Privacy Policy

flintEffective date: July 25, 2026

Introduction

At flint, we are committed to protecting your privacy. This Privacy Policy explains how we collect, use, and safeguard your personal information when you use our habit tracking application.

Data Controller

flint is operated by Vinicios Cunha, an individual developer based in Massachusetts, United States. For the purposes of the GDPR and similar data protection laws, Vinicios Cunha is the data controller responsible for your personal data. You can reach the controller at contact@getflint.app.

Information We Collect

Personal Information

  • Email address for account management
  • Username and profile information
  • Habit tracking data and photos
  • Social interactions and friend connections

Usage Information

  • App usage patterns and preferences
  • Device information and app version
  • Error logs and performance data
  • Feature usage and interactions

Content Information

  • Photos you upload as proof of habit completion
  • Comments and messages you post
  • Friend connections and social interactions
  • Calendar data and habit tracking information
  • Pacts you create or join, and your progress within them

How We Use Your Information

We use your information to provide and improve our services, including:

  • Provide and maintain your account
  • Process your habit tracking data
  • Enable social features, friend connections, and Pacts
  • Send important service notifications and reminders you enable

Information Sharing

Sharing with Other Users

Your profile information, posts, and habit completion data may be visible to your friends and other users based on your privacy settings.

Service Providers

We share information with the service providers that operate flint: Supabase (database, authentication, and photo storage), Vercel (website hosting and aggregate usage analytics), and, if you choose to sign in with them, Google or Apple. These providers process your data only to run the service on our behalf. We do not sell your personal information, and we do not share it with advertising networks.

Legal Requirements

We may disclose information if required by law or to protect our rights, property, or safety, or that of our users.

Data Security

We implement appropriate security measures to protect your personal information, including:

  • Encryption of data in transit and at rest
  • Private photo storage, served only through short-lived signed links
  • Row-level database rules that restrict data to your own account and approved friends
  • Monitoring for suspicious activity

Data Retention

We retain your personal information for as long as your account is active. When you delete your account, your profile, habit history, photos, and social interactions are removed from our production systems. Some records may persist briefly in encrypted backups or where we are required to keep them by law.

Your Privacy Rights

You have the following rights regarding your personal information:

  • Access and view your personal information
  • Download your data in a portable format
  • Update or correct your information
  • Delete your account and associated data
  • Opt out of certain data processing

Cookies and Tracking Technologies

We use local storage and similar technologies to keep you signed in, remember your preferences such as language and theme, and understand how the app is used. flint does not use advertising cookies, cross-site tracking, or advertising identifiers such as IDFA or AAID.

Children's Privacy

flint is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13.

In some countries the minimum age to consent to the processing of personal data is higher than 13. If you live in the European Economic Area or the United Kingdom, you may only use flint if you have reached the digital age of consent in your country, which ranges from 13 to 16. Below that age, a parent or guardian must consent on your behalf.

On-Device Data

If you add the flint Home Screen widget, the names and completion status of today’s habits are stored in a private container on your device so the widget can display them without opening the app. That data stays on your device and is removed when you delete the app. Streak cards are generated on your device, and flint does not receive a copy of an image you share.

International Transfers

Your information may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place to protect your data.

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page.

Contact Information

This Privacy Policy is issued by Vinicios Cunha. If you have any questions about it, or wish to exercise your data protection rights, contact us at contact@getflint.app.

Effective date: July 25, 2026

View all legal documents