PRIVACY POLICY

Flit is a link-sharing service that lets you flit files, links, and messages with automatic expiry. This policy explains what data we collect, how we use it, and how long we keep it.

• —Device identifier — a random ID generated on your device, used to associate anonymous flits with your device. Never tied to your name or email unless you create an account.
• —Flit content — the link, message, or file you choose to flit, stored only until the flit expires or is revoked.
• —View counts — how many times a flit link has been opened.
• —Account data (optional) — if you sign in, we store your email address, username, and a hashed password. We never store plaintext passwords.
• —Reports — if you report a flit, we store the reason and your device identifier so we can investigate.
• —IP address — captured when you create a flit and when you submit a report, used solely to investigate abuse. Not captured when you view a flit. See the retention section below for how long it is kept.
• —Bug reports (optional) — if you tap Report a Bug in the app, we send your description, the app version, and your iOS version and device model to our support inbox via a third-party email provider. Bug reports are not linked to your account and are deleted from the inbox once resolved.

• —To deliver the service — serving flit content to people with the link.
• —To enforce expiry rules you set — time limits and view counts.
• —To review reports of abusive content and take appropriate action.
• —To authenticate you if you choose to create an account.
• —We do not sell, rent, or share your data with third parties for advertising.

• —Flit content — files, media, messages, and links — is permanently deleted from our servers when a flit expires, reaches its view limit, or is revoked by you. File and media content is removed from cloud storage at the moment of expiry.
• —Account data is retained until you delete your account. Upon deletion, all data is permanently removed within 24 hours.
• —Deactivated accounts are retained for 30 days to allow reactivation, then permanently deleted.
• —Report records are retained for up to 12 months to allow investigation of abuse.
• —IP addresses attached to a flit are removed from our records when the flit expires, reaches its view limit, or has been inactive for 30 days — they ride the same lifecycle as the content they were captured with. IP addresses attached to a report are retained with the report record for the same 12-month window.

Flit does not use tracking cookies or third-party analytics. The only storage used is a device identifier saved locally on your device (localStorage on web, vendor identifier on iOS). This identifier is used solely to associate anonymous flits with the device that created them and is never shared with third parties.

We rely on a small number of cloud infrastructure, storage, and email providers to operate the service. We send these providers only what is necessary to deliver Flit and have not integrated any third-party analytics, advertising, or tracking services into the app or the website. File and media content is permanently deleted from our storage provider at the moment a flit expires or is revoked. Each provider operates under its own privacy and data-handling terms.

• —Access — You can export a copy of all data we hold about you at any time from the Account tab in the Flit app.
• —Correction — You can update your username and email address at any time from Account → Edit Profile.
• —Deletion — You can permanently delete your account and all associated data from Account → Delete Account.
• —Pause — You can deactivate your account from Account → Deactivate Account. This pauses your account for 30 days without deleting it.
• —Portability — Your exported data is provided in JSON format so you can use it elsewhere.
• —No marketing — We do not use your data for marketing or profiling.

To exercise any of these rights or ask a question, contact us at [email protected]. We will respond within 30 days.

You must be at least 16 years old to create an account. If you are under 16, you may use the service anonymously without registering. If we become aware that an account belongs to someone under 16, we will delete it promptly.

• —Account data (email, password) — needed to provide the account features you signed up for.
• —Flit content — needed to deliver the flitting service.
• —Server logs — used for security and abuse prevention.
• —Reports and IP addresses — used to review and act on reported content and to investigate abuse patterns.

Questions about this policy? [email protected]