FlamingoThis Privacy Policy explains what data Flamingo ("we", "our", "us") collects when you use the Flamingo mobile app ("App") or our website at https://tryflamingo.app, how we use that data, and the rights you have over it.
If you have questions, email us at privacy@tryflamingo.app.
1. Who we are
Flamingo is operated by RRDL Ltd ("RRDL"), the data controller for your personal data.
- Registered contact: privacy@tryflamingo.app
- Website: https://tryflamingo.app
For EU/UK users, RRDL is the controller under the GDPR/UK-GDPR. For California users, RRDL is the "business" under the CCPA/CPRA.
2. The short version
- You can use the App without creating an account.
- We collect the minimum data needed to run the App — photos of your clothes and optional selfies, the items you save, and anonymous usage analytics.
- We do not sell your personal data.
- We do not show you ads inside the App.
- Your photos are private to you. They are never made public and never shown to other users.
- You can delete your data at any time from Profile → Delete Account, or by emailing us.
3. What we collect
3.1 Data you give us
- Photos of your clothes and (optionally) selfies, uploaded to generate a digital wardrobe and AI try-on results.
- Style preferences you enter (favorite colors, occasions, body type if provided).
- An anonymous user ID issued automatically by Firebase Anonymous Authentication on first launch. This ID is opaque, device-scoped, and not linked to your name or email. We do not collect a name, email, password, or social-login identifier.
- Support messages you send to us.
3.2 Data collected automatically
- Device info: model, OS version, language, timezone, app version, crash logs.
- Usage analytics: screens viewed, features used, events like "outfit generated" or "try-on started". All events are attached to an opaque random ID, not your name or email.
- Country: resolved from your device locale, or from an optional location permission if you grant it for weather.
- IDFA (advertising identifier): only if you grant App Tracking Transparency (ATT) permission. Used solely for ad-campaign attribution.
- Purchase records: managed by Apple + RevenueCat. We receive a receipt and an opaque user ID, never your payment details.
3.3 Data we do NOT collect
- We do not collect contacts, messages, calendar events, microphone audio, health data, motion data, or browsing history from other apps.
- We do not scan your photo library beyond the specific photos you choose to import.
4. Why we use your data (lawful bases)
| Purpose | Data used | Lawful basis (GDPR) |
|---|---|---|
| Provide core app features (wardrobe, outfit gen, try-on) | Photos, preferences | Contract (Art. 6(1)(b)) |
| Anonymous session | Firebase anonymous user ID | Contract |
| Subscription management | Purchase receipts, opaque ID | Contract |
| Product analytics + crash reporting | Device info, events, opaque ID | Legitimate interest (Art. 6(1)(f)) |
| Ad attribution (AppsFlyer) | IDFA (if ATT granted) | Consent (Art. 6(1)(a)) |
| Customer support | Messages you send | Legitimate interest |
| Legal compliance / fraud prevention | All of the above | Legal obligation (Art. 6(1)(c)) |
For California users: the categories of personal information we collect map to "identifiers", "customer records", "commercial information" (subscriptions), "internet/network activity" (app usage), "geolocation" (coarse, from locale or permission), "sensory data" (photos), and "inferences" (style preferences).
5. Who we share data with
We share only the minimum needed to run the App. Every partner below is bound by a data-processing agreement.
| Partner | What they receive | Purpose | Location |
|---|---|---|---|
| Amazon Web Services (S3) | Your photos | Storage, served via short-lived signed URLs | EU (eu-west-2) |
| Fly.io | API requests | App hosting | EU (lhr, London) |
| Firebase (Google) | Opaque UID, crash logs, remote-config flags | Auth, Crashlytics, Remote Config | US |
| RevenueCat | Opaque user ID, receipt | Subscription management | US |
| Mixpanel | Anonymous events, distinct ID | Product analytics | US/EU |
| Google Analytics (tryflamingo.app and the web app at app.tryflamingo.app) | Pages viewed, events, device and browser type, approximate location, opaque ID. In the EEA, UK and Switzerland no analytics cookies are set. | Website analytics | US |
| AppsFlyer (only if ATT granted) | IDFA, install referrer | Attribution | EU |
| fal.ai | Uploaded photo, stripped of EXIF | AI try-on generation; deleted after processing | US |
| OpenRouter + Mistral | Short-lived image URL, text preferences | AI classification / outfit reasoning | US/EU |
International transfers rely on Standard Contractual Clauses (EU) or the UK IDTA. You can request a copy at privacy@tryflamingo.app.
We do not sell personal information, and we do not share personal information for cross-context behavioral advertising, as those terms are defined by the CCPA/CPRA.
6. How long we keep data
- Photos and wardrobe items: until you delete them or delete your account. Deleted items are purged from S3 within 30 days.
- Analytics events: retained for 13 months, then deleted.
- Crash logs: retained for 90 days.
- Support messages: retained for 3 years (to defend against disputes), then deleted.
- AI generation inputs (sent to fal.ai / Mistral): deleted after the request completes.
If you delete your account, we remove your personal data from production systems within 30 days and from backups within 90 days.
7. Your rights
You have the right to:
- Access the personal data we hold about you.
- Correct inaccurate data.
- Delete your account and data (from Profile → Delete Account, or by email).
- Export your data in a portable format.
- Object to processing based on legitimate interest.
- Withdraw consent for ATT at any time via iOS Settings → Privacy & Security → Tracking.
- File a complaint with your local data-protection authority (in the UK: the ICO).
California residents additionally have the right to opt out of "sale" or "sharing" under the CCPA — because we do neither, the opt-out toggle is preset to "off", but you can request confirmation in writing at privacy@tryflamingo.app.
To exercise any right, email privacy@tryflamingo.app. We respond within 30 days (GDPR) or 45 days (CCPA).
8. Children's privacy
Flamingo is rated 12+ and is not directed to children under 13 (or 16 in the EU/UK). We do not knowingly collect personal data from children. If you believe a child has used the App, email privacy@tryflamingo.app and we will delete the account.
9. Security
- Transport: HTTPS (TLS 1.2+) for every request.
- Storage: photos served via time-limited signed URLs (minutes, not public links).
- Auth tokens: stored in the iOS Keychain (
SecureStore). - We do not store passwords. There is no account creation, social login, or email-based sign-in — every session is bound to an anonymous Firebase user ID.
- Internal access to production data is restricted to engineers who need it, under least-privilege IAM policies.
No system is 100% secure. If we discover a breach that affects you, we will notify you within 72 hours, as required by GDPR.
10. Changes to this policy
We will post material changes here and, if the change affects how we use existing data, we will notify you in-app. Continued use of the App after a change means you accept the updated policy.
11. Contact
Privacy questions: privacy@tryflamingo.app Security issues: security@tryflamingo.app General support: support@tryflamingo.app
Postal address available on request.