Privacy Policy

1. Information we collect

• Account information. When a parent or guardian creates a family account, we collect an email address and a password. Your password is stored securely by our authentication provider (hashed, never in plain text), and we never see it.
• Family profiles. You can create profiles with display names (for example, a child's first name or nickname) so your family can track who scanned what. These are labels you choose; children do not create their own accounts and do not provide us any information directly.
• Toy and listing data. Photos you take of toys, and details about them such as product name, brand, condition, prices, listing text, and sale records.
• Goal and household data. Your household name, a savings goal, an optional pickup area, and activity within the app (for example, scans and sales) used to power progress and features.
• Technical data. Basic information needed to run a secure web app, such as session cookies for keeping you signed in, and standard server logs.

We do not intentionally collect payment card details. If paid plans become available, payments will be handled by a third-party payment processor, and we will not store your full card number.

2. How we use your information

• To provide the app: identify toys, research and suggest prices, and prepare listings.
• To save your household's toys, goals, and sales so you can pick up where you left off.
• To keep your account secure and prevent abuse.
• To improve ToyFlip and fix problems.
• To contact you about your account or important service updates.

We do not sell your personal information, and we do not use it to serve you third-party advertising.

Legal bases (EEA/UK). If you are in the European Economic Area or the United Kingdom, we process your information to perform our contract with you (to provide the app you signed up for), on the basis of our legitimate interests in keeping ToyFlip secure and improving it, and to comply with our legal obligations. Where we rely on consent, you can withdraw it at any time.

3. Children's privacy

ToyFlip is designed to be used by a parent or guardian. Children do not create accounts, do not log in, and do not provide us information directly, a grown-up sets everything up and stays in control. A child's name may be used only as a display label your family chooses, and a child's name is never shown in a public listing. We do not knowingly collect personal information from a child in a way that requires verifiable parental consent under laws such as COPPA. If you believe a child has provided us information without a parent's involvement, contact us and we will delete it.

4. How your information is shared

We share information only with service providers that help us run ToyFlip, and only as needed to provide the app. These include:

• Hosting and database (Vercel, Supabase) to run the app and securely store your account and household data.
• AI identification (OpenAI): the toy photos and related text you submit are sent to be identified and analyzed.
• Reverse-image search (SerpApi / Google Lens): a toy photo may be sent to find visually similar listings so Finn can identify and price the item.

These providers process your data on our behalf to deliver their service. Our AI identification provider (OpenAI) states that data submitted through its API is not used to train its models. For reverse-image search, a photo is sent to a search provider to find visually similar listings, and that provider handles it under its own terms, which we do not control. We do not sell or rent your personal information, and we do not use it for advertising. We may also disclose information if required by law, or to protect the rights, safety, and security of our users and ToyFlip.

International transfers. ToyFlip is operated from the United States, and our service providers may process your information in the United States and other countries. If you use ToyFlip from outside the United States, your information will be transferred to and processed in the United States, where data-protection laws may differ from those in your country. Where required, we rely on appropriate safeguards (such as standard contractual clauses) for these transfers.

When you post a listing, you do so yourself on Facebook Marketplace. ToyFlip never posts automatically and does not store buyer information. Anything you post on Facebook is governed by Facebook's own terms and privacy policy.

5. Your toy photos

Photos you take are stored securely with our hosting provider so you can review and edit your listings, and are associated with your household (not with a child's public identity). To identify and price a toy, a photo may be sent to the providers listed above. You should avoid including children's faces, documents, addresses, or other personal information in a toy photo. Photos may retain standard file metadata (which can include the location where a photo was taken); we do not use this metadata, and we recommend turning off location tagging on your camera. You can delete individual toys and their photos, or your entire account, at any time (see "Your choices" below).

6. Data retention

We keep your information for as long as your account is active or as needed to provide the app. You can delete your data at any time (see "Your choices" below). When you delete your household or account, we remove your associated data, including stored photos, from our systems, except where we must keep limited records to comply with legal obligations.

7. Your choices and rights

• Access and correct. You can view and edit your household's information within the app.
• Export. You can export your household's data from the app's settings.
• Delete. You can delete your account and household data from the app's settings; this is permanent.
• Contact us to make any privacy request. Where required by law, we honor rights to access, correct, delete, or port your personal information.

EEA and UK residents. Subject to applicable law, you have the right to access, correct, delete, restrict, or object to our processing of your personal information, to data portability, and to withdraw consent. You also have the right to lodge a complaint with your local data-protection supervisory authority.

California residents. Subject to the CCPA/CPRA, you have the right to know what personal information we collect and how we use it, to access and delete it, and to correct it. We do not sell or share your personal information as those terms are defined under California law, and we will never discriminate against you for exercising your rights.

To exercise any of these rights, use the in-app controls above or email us at nick@getamplifiedmarketing.com. We will verify a request against your account before acting on it.

8. Security

We protect your data with industry-standard measures, including encryption in transit, access controls that keep each household's data private to that household, and a parent PIN that gates sensitive actions. No method of transmission or storage is 100% secure, but we work hard to protect your information.

9. Cookies

We use only the cookies needed to keep you signed in and to run the app securely. We do not use advertising or cross-site tracking cookies.

10. Changes to this policy

We may update this policy from time to time. When we do, we will revise the "Last updated" date above and, for significant changes, provide a more prominent notice. Your continued use of ToyFlip after an update means you accept the revised policy.

11. Contact us

If you have questions or requests about this policy or your data, contact us at:

Amplified Marketing Group
Tampa Bay, Florida
nick@getamplifiedmarketing.com
toyflip.app