. We receive and store:

• your Stripe customer reference;
• your plan and billing interval;
• your subscription status and the dates of your trial and billing periods.

We never receive or store your full card number.

Billing emails. Stripe sends some emails on our behalf: a reminder before a free trial ends, and a notice when a card payment fails.

Product analytics. We use PostHog, hosted in the United States, to count a small number of steps: arriving on our homepage, signing up, confirming your email, creating a household and starting checkout.

• Each event carries an anonymous identifier. Once you confirm your email, events also carry your account's internal ID. Creating a household and starting checkout also carry your household's internal ID.
• Each event also includes the address of the page it happened on, the page you came from, and details of your browser and device: browser and operating system, language, screen size and time zone.
• When you confirm your email, we also record the first page you visited and how you reached us, including any campaign or ad tags in that link.
• To count visitors without cookies, PostHog calculates the anonymous identifier on its own servers from your IP address and browser details, using a random value it deletes each day. We've set PostHog not to store your IP address.
• Events never include your email, anyone's name, your household's name, or anything you store in Flamingo.
• We don't record sessions and don't automatically capture clicks or page content.
• Whether you paid, your trial and any cancellation are not sent to analytics.

Cookies and similar storage.

• Sign-in cookies keep you signed in. Flamingo can't work without them.
• fl_ae, a first-party cookie that lasts 60 seconds. It holds the name of a sign-up step and the pseudonymous IDs above. It is set only right after you sign up, confirm your email or create a household.
• Your light/dark preference, stored in your browser's local storage under the key theme. It never leaves your device.
• PostHog runs in cookieless mode. It sets no cookies and keeps nothing in your browser's storage.

Technical logs. Our hosting and infrastructure providers keep standard request logs, such as IP address, browser type and time of request, for security and reliability, and delete them after a limited period.

How we use it

• To provide Flamingo: store your household's information, show it to the people in your household, and send the reminders you set.
• To send you email you need: sign-in and confirmation codes, invitations, reminders, and messages about your account or subscription.
• To bill you and calculate and remit sales tax.
• To understand whether our sign-up process works (see "Product analytics").
• To keep Flamingo secure, prevent abuse, and meet legal and tax obligations.

We do not sell your personal information, use it for advertising, or share it with data brokers.

We do not use your household's information to train AI models.

Who can see your household's information

Inside your household. Members of your household can see its information according to their role. Coordinators can manage members and export the whole household.

Outside your household. Other households never see your household's information. This is enforced by the database itself, not just by the app.

Service providers. We use a few companies to run Flamingo. They process data only to provide their service to us:

Supabase

Database, sign-in and file storage

Vercel

Hosts the app

Resend

Sends our account, invitation and reminder emails

Stripe

Payments, subscriptions, sales-tax calculation and billing emails

PostHog

Product analytics, as described above

When the law requires it. We may disclose information if required by law, such as a valid subpoena or court order. Where we're allowed to, we'll tell you first.

If Flamingo changes hands. If Flamingo is transferred to a successor business, for example a company formed to operate it or a buyer, your information moves with it under this policy.

Children

Flamingo is built for adults running a household. Only people 18 and older can have a Flamingo account. Children are never invited to sign in. They appear in Flamingo only as information their parents or guardians add.

Parents and guardians can add information about their children, such as school, activities, schedules and pets. That information:

• stays inside your household;
• is never sent to analytics;
• is covered by your export and delete controls like everything else.

We do not knowingly collect personal information directly from children under 13. If you believe a child has given us information without a parent's involvement, contact us and we'll delete it.

Your controls

Export. From Settings, download a copy of your data as a ZIP file.

• A coordinator can export the whole household or just their own data.
• Other members can export their own data.
• The export is generated when you ask for it and sent straight to your browser. We don't keep a copy.

Correct. Edit anything you've added, directly in the app.

Delete your account. From Settings.

• If you're the only coordinator and others are in the household, you'll be asked to hand the household to someone else, or delete the whole household.
• Shared content you created, such as a recipe, stays with the household with your name removed from it.

Delete your household. Coordinators can delete the household from Settings. This removes the household's information and uploaded files.

Anything else. Email us (see "Contact"). We'll respond to access, correction and deletion requests from anyone, whatever state they live in.

How long we keep it

• While your account is active, we keep your information so Flamingo works.
• When you delete your account or household, we delete it from our live systems straight away.
• Backups. Copies may remain in our database provider's backups for up to 8 days before they expire.
• If your plan ends, we keep your household's information for 90 days, so you can pick up where you left off if you restart. We'll email you when your plan ends and again 14 days before deletion. During those 90 days you can still export or delete it yourself. After 90 days, we delete it.
• Billing records. Stripe and we keep them as long as tax and accounting law requires.

Security

• Data is encrypted in transit and at rest.
• Each household's data is isolated at the database level, and we test that isolation directly.

No system is perfectly secure. If a breach affects your personal information, we'll notify you as the law requires.

Where your data is stored

Flamingo is offered only in the United States, and your data is stored in the United States.

Changes to this policy

If we make a material change, we'll tell you by email and in the app at least 30 days before it takes effect. Changes required by law, or that only add protections for you, may take effect sooner. The effective date at the top always shows the current version.

Contact